Malware Analysis Report

2024-09-22 16:40

Sample ID 230302-blsfnsae4y
Target 35c34967d389c069ea5a70aaa4dad290.bin
SHA256 31d7d798d1cde0d978be8aece150160aa2e4da4ce9e5e85972dc2e15e8c8d03b
Tags
babadeda crypter evasion loader trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

31d7d798d1cde0d978be8aece150160aa2e4da4ce9e5e85972dc2e15e8c8d03b

Threat Level: Known bad

The file 35c34967d389c069ea5a70aaa4dad290.bin was found to be: Known bad.

Malicious Activity Summary

babadeda crypter evasion loader trojan

Babadeda Crypter

Babadeda

Loads dropped DLL

Executes dropped EXE

Checks whether UAC is enabled

Enumerates physical storage devices

Checks processor information in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix V6

Analysis: static1

Detonation Overview

Reported

2023-03-02 01:14

Signatures

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2023-03-02 01:14

Reported

2023-03-02 01:17

Platform

win10v2004-20230220-en

Max time kernel

128s

Max time network

141s

Command Line

"C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe"

Signatures

Babadeda

loader crypter babadeda

Babadeda Crypter

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe

"C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe"

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

"C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 8.3.197.209.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 210.81.184.52.in-addr.arpa udp
US 8.8.8.8:53 42.220.44.20.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 65.193.24.20.in-addr.arpa udp
US 8.8.8.8:53 250.108.137.52.in-addr.arpa udp
US 8.8.8.8:53 226.101.242.52.in-addr.arpa udp
US 8.8.8.8:53 164.113.223.173.in-addr.arpa udp
US 8.8.8.8:53 151.122.125.40.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 99.113.223.173.in-addr.arpa udp
US 8.8.8.8:53 113.66.64.40.in-addr.arpa udp
US 8.8.8.8:53 97.97.242.52.in-addr.arpa udp
US 8.8.8.8:53 250.255.255.239.in-addr.arpa udp
US 8.8.8.8:53 9.57.101.20.in-addr.arpa udp
US 8.8.8.8:53 240.232.18.117.in-addr.arpa udp
US 8.8.8.8:53 126.178.238.8.in-addr.arpa udp
US 8.8.8.8:53 1.208.79.178.in-addr.arpa udp
US 8.8.8.8:53 126.179.238.8.in-addr.arpa udp
US 20.189.173.11:443 tcp
US 8.8.8.8:53 64.13.109.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR834E.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR83DC.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8498.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR84C8.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR84F8.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8576.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR85A6.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8662.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8857.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8897.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR88D6.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\python-3.6.9-4.tar

MD5 d948bb94494348c51694553ef558e3b2
SHA1 7231990bbf6d55fc22ed3aa923845ce0d472a93d
SHA256 917cd8eb876d1f77ff1750a0b48a1e6f85d5f16f2caf113a3ebb52660a1fa5c5
SHA512 3e3c7b8e3dc6bfa53857c6a29b5ac0c6a05caa02b3a028ad1e6b266a3e756dfce1e509ac4b353e0c9efc7b80878dd37ed55182d98d234eb71711e67bb172c130

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\removed-files

MD5 95c5af7af5cce4af76f94a5a339deb34
SHA1 7b549d6f769d23d9dc73e3bceee6e0209e561363
SHA256 9c928f3eb41faa3465a2a672af976432f7b0e65aff527c1747a346b5a514f572
SHA512 14c2dc57a4cea69c3f4be44ff7e11196ca35513bc3afa95838bf0e04e0ae047abb6da720aecaa938c9b800dea5a84cf63e434c8870f27dcc12b9803842f46eec

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.ini

MD5 f3ccae543ad159738db80023d96495c0
SHA1 35829d3207577500fe07ab9e4bf445127b7e60ef
SHA256 ab5e110f7c75f27e772a29321240dc8621e9c7cb3909b5de3d419c12d0d5ef86
SHA512 a3f8eb5127bbd945d4d1c43a573b5ebbcd375e14cf9a8dc83e7e33d23445beac161769878f2c2b5e023cdb2554586739e91ad863da49baec6f89aae46e242b36

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\update-settings.ini

MD5 f792f87b62ca28cb5e81049b66583f97
SHA1 d4bfe85e8353149e981d517e970a75845c470bad
SHA256 99e82ee4b089ac404e9dfe1c2e521153b2622a50dc6e2cdd668606c1a7c3243e
SHA512 292054c0a794037efff9b52d1965f5103ec4b7bcbf28a85701d9d7981a1d57f8ea9a04b7ffe374f14207728b7243a888fec8ae6b984f02db376316eea15679c9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-debug-l1-1-0.dll

MD5 bf8a71efcaa8260de58ab657dbf624c6
SHA1 48a1e8fd73c0b16304f0fafd6e7f6b5efb476314
SHA256 c3003ff52917dbac5d3feec1bdea8ad4163893ec2d320f904b6d3698a6dbc7bc
SHA512 e1284fe0c7f42204043320322dbbaadfe194aae4eef0aa863b25176107ec9900a2a0dfe4778b7ca5960d6b187e7cc61e028bd02ae0dae20a90591e33165dbc0f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-1-0.dll

MD5 efbbbcef1514840d5ad9d8c084a0147e
SHA1 d046a440556ff7b9857963d86dd050ccd6b0533c
SHA256 9c1d190c85b9ccfb171d3db4ec363c97a3452bb365dd75dbda5ec9cad1a5d803
SHA512 fe78850b3acaa725f4a3f65fccc3c2644ef43eebe3c0083c0d4e9e967cfb230d966dee87dcd8a27f4dc452d7e72ea7efb24ab7b9dbcd58ab81f78d0d110829bc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-string-l1-1-0.dll

MD5 01cbaa0aafba1275cc23c29f139d399e
SHA1 5ca1434545c02c3f34bc9facf9b2eecc89ec3a24
SHA256 dcb3fc36c43a402b4b35644f1e7f6d6db31ef8d0a731c3b882e2cf3201a6714c
SHA512 f5a3d05690bf409d2b8d7eb96ac4fde1e2d27add79945d6d9f2482ee61c6698ee0e167e9677a61a435d99175979e8651f34b92a6d057236254a0a2ba1a9cc79f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 cec2f0ac232cd07d217299386118692b
SHA1 7cd8218afc5ccf528bb2807168e11e5820c8bddd
SHA256 a5f4f23b01cac69058b7ec0e30b470f90bfc6d40de20e618c3045bf06e4a2cfd
SHA512 e06fc36de71caec6732d2553b5afcd6daf0b8eb4f1aea7d6f6c2ae00b3e3f4172c932458ebb6644e41dd26a48b66dbe935a40bcee68aa7cad4af155befe7019f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-profile-l1-1-0.dll

MD5 258caf72fd7c60586b4bacfee6b37872
SHA1 4a473ff7cdf254336cf2ff3ddeb03bd047b35af5
SHA256 04c0a5392a18a7555635cde23f9111ea4da550c309827b725a74bb6fd4f0cc64
SHA512 121a366f79ca1c9212d109d1f72a53b31f0bf0394b947949e2a0191629ace8ed107118e512bc8f4e9b43a84b6c936422372be2ff497f2cf13276217b15d079c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-0.dll

MD5 2557484c75d4507688b68a64882e0022
SHA1 ff78c6d44f7474d98402f8e17cfce5d712c41b95
SHA256 50b3e4ffee430c1b45f0ca75959936608f756ae5eb0352e8f3f5f69c5adfaa20
SHA512 e1c502e889664a46acaf0d8cab5d5082f46ad3f6f1a24ec702ec5174d077fff51cce7f80b13c5c22704937ce380ec3b14c088955d94eef1050d293c078869870

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 56813b784a1f8cdabedcc10de6e84864
SHA1 b636ba140e1ba7de5e59932702e7b4e53025d651
SHA256 98ee724aa3f5a8ec4f3f8596be5aba5cd19b556f88ef9fbaff1569051a4d0dc1
SHA512 f11739be9ff624044035678cf39b91d28a53f1ac56342baf985a4328da4c64c81107d7e1787ee50efb382472e4d46bb21c520918b8831edc7f6b3db70befa068

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 a8f889870885c5784afd47f5e3d33eed
SHA1 494b86c51c8908d17e563c80da0d42350aaf1155
SHA256 8979fe86afe23035caedd5df135786da2b28c095b69ce0179b6484fd680c9b91
SHA512 bb18675a9b311e4c34806ec834886659a95207a4ec9b48b082f5fa0e05f016b9f946db29c7aa20662b4090c7f42a606f9f3a5df48d7ed20c5b404ccf91a1b7eb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 aed0b2511a396bb258a7bc7bb646b951
SHA1 151b08d20538990b894afef34de451708b5f334e
SHA256 fb7ffa16bfdf7392535b8e78a86db89ed9032f67a16b127a105582fab118cf2b
SHA512 dd7cdb5f401dce1566e331a3184ebd2c71f6d2dc4eb59f384bfb2daea8ce8a146d7449d989da2193abf30cd568e67bc932e28c8b93c7d6beceac0c7cb9ae1f5c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-util-l1-1-0.dll

MD5 7294cef433dd8afa73982ea96dbd6f6a
SHA1 c73b123197e6ad47b13febeafa912fdad566c8ee
SHA256 21c57c8ae9407cedb50bcebf7f844a5933d274676f3194a87997672c7177cadb
SHA512 24048bd06f0a3ce593eadab4fee4e26aa339faba52ae52dd36f0c66ee5d7c166f68fff8ff5dbfffde26588351ca4b6de033528dd4b0a15b0afe3ddcaf13b8661

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-memory-l1-1-0.dll

MD5 98b1e6d052cee5ccbb7e5af795b9f48c
SHA1 357ef3f8011d7e7f1d4cb30beae58d24d6b05085
SHA256 5c950723ff3118801884df67b6a14543978263a2d2a0437d8c8b2fe8ef3925d4
SHA512 31d961ada87eedfc4c1bb8938b0c4b44842153f4450f48a0c1dc12208f5c1ba62b076ef91a0dbd1c3f98d1e96517904b95e072002c50d2873c8638ddb25417d7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 b0537a9eccc0f909c0715fc93b473d8d
SHA1 79e9929c83f5f73314c52f26be4147a74aa80e23
SHA256 8784c4912a2f391d5f0c79b38f48baf88e98bf4fa61614ccb9232d9bd1e4ad54
SHA512 d68e50361566e8800afb5fae32c65c90d2ac7877f9a02f3e2e6af61ccd8f99b484c808a9ba62ec9e4727481798b3d3f4f74d19b16c6ed80536cf89351071bab6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-interlocked-l1-1-0.dll

MD5 8dcf3111501ed0a01855ebb328537bf7
SHA1 2134bca1fa16133632a1b3f28fc38edc15e933ac
SHA256 76f092341fbef40d5f35f70bab55f2eeb3e70a9b60f46043b342ceab7f79cef1
SHA512 4cb596ca11b4941571f3b998c98707bdf45ad608c9f661e0f0ae528fdb797190c9bb22e58ff65a98e52e3e51396f4c8b22229eefe54f0a73eb49c79d07ce1604

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-heap-l1-1-0.dll

MD5 6e306654a55454e40889407e9334da0c
SHA1 0612894d9fbd8f92299541535f78db05fba3a78e
SHA256 eb02fc995bb92b214dd684e24c1060735f61ad4884ccb4aafa86c7c1de66d621
SHA512 f5a6980824cbfa82c47b20581658eb9fa8eeb2dbcf6bf9b148fe09099a3b131c2a4cc2a129135e708fb72f1cc43f083f93fc85a0e03209b75dfcc09106b977ac

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-handle-l1-1-0.dll

MD5 c8d52cde743f4559e6eda1472ad44277
SHA1 09a19c5c5bc45dbf5391d882015b47cdad4b5631
SHA256 d2926dcb85ab577be75ecab1fc8dcd062318f147e0a9262a3b807bb5acb62beb
SHA512 3a031f282303cf664c6ab04c1561598595ef776799005d8ac7ae091ffd140e4d1d1e23b9f6783618c2bae4dc4d1cf741fdb3f83390d6854de97d85af4c940b23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-1-0.dll

MD5 977831a443ea30ac8cb70f4a069a2795
SHA1 b07313dc2760c524d1bae783e81a7f18743bff87
SHA256 f6eb872448b5147e59f373eee8a9852d1afc5eecb967f713a7f7acb4939e9a63
SHA512 0c17bb97188b6b2aaa49fb3cef94053bf20e7b587cca9307ec4a4e166f4703d17a50c12148b3112cb5d98088bfd186adacb8c55c3d8a634ead2dad93b70b5f18

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 1a456489a0e26cf602d4af97fd537b0c
SHA1 fa62a55a403ee92b1d5f31ce2c5cc65e2de03247
SHA256 3e8d67f3978e40a636c5fa86c310801d6d6b74127e556c57ff6fde8e1d7b706d
SHA512 04a61c6d79c72d729d602c4a5d069c73cd92b0586d988056b2f2cebf88bac5723c1928d4a1a08fe13151ba9905cc28aeafbe344c829fadc66f138aac43e8c147

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-datetime-l1-1-0.dll

MD5 b669e6de4647cd31009b15d5edd7c999
SHA1 16f05edfa04378e99d906e9162b502c99d8ddb61
SHA256 4e560ebdfe0bc1193a0f3feaac35634b0655829d5cc7e79d113f3a994f16d3ed
SHA512 afc8ac85c8fa15fbb3e72b8192314b8ca7eaa0a686ef77747adadd0b902260f2cb0482f76012cfd5023a12a7c0d89b973af97bd4f208389d8ca26005fe4e16dd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-console-l1-1-0.dll

MD5 22df48515382f53b828728892c65e62d
SHA1 f834220481f9acab2fce917bd6271705c3300872
SHA256 97955d1f5134350fbe6c829061e01106304978651979f4ecd5ec146bfc70d36b
SHA512 97507029a6d0057812da1a917b14e021747a1e13e4a1406e73d4f330f0fd1b9822f6300a5030d2aca8063da6da2a5a1e6e9a5a2c8ca612401188713e779fa608

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleMarshal.dll

MD5 21019b8d2736ba2119992486493a1ad8
SHA1 dd1cdb18b7f7435c8eaeb219b5cd94529a17191f
SHA256 4de9d6f66de5305adefa837460da8ba68c68d4faefe8808c2d44b4637ef306fe
SHA512 7d3964ca8b1ce3bf52212e7e118d4a224f1a74e00652495f72d2f316886b353927bc6b6548308f4fa3e09316315acbd8908a86bd8129c494fef1704404921f06

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleHandler.dll

MD5 d5050b714a9aff9fea4d2e075a597c17
SHA1 f4a292fc70eeaac72a0fca08d414b3dcd29eaef4
SHA256 3be8e82af047b28cfe8153c015f44098301955bb45fdaf1c126bb32a2cf0358d
SHA512 434f73e15b80c75bd55d2e068f37a0551090038c3f2b325c73e03dabb25dc40a1dc0e3e96a3e935d2db3022442e6c18585ac6d9e2cc926b2c9b93c1594d43d00

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\Accessible.tlb

MD5 e49aeb412aab7c49a27e6feaa0ca40ce
SHA1 6a2f6ea9facc48a3f736e03fda2c1ce44b744af3
SHA256 754fd922f8c93b66f723c30d39083a6a1fe33fa4b6439d55ad2459be40c3151e
SHA512 8c3f957d032fa8edb523cd3f473a57e2cc020c9e6e33aea183cad8b435777660f4c7e87ba62c67bbb1aef726d109f0f34b2d86c159ca9bd98bfad43c89af7ad2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\WSEnable.exe

MD5 1a3403377c91d3f50a08a3f48f84f532
SHA1 c964111a4136afdba80b04704b3d5b0777ff002b
SHA256 78b742bc8c622395891ccab7e8d1968979b5d0e581e2b15248b96ebfa4e9e82a
SHA512 02e22991d198bd86470589aa51e53e6065e9cddf0022031e2cf08fc7fe210e375e4b24484f7b32f64bcf668fdd675465956753e744857d576d97b215c97c23a9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.exe

MD5 39f842e56bcdc46ea75e56e38a5776da
SHA1 b80fd74e05bc5d6023e348825c55f8306b7b1c27
SHA256 d0578346d4e1f7d1ff4e9555263220386e5b1c37f4b362eaf2ae22d96cd0c44e
SHA512 c08f0512efbcdcb59673c2a9f4c19f161f268e8f1743fa27932bb6886e6aef666dcf04e1fac1120adeaace9eebff634ce0d77405f3a2ecea0f7c52f03dbaf68f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.VisualElementsManifest.xml

MD5 4d5f1879f229d9c0c0f1907f513ab02c
SHA1 ec58f4ccf2aa21cc7a075b720773861882186c0b
SHA256 9eefc90d6525f476810ad24ef09b05c200c552b6010619c80180052570870061
SHA512 5cb6696efde58153d8e2a90b1540b86dc7150284907f79beab4ca8afecd3f8e413be2394b13feea9f2ce7237c0d29154ffbe6d139d4acfa114afdf60ec5b9027

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\softokn3.dll

MD5 397d908d0b2fe3b12480c78270a906d0
SHA1 4f288cbb15d045414eda27fb5cfedd70f0ac13a9
SHA256 48392c5bbe15380960aceb6f279c7a6bcfabedf534c41a771586eb176d709f33
SHA512 8de0111ad951c8653927978535c76ed05e03f321aff6205bb8c611d66ef1d542de31ea7a28852fba48908cb120dc833915a3c3b4a2bfdf151b41498608dd4b73

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnpkeys.exe

MD5 dba5fce543412113bb666141e1ed0467
SHA1 ebd632c0f684a368bad2d14c657775fa55394408
SHA256 1e67cd0b79d0e217b22de3624ee5657573152b04196a57f4253f1912d8c8c83b
SHA512 26cc65a10780bce643c505822b5b7a5d5c94bdd360df6e3d4dc7a68457628d4724223d3997aa2ea54954c8fb6f3786eb918cd92d9c6eba2573aa61da9771155e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp-cli.exe

MD5 813a6f3215657bc9ea02e2fa13ee2465
SHA1 8adf7b7e16b12d641ee9efaab108b7af01e14fa5
SHA256 6373b4b10d34a52889b00d1a040252b0323a3b47027029b19ad77ffc447754a6
SHA512 1a1ee6435724f1e0f23e474ecfb19515713657cd4cc4642a4d6fe62f19a5f0eaf97f7601b4e59ebefd3c2da13b7c8920bbfbee415624c05eeef5ec756b297584

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp.dll

MD5 b98331a3acb9bd606205bcb1050705d9
SHA1 213554003fb6804ac42cb1f98b609ca2f2aea8eb
SHA256 30a5750b6fce67efb2c04649a26e9f08e9ddc941d2e8b9ac424cfc156a60002f
SHA512 6b55e4329ec03a5d63ea4d2c025185e5f1a4d86da73abfa75822e4175c652fbfa4df6f020d3bc08c584a8a3dd424ca238d6b3b97ac75bb91f45de6f9f0c80e80

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\app.dat

MD5 959484c8547305fa953c18dfd8908237
SHA1 ea7d05f9e395a10925e4257610d6f69b97455a94
SHA256 a3a08a040e8a4aafa0a313660c3e1400143ac5802b9fa7f9779baa12852dca5f
SHA512 16a70e31edad5674d4f26b474718c97d36aaacc54bad95c111eb729a46cc4fe51e6f27492e7ced42af7597c6dddfed84faa5fe0f73eafc5b2cabe9be622deb23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.ini

MD5 1b0d446f9d17c1374c81acec9d8d2406
SHA1 016bca3d4ee9a0dbb4350ee7a1898779dced6c11
SHA256 a0cc8cc3287d54d7e23a156256a553792970df9ca57f6ad85dceed32b979da71
SHA512 4e7de92579628cf8c31287506d6f3096bb15402ee6d694a72462cbd1f093e7d04cbcc9e13691b94408091e0c5ea8d8c528365a90885b55a126416af37be6979a

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freebl3.dll

MD5 cff5feefed016f7c533115c0b18b5237
SHA1 3a34c05360231f098c37d77a60f9f6021d6e7d20
SHA256 dac4d003d0c005a4324a6d7ab0b28bc0d6114ab0bdf90f5f1594e10ee63b487f
SHA512 16a309b38ab9efb5d6b8fb108f3a2152d6ae0ee2f7e3795e96422cf196e8b3c062bbbc8526066afc2ce3b0050226b9f9ea2f7191f544f2b97343f1eb69648cc4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.exe

MD5 9036057c005986ce82f5f42ac5807569
SHA1 433d79828968e2c257c0fe28edfb8fa77ad4b1c5
SHA256 1ea06a885041a31a4015fe55b2a7d6527bbafd8d3be5c1f7f4417894a8c8f654
SHA512 c44dc8e2d3a429ac3d64a07806eb84ddb21b9cfa49c5434a27ac1337997daf04289c42f1c5215a9ef892c31c3902bba7c4901e6951f39c8b5cd7350bcc47234c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\breakpadinjector.dll

MD5 51459dd1ff97d5b7403c729b9eb19d92
SHA1 c5ec382097f0040b29ca044e870cd27b4ba463dd
SHA256 dd1f8fde218ff502829aca988e20c7b40c7046d1a5353d9362b97b1fdbcefcf0
SHA512 3e4e33069861fae4b484994978e2a1a98271016bf944c64b0d0cb4f3e146ac54a7415b1403974991a8a2b783ea7e32a8f01fa55657ceeff41bc7b427dfca4ac7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\application.ini

MD5 144e43c13aa3960fab83e9fc83a3193d
SHA1 1a9eb2e61787ab5f7e4639a5872d609a9690446e
SHA256 c940f1343198d3927483c67fafcf741615058409e4ecff4e2d9255b73a6689cb
SHA512 dea162e0f2d1597af1dc739b0223bc76631bc78f14e857b9279d8d61aca285e994618d1cfa92ede60418cec82a2c2b5071a3b79bd10354cb4fbdb11d124381f3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libEGL.dll

MD5 596e7aa89431613d0248aad6099cb792
SHA1 5e7b3bcc592edb31731a0acc5ec1801d3a10fc98
SHA256 8404b35893817c13cbc817f0708bba5ce76be24ce137d5bd38ed11c0d94aaf36
SHA512 1d09eb54f1db4fdb97579910bf4310a63909ff753c2340aab8179ee23a6e4695b5fa2f79120017a462efb8b449e915e1571afb7c48008a3244b8d24953581abf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\install.log

MD5 e25097c27f3c028f4233f9ada33493ee
SHA1 7b19479d916e786312aa1a22dbbf12adf7a8c4d3
SHA256 9cf14a75f8f20ab0eef62368575fed49b4f21dccfc0fc5769aa613a940f0e74f
SHA512 9d6c0c4dc147028823edf09cf85bb29ea06ce9bda73b2cc7f0f67a75efabc64da3b32a892b829d0ae4270c38b855e004668c10a7e277ded74215a6f56bb19bd4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\IA2Marshal.dll

MD5 906d7020727d47b1eb67ac14eaeb605b
SHA1 2739adb2c52759a77aa2ae60e9f17d2cd291132d
SHA256 f514665a4eef6e69367ccac68351dc56cda0606793488eb4e1cb269f91c7cb94
SHA512 9c904fa6e62d734a8223e9dc881b5ca90f98ac0e5939c1f564a676d374b07924813a91502285f2ff33b7078bf48d7a416203b8387aa605c3ba0d74d6b04b820f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libotr.dll

MD5 7939d03f9318170efed96a9f3f24773e
SHA1 7fd4814cdeac68fa27b5c622708fdcd30f398ba5
SHA256 8ac7a9f2a54498c35d80d4561032c765749e8a0e16b1ae3210f683f150d63567
SHA512 562dc32d2a191365879449a3575a1ec9e5c4ea49f0b756fb184c3779d6af1636a2807ba630343410fd9a7fee78cbf0aa232b87efd16aca5e9cac754b128526d1

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libssp-0.dll

MD5 402f519e62883aecae592df374308fcf
SHA1 3f5704f0e3ce6282c51942ef5f12bee416f738d0
SHA256 696fba13526b2e53577de896e2bf1a5fb0b72258d32244a48cee7218164c600e
SHA512 001563ad000358ec1ca3118bdecac69fab4d6257e912f67a170fd3be93a3f0d946e448a36963fd8730cb41f7ddc5b9a4b42e83bfc4b881e8b42448a0aa37aa99

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice.exe

MD5 831dad9c790385246d311db333436239
SHA1 f7936de984c3a1286cc3774ddba78812efe7b3df
SHA256 d556017c18e41628f7f5b831259a1cbe611b4f214ae607e15918dc366c40d5b6
SHA512 b7cba5bd4ceac12dd611992cc35c5076984d1b1c75784d96d9dcd9d71f232c17be86af18a42e673f06658edb3b72c0edff94b4d3bf048c910bc01c03a6c56ea5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozMapi32.dll

MD5 753557b2340cf9f648b91f461eaa9c87
SHA1 21103cfdc460fe4c05350ba87acd525b361ff413
SHA256 11adc671dec079ce80e96dc6aa6adf8fab7144c414174e44542d5559f1e25601
SHA512 fd90413c24f59b8d2198efee8f8e322752dc06c9ab8e3eedb08fb337542ec4ec80815de9b3a263689594af9aed11e8b54f501acdb2ddd5b55ff0f3dbad3df5d2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\minidump-analyzer.exe

MD5 c16d878f6062917ed856e87410c8a42d
SHA1 7286565d2770d5c8bbe6138a4d3a4424c7793cdb
SHA256 ae30d28169d5c4317c516b61cbcec12300173f390a6a8542559395a9cbe3705f
SHA512 eb8a23fdc5dff0aa7aaa241c9ce88d10846fcea9c08f32d5f04cae81899ae7c77b8363e874b3f96f72de28e66bf0da71c3ac16037493150091e0783d02d39b0e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MapiProxy.dll

MD5 d17b9c294f61a3cc63336a709dc1b003
SHA1 0a1bfd779c940ccfe1cfc70a39d427d9423fb976
SHA256 2696de4b64e70a565e6b355e1687b598978ea5a92545829c93fcebfc18dc4899
SHA512 6a58cfee52badb8cd42d598a8794e2b5926036f073a64a716303deb829488ef6eeb182a54fffe0ba5441d513375005d3ff8f35b24c059e4d807ff356bbec9521

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice_installer.exe

MD5 a5f2d18facaa6281457e92aa1a6fed95
SHA1 988c4f07aa884a75fbd27a4a0c76b8febf8d6413
SHA256 c96ec68985b09cbb81d2450db611f9739fdf89e76e6c9355cb1bd755c541ca21
SHA512 acb0acbca8c961832a1175e1a4ceed56039cbd54ce4f1f61b8761ed83ca89e8b3925ac46558d81afac668d954f09be3e9892ec664c0728b375cc5549e1a58756

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\osclientcerts.dll

MD5 30a803e6d3b001c7ea6d60282ec89ece
SHA1 9bbd2fe272388e666bcd0ed7365221cf58b12141
SHA256 281cc2479d4f79709d305399851a95eb4bf486274b3c976019cdc45be5e5fd95
SHA512 9fe01ebba863d19ed00627437e546e19098c794e6fa399d99cb8a9ad6a6b13c2c2ec406e2d07148d53fe94b01283917d6dc2241fe7086cdbe68c274b8857c4c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\qipcap.dll

MD5 50791aff95302ec609d5e7925f88042f
SHA1 8bd727d8c590b2576947cab899065a8bd6421a3b
SHA256 d784bfc258775ec6e7171895273adbb28159a16b004050e888bdc57c38fc53e1
SHA512 f68f49f2980a1663be2d98e458ed574bd40dc324457a006a903734cf049312aced55d593d60e608073e48ec1f66ab21d4bf1025334eda49d4da51362d11766cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\precomplete

MD5 12bac409a02d5c863300a0e2f095e05a
SHA1 5939e68bc68bcb52e272a864508a531c482ece5b
SHA256 b971bee8682f3be1b88dd7f183cf232762203ac74c9f8636d3198fdccdad5596
SHA512 081b48cb89958b11664f6b30b5a9f4ae225deea9ca8bbd3bb7674581ad5a35adca4c8fdb605c17c98629759499a1f2fd5ead18c1ab88c7ae9c93b7a9c4cf2d05

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\plugin-container.exe

MD5 3c73d5124aae162f94754ac70a5b61c4
SHA1 f12cc2dd1376be65b77c16ae0247a1e8b9dae173
SHA256 fdf6300ee656d774a81bd61d608cbb1d0180c0edbacd0a218bc84693a0834c13
SHA512 3a4d834c1f31ec9c17c25bc831f42d0bbfb3eded5adf8be8d5895feca178c4a9b610d2fc0b7aa9734c1e559a37ba92478d3c69b8b454f0ce115847158530f8df

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\platform.ini

MD5 49d86abbb0d3bf41563b5fe7f493e383
SHA1 c0887844db2d72346c4cfa528c57c3cc8255ce05
SHA256 25bb9c44df7eb62eff9b6e7e48598561c9ce5d4f4c52774c9d77890d71811aa4
SHA512 40426b2bed856f3090d7fd65d6ce1bd413418a673f9cef9b4fe89c8607932fca48693f80a2430bafef1bc47af1bfb7f6e3d560f240d3a5b9e185800de0a3d6cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pingsender.exe

MD5 c158adee5aea09cf69d97335b7dd95e5
SHA1 3a32be5863e9514290542210bd975a94bcfe12ba
SHA256 d245767449dd5a61939703f1dfff908e4f680e89fa5b936dba1a1874dbee9147
SHA512 848fe4700b744e6732e6d2cfa44e40c8a257748b16b45b9f8aa6e15eebc307fd50b0b7688bb40f886ccc70afb74f5dad369d988aff932ebb55264a870713c9b3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nssckbi.dll

MD5 6d14eb47c90f63549ad7aebc6f663e0f
SHA1 280c1bfd15757c595275b932e252f6a641abe5b3
SHA256 2d872c1a432dc556d21702e5addb1be6544cdeca20e818c28fe1475f45aef946
SHA512 c03ca69344341eabbc02202a01b348d13e3b4a35c50a0e20b6c9ec94cd76060f1ef87a979880d51421861b06998d0e5ac6c1fdfd024b5537b990bc46e4c6f970

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozwer.dll

MD5 376b31a8b3a41b05fe7dbc025c794db0
SHA1 a814bee32e59fabd27dd0ac7166b632ee8ab4715
SHA256 2852e0e7016443bfd9c4cb715169477b89a3d8e40e12e1d2d1f9cc3df96798bc
SHA512 1eda94bad4d0ce48eecbfc94c728462a0cff1a4cd586de227007e7281d31a65d572525d8ef11f0d26e397831f83341a3ca933bbfac9fa30cf89279411afe739d

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MSVCP140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\VCRUNTIME140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

memory/3196-994-0x0000000000C70000-0x0000000000F1C000-memory.dmp

memory/3196-995-0x0000000074ED0000-0x0000000074EED000-memory.dmp

memory/3196-997-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/3196-998-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/3196-996-0x0000000066680000-0x000000006668E000-memory.dmp

memory/3196-999-0x0000000074B90000-0x0000000074B9B000-memory.dmp

memory/3196-1000-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/3196-1001-0x0000000064540000-0x0000000064591000-memory.dmp

memory/3196-1002-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/3196-1003-0x00000000744F0000-0x000000007451A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR88D6.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8897.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8857.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8662.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR85A6.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8576.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR84F8.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR84C8.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR8498.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR83DC.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

C:\Users\Admin\AppData\Local\Temp\BRL00000c7c\BR834E.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

memory/3196-1027-0x0000000000C70000-0x0000000000F1C000-memory.dmp

memory/3196-1028-0x0000000074ED0000-0x0000000074EED000-memory.dmp

memory/3196-1029-0x0000000066680000-0x000000006668E000-memory.dmp

memory/3196-1030-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/3196-1031-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/3196-1033-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/3196-1032-0x0000000074B90000-0x0000000074B9B000-memory.dmp

memory/3196-1034-0x0000000064540000-0x0000000064591000-memory.dmp

memory/3196-1035-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/3196-1036-0x00000000744F0000-0x000000007451A000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2023-03-02 01:14

Reported

2023-03-02 01:17

Platform

win7-20230220-en

Max time kernel

29s

Max time network

33s

Command Line

"C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe"

Signatures

Babadeda

loader crypter babadeda

Babadeda Crypter

Description Indicator Process Target
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe

"C:\Users\Admin\AppData\Local\Temp\CLOUDFLA.exe"

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

"C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe"

Network

N/A

Files

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR16FB.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR17C7.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR190F.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR195E.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR199E.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1A5A.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1A8A.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1B56.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1C8F.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1D0C.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1D3C.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\python-3.6.9-4.tar

MD5 d948bb94494348c51694553ef558e3b2
SHA1 7231990bbf6d55fc22ed3aa923845ce0d472a93d
SHA256 917cd8eb876d1f77ff1750a0b48a1e6f85d5f16f2caf113a3ebb52660a1fa5c5
SHA512 3e3c7b8e3dc6bfa53857c6a29b5ac0c6a05caa02b3a028ad1e6b266a3e756dfce1e509ac4b353e0c9efc7b80878dd37ed55182d98d234eb71711e67bb172c130

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\removed-files

MD5 95c5af7af5cce4af76f94a5a339deb34
SHA1 7b549d6f769d23d9dc73e3bceee6e0209e561363
SHA256 9c928f3eb41faa3465a2a672af976432f7b0e65aff527c1747a346b5a514f572
SHA512 14c2dc57a4cea69c3f4be44ff7e11196ca35513bc3afa95838bf0e04e0ae047abb6da720aecaa938c9b800dea5a84cf63e434c8870f27dcc12b9803842f46eec

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp.dll

MD5 b98331a3acb9bd606205bcb1050705d9
SHA1 213554003fb6804ac42cb1f98b609ca2f2aea8eb
SHA256 30a5750b6fce67efb2c04649a26e9f08e9ddc941d2e8b9ac424cfc156a60002f
SHA512 6b55e4329ec03a5d63ea4d2c025185e5f1a4d86da73abfa75822e4175c652fbfa4df6f020d3bc08c584a8a3dd424ca238d6b3b97ac75bb91f45de6f9f0c80e80

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp-cli.exe

MD5 813a6f3215657bc9ea02e2fa13ee2465
SHA1 8adf7b7e16b12d641ee9efaab108b7af01e14fa5
SHA256 6373b4b10d34a52889b00d1a040252b0323a3b47027029b19ad77ffc447754a6
SHA512 1a1ee6435724f1e0f23e474ecfb19515713657cd4cc4642a4d6fe62f19a5f0eaf97f7601b4e59ebefd3c2da13b7c8920bbfbee415624c05eeef5ec756b297584

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnpkeys.exe

MD5 dba5fce543412113bb666141e1ed0467
SHA1 ebd632c0f684a368bad2d14c657775fa55394408
SHA256 1e67cd0b79d0e217b22de3624ee5657573152b04196a57f4253f1912d8c8c83b
SHA512 26cc65a10780bce643c505822b5b7a5d5c94bdd360df6e3d4dc7a68457628d4724223d3997aa2ea54954c8fb6f3786eb918cd92d9c6eba2573aa61da9771155e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\softokn3.dll

MD5 397d908d0b2fe3b12480c78270a906d0
SHA1 4f288cbb15d045414eda27fb5cfedd70f0ac13a9
SHA256 48392c5bbe15380960aceb6f279c7a6bcfabedf534c41a771586eb176d709f33
SHA512 8de0111ad951c8653927978535c76ed05e03f321aff6205bb8c611d66ef1d542de31ea7a28852fba48908cb120dc833915a3c3b4a2bfdf151b41498608dd4b73

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.VisualElementsManifest.xml

MD5 4d5f1879f229d9c0c0f1907f513ab02c
SHA1 ec58f4ccf2aa21cc7a075b720773861882186c0b
SHA256 9eefc90d6525f476810ad24ef09b05c200c552b6010619c80180052570870061
SHA512 5cb6696efde58153d8e2a90b1540b86dc7150284907f79beab4ca8afecd3f8e413be2394b13feea9f2ce7237c0d29154ffbe6d139d4acfa114afdf60ec5b9027

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.exe

MD5 39f842e56bcdc46ea75e56e38a5776da
SHA1 b80fd74e05bc5d6023e348825c55f8306b7b1c27
SHA256 d0578346d4e1f7d1ff4e9555263220386e5b1c37f4b362eaf2ae22d96cd0c44e
SHA512 c08f0512efbcdcb59673c2a9f4c19f161f268e8f1743fa27932bb6886e6aef666dcf04e1fac1120adeaace9eebff634ce0d77405f3a2ecea0f7c52f03dbaf68f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.ini

MD5 f3ccae543ad159738db80023d96495c0
SHA1 35829d3207577500fe07ab9e4bf445127b7e60ef
SHA256 ab5e110f7c75f27e772a29321240dc8621e9c7cb3909b5de3d419c12d0d5ef86
SHA512 a3f8eb5127bbd945d4d1c43a573b5ebbcd375e14cf9a8dc83e7e33d23445beac161769878f2c2b5e023cdb2554586739e91ad863da49baec6f89aae46e242b36

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\update-settings.ini

MD5 f792f87b62ca28cb5e81049b66583f97
SHA1 d4bfe85e8353149e981d517e970a75845c470bad
SHA256 99e82ee4b089ac404e9dfe1c2e521153b2622a50dc6e2cdd668606c1a7c3243e
SHA512 292054c0a794037efff9b52d1965f5103ec4b7bcbf28a85701d9d7981a1d57f8ea9a04b7ffe374f14207728b7243a888fec8ae6b984f02db376316eea15679c9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\WSEnable.exe

MD5 1a3403377c91d3f50a08a3f48f84f532
SHA1 c964111a4136afdba80b04704b3d5b0777ff002b
SHA256 78b742bc8c622395891ccab7e8d1968979b5d0e581e2b15248b96ebfa4e9e82a
SHA512 02e22991d198bd86470589aa51e53e6065e9cddf0022031e2cf08fc7fe210e375e4b24484f7b32f64bcf668fdd675465956753e744857d576d97b215c97c23a9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\Accessible.tlb

MD5 e49aeb412aab7c49a27e6feaa0ca40ce
SHA1 6a2f6ea9facc48a3f736e03fda2c1ce44b744af3
SHA256 754fd922f8c93b66f723c30d39083a6a1fe33fa4b6439d55ad2459be40c3151e
SHA512 8c3f957d032fa8edb523cd3f473a57e2cc020c9e6e33aea183cad8b435777660f4c7e87ba62c67bbb1aef726d109f0f34b2d86c159ca9bd98bfad43c89af7ad2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleMarshal.dll

MD5 21019b8d2736ba2119992486493a1ad8
SHA1 dd1cdb18b7f7435c8eaeb219b5cd94529a17191f
SHA256 4de9d6f66de5305adefa837460da8ba68c68d4faefe8808c2d44b4637ef306fe
SHA512 7d3964ca8b1ce3bf52212e7e118d4a224f1a74e00652495f72d2f316886b353927bc6b6548308f4fa3e09316315acbd8908a86bd8129c494fef1704404921f06

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-console-l1-1-0.dll

MD5 22df48515382f53b828728892c65e62d
SHA1 f834220481f9acab2fce917bd6271705c3300872
SHA256 97955d1f5134350fbe6c829061e01106304978651979f4ecd5ec146bfc70d36b
SHA512 97507029a6d0057812da1a917b14e021747a1e13e4a1406e73d4f330f0fd1b9822f6300a5030d2aca8063da6da2a5a1e6e9a5a2c8ca612401188713e779fa608

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleHandler.dll

MD5 d5050b714a9aff9fea4d2e075a597c17
SHA1 f4a292fc70eeaac72a0fca08d414b3dcd29eaef4
SHA256 3be8e82af047b28cfe8153c015f44098301955bb45fdaf1c126bb32a2cf0358d
SHA512 434f73e15b80c75bd55d2e068f37a0551090038c3f2b325c73e03dabb25dc40a1dc0e3e96a3e935d2db3022442e6c18585ac6d9e2cc926b2c9b93c1594d43d00

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-datetime-l1-1-0.dll

MD5 b669e6de4647cd31009b15d5edd7c999
SHA1 16f05edfa04378e99d906e9162b502c99d8ddb61
SHA256 4e560ebdfe0bc1193a0f3feaac35634b0655829d5cc7e79d113f3a994f16d3ed
SHA512 afc8ac85c8fa15fbb3e72b8192314b8ca7eaa0a686ef77747adadd0b902260f2cb0482f76012cfd5023a12a7c0d89b973af97bd4f208389d8ca26005fe4e16dd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-debug-l1-1-0.dll

MD5 bf8a71efcaa8260de58ab657dbf624c6
SHA1 48a1e8fd73c0b16304f0fafd6e7f6b5efb476314
SHA256 c3003ff52917dbac5d3feec1bdea8ad4163893ec2d320f904b6d3698a6dbc7bc
SHA512 e1284fe0c7f42204043320322dbbaadfe194aae4eef0aa863b25176107ec9900a2a0dfe4778b7ca5960d6b187e7cc61e028bd02ae0dae20a90591e33165dbc0f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 1a456489a0e26cf602d4af97fd537b0c
SHA1 fa62a55a403ee92b1d5f31ce2c5cc65e2de03247
SHA256 3e8d67f3978e40a636c5fa86c310801d6d6b74127e556c57ff6fde8e1d7b706d
SHA512 04a61c6d79c72d729d602c4a5d069c73cd92b0586d988056b2f2cebf88bac5723c1928d4a1a08fe13151ba9905cc28aeafbe344c829fadc66f138aac43e8c147

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-1-0.dll

MD5 977831a443ea30ac8cb70f4a069a2795
SHA1 b07313dc2760c524d1bae783e81a7f18743bff87
SHA256 f6eb872448b5147e59f373eee8a9852d1afc5eecb967f713a7f7acb4939e9a63
SHA512 0c17bb97188b6b2aaa49fb3cef94053bf20e7b587cca9307ec4a4e166f4703d17a50c12148b3112cb5d98088bfd186adacb8c55c3d8a634ead2dad93b70b5f18

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-handle-l1-1-0.dll

MD5 c8d52cde743f4559e6eda1472ad44277
SHA1 09a19c5c5bc45dbf5391d882015b47cdad4b5631
SHA256 d2926dcb85ab577be75ecab1fc8dcd062318f147e0a9262a3b807bb5acb62beb
SHA512 3a031f282303cf664c6ab04c1561598595ef776799005d8ac7ae091ffd140e4d1d1e23b9f6783618c2bae4dc4d1cf741fdb3f83390d6854de97d85af4c940b23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-heap-l1-1-0.dll

MD5 6e306654a55454e40889407e9334da0c
SHA1 0612894d9fbd8f92299541535f78db05fba3a78e
SHA256 eb02fc995bb92b214dd684e24c1060735f61ad4884ccb4aafa86c7c1de66d621
SHA512 f5a6980824cbfa82c47b20581658eb9fa8eeb2dbcf6bf9b148fe09099a3b131c2a4cc2a129135e708fb72f1cc43f083f93fc85a0e03209b75dfcc09106b977ac

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-interlocked-l1-1-0.dll

MD5 8dcf3111501ed0a01855ebb328537bf7
SHA1 2134bca1fa16133632a1b3f28fc38edc15e933ac
SHA256 76f092341fbef40d5f35f70bab55f2eeb3e70a9b60f46043b342ceab7f79cef1
SHA512 4cb596ca11b4941571f3b998c98707bdf45ad608c9f661e0f0ae528fdb797190c9bb22e58ff65a98e52e3e51396f4c8b22229eefe54f0a73eb49c79d07ce1604

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 b0537a9eccc0f909c0715fc93b473d8d
SHA1 79e9929c83f5f73314c52f26be4147a74aa80e23
SHA256 8784c4912a2f391d5f0c79b38f48baf88e98bf4fa61614ccb9232d9bd1e4ad54
SHA512 d68e50361566e8800afb5fae32c65c90d2ac7877f9a02f3e2e6af61ccd8f99b484c808a9ba62ec9e4727481798b3d3f4f74d19b16c6ed80536cf89351071bab6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 56813b784a1f8cdabedcc10de6e84864
SHA1 b636ba140e1ba7de5e59932702e7b4e53025d651
SHA256 98ee724aa3f5a8ec4f3f8596be5aba5cd19b556f88ef9fbaff1569051a4d0dc1
SHA512 f11739be9ff624044035678cf39b91d28a53f1ac56342baf985a4328da4c64c81107d7e1787ee50efb382472e4d46bb21c520918b8831edc7f6b3db70befa068

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 a8f889870885c5784afd47f5e3d33eed
SHA1 494b86c51c8908d17e563c80da0d42350aaf1155
SHA256 8979fe86afe23035caedd5df135786da2b28c095b69ce0179b6484fd680c9b91
SHA512 bb18675a9b311e4c34806ec834886659a95207a4ec9b48b082f5fa0e05f016b9f946db29c7aa20662b4090c7f42a606f9f3a5df48d7ed20c5b404ccf91a1b7eb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-memory-l1-1-0.dll

MD5 98b1e6d052cee5ccbb7e5af795b9f48c
SHA1 357ef3f8011d7e7f1d4cb30beae58d24d6b05085
SHA256 5c950723ff3118801884df67b6a14543978263a2d2a0437d8c8b2fe8ef3925d4
SHA512 31d961ada87eedfc4c1bb8938b0c4b44842153f4450f48a0c1dc12208f5c1ba62b076ef91a0dbd1c3f98d1e96517904b95e072002c50d2873c8638ddb25417d7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-0.dll

MD5 2557484c75d4507688b68a64882e0022
SHA1 ff78c6d44f7474d98402f8e17cfce5d712c41b95
SHA256 50b3e4ffee430c1b45f0ca75959936608f756ae5eb0352e8f3f5f69c5adfaa20
SHA512 e1c502e889664a46acaf0d8cab5d5082f46ad3f6f1a24ec702ec5174d077fff51cce7f80b13c5c22704937ce380ec3b14c088955d94eef1050d293c078869870

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-profile-l1-1-0.dll

MD5 258caf72fd7c60586b4bacfee6b37872
SHA1 4a473ff7cdf254336cf2ff3ddeb03bd047b35af5
SHA256 04c0a5392a18a7555635cde23f9111ea4da550c309827b725a74bb6fd4f0cc64
SHA512 121a366f79ca1c9212d109d1f72a53b31f0bf0394b947949e2a0191629ace8ed107118e512bc8f4e9b43a84b6c936422372be2ff497f2cf13276217b15d079c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 cec2f0ac232cd07d217299386118692b
SHA1 7cd8218afc5ccf528bb2807168e11e5820c8bddd
SHA256 a5f4f23b01cac69058b7ec0e30b470f90bfc6d40de20e618c3045bf06e4a2cfd
SHA512 e06fc36de71caec6732d2553b5afcd6daf0b8eb4f1aea7d6f6c2ae00b3e3f4172c932458ebb6644e41dd26a48b66dbe935a40bcee68aa7cad4af155befe7019f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-string-l1-1-0.dll

MD5 01cbaa0aafba1275cc23c29f139d399e
SHA1 5ca1434545c02c3f34bc9facf9b2eecc89ec3a24
SHA256 dcb3fc36c43a402b4b35644f1e7f6d6db31ef8d0a731c3b882e2cf3201a6714c
SHA512 f5a3d05690bf409d2b8d7eb96ac4fde1e2d27add79945d6d9f2482ee61c6698ee0e167e9677a61a435d99175979e8651f34b92a6d057236254a0a2ba1a9cc79f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-1-0.dll

MD5 efbbbcef1514840d5ad9d8c084a0147e
SHA1 d046a440556ff7b9857963d86dd050ccd6b0533c
SHA256 9c1d190c85b9ccfb171d3db4ec363c97a3452bb365dd75dbda5ec9cad1a5d803
SHA512 fe78850b3acaa725f4a3f65fccc3c2644ef43eebe3c0083c0d4e9e967cfb230d966dee87dcd8a27f4dc452d7e72ea7efb24ab7b9dbcd58ab81f78d0d110829bc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 aed0b2511a396bb258a7bc7bb646b951
SHA1 151b08d20538990b894afef34de451708b5f334e
SHA256 fb7ffa16bfdf7392535b8e78a86db89ed9032f67a16b127a105582fab118cf2b
SHA512 dd7cdb5f401dce1566e331a3184ebd2c71f6d2dc4eb59f384bfb2daea8ce8a146d7449d989da2193abf30cd568e67bc932e28c8b93c7d6beceac0c7cb9ae1f5c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-util-l1-1-0.dll

MD5 7294cef433dd8afa73982ea96dbd6f6a
SHA1 c73b123197e6ad47b13febeafa912fdad566c8ee
SHA256 21c57c8ae9407cedb50bcebf7f844a5933d274676f3194a87997672c7177cadb
SHA512 24048bd06f0a3ce593eadab4fee4e26aa339faba52ae52dd36f0c66ee5d7c166f68fff8ff5dbfffde26588351ca4b6de033528dd4b0a15b0afe3ddcaf13b8661

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\app.dat

MD5 959484c8547305fa953c18dfd8908237
SHA1 ea7d05f9e395a10925e4257610d6f69b97455a94
SHA256 a3a08a040e8a4aafa0a313660c3e1400143ac5802b9fa7f9779baa12852dca5f
SHA512 16a70e31edad5674d4f26b474718c97d36aaacc54bad95c111eb729a46cc4fe51e6f27492e7ced42af7597c6dddfed84faa5fe0f73eafc5b2cabe9be622deb23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\application.ini

MD5 144e43c13aa3960fab83e9fc83a3193d
SHA1 1a9eb2e61787ab5f7e4639a5872d609a9690446e
SHA256 c940f1343198d3927483c67fafcf741615058409e4ecff4e2d9255b73a6689cb
SHA512 dea162e0f2d1597af1dc739b0223bc76631bc78f14e857b9279d8d61aca285e994618d1cfa92ede60418cec82a2c2b5071a3b79bd10354cb4fbdb11d124381f3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\breakpadinjector.dll

MD5 51459dd1ff97d5b7403c729b9eb19d92
SHA1 c5ec382097f0040b29ca044e870cd27b4ba463dd
SHA256 dd1f8fde218ff502829aca988e20c7b40c7046d1a5353d9362b97b1fdbcefcf0
SHA512 3e4e33069861fae4b484994978e2a1a98271016bf944c64b0d0cb4f3e146ac54a7415b1403974991a8a2b783ea7e32a8f01fa55657ceeff41bc7b427dfca4ac7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.exe

MD5 9036057c005986ce82f5f42ac5807569
SHA1 433d79828968e2c257c0fe28edfb8fa77ad4b1c5
SHA256 1ea06a885041a31a4015fe55b2a7d6527bbafd8d3be5c1f7f4417894a8c8f654
SHA512 c44dc8e2d3a429ac3d64a07806eb84ddb21b9cfa49c5434a27ac1337997daf04289c42f1c5215a9ef892c31c3902bba7c4901e6951f39c8b5cd7350bcc47234c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.ini

MD5 1b0d446f9d17c1374c81acec9d8d2406
SHA1 016bca3d4ee9a0dbb4350ee7a1898779dced6c11
SHA256 a0cc8cc3287d54d7e23a156256a553792970df9ca57f6ad85dceed32b979da71
SHA512 4e7de92579628cf8c31287506d6f3096bb15402ee6d694a72462cbd1f093e7d04cbcc9e13691b94408091e0c5ea8d8c528365a90885b55a126416af37be6979a

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freebl3.dll

MD5 cff5feefed016f7c533115c0b18b5237
SHA1 3a34c05360231f098c37d77a60f9f6021d6e7d20
SHA256 dac4d003d0c005a4324a6d7ab0b28bc0d6114ab0bdf90f5f1594e10ee63b487f
SHA512 16a309b38ab9efb5d6b8fb108f3a2152d6ae0ee2f7e3795e96422cf196e8b3c062bbbc8526066afc2ce3b0050226b9f9ea2f7191f544f2b97343f1eb69648cc4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\IA2Marshal.dll

MD5 906d7020727d47b1eb67ac14eaeb605b
SHA1 2739adb2c52759a77aa2ae60e9f17d2cd291132d
SHA256 f514665a4eef6e69367ccac68351dc56cda0606793488eb4e1cb269f91c7cb94
SHA512 9c904fa6e62d734a8223e9dc881b5ca90f98ac0e5939c1f564a676d374b07924813a91502285f2ff33b7078bf48d7a416203b8387aa605c3ba0d74d6b04b820f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\install.log

MD5 e25097c27f3c028f4233f9ada33493ee
SHA1 7b19479d916e786312aa1a22dbbf12adf7a8c4d3
SHA256 9cf14a75f8f20ab0eef62368575fed49b4f21dccfc0fc5769aa613a940f0e74f
SHA512 9d6c0c4dc147028823edf09cf85bb29ea06ce9bda73b2cc7f0f67a75efabc64da3b32a892b829d0ae4270c38b855e004668c10a7e277ded74215a6f56bb19bd4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libEGL.dll

MD5 596e7aa89431613d0248aad6099cb792
SHA1 5e7b3bcc592edb31731a0acc5ec1801d3a10fc98
SHA256 8404b35893817c13cbc817f0708bba5ce76be24ce137d5bd38ed11c0d94aaf36
SHA512 1d09eb54f1db4fdb97579910bf4310a63909ff753c2340aab8179ee23a6e4695b5fa2f79120017a462efb8b449e915e1571afb7c48008a3244b8d24953581abf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libotr.dll

MD5 7939d03f9318170efed96a9f3f24773e
SHA1 7fd4814cdeac68fa27b5c622708fdcd30f398ba5
SHA256 8ac7a9f2a54498c35d80d4561032c765749e8a0e16b1ae3210f683f150d63567
SHA512 562dc32d2a191365879449a3575a1ec9e5c4ea49f0b756fb184c3779d6af1636a2807ba630343410fd9a7fee78cbf0aa232b87efd16aca5e9cac754b128526d1

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libssp-0.dll

MD5 402f519e62883aecae592df374308fcf
SHA1 3f5704f0e3ce6282c51942ef5f12bee416f738d0
SHA256 696fba13526b2e53577de896e2bf1a5fb0b72258d32244a48cee7218164c600e
SHA512 001563ad000358ec1ca3118bdecac69fab4d6257e912f67a170fd3be93a3f0d946e448a36963fd8730cb41f7ddc5b9a4b42e83bfc4b881e8b42448a0aa37aa99

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice.exe

MD5 831dad9c790385246d311db333436239
SHA1 f7936de984c3a1286cc3774ddba78812efe7b3df
SHA256 d556017c18e41628f7f5b831259a1cbe611b4f214ae607e15918dc366c40d5b6
SHA512 b7cba5bd4ceac12dd611992cc35c5076984d1b1c75784d96d9dcd9d71f232c17be86af18a42e673f06658edb3b72c0edff94b4d3bf048c910bc01c03a6c56ea5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice_installer.exe

MD5 a5f2d18facaa6281457e92aa1a6fed95
SHA1 988c4f07aa884a75fbd27a4a0c76b8febf8d6413
SHA256 c96ec68985b09cbb81d2450db611f9739fdf89e76e6c9355cb1bd755c541ca21
SHA512 acb0acbca8c961832a1175e1a4ceed56039cbd54ce4f1f61b8761ed83ca89e8b3925ac46558d81afac668d954f09be3e9892ec664c0728b375cc5549e1a58756

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MapiProxy.dll

MD5 d17b9c294f61a3cc63336a709dc1b003
SHA1 0a1bfd779c940ccfe1cfc70a39d427d9423fb976
SHA256 2696de4b64e70a565e6b355e1687b598978ea5a92545829c93fcebfc18dc4899
SHA512 6a58cfee52badb8cd42d598a8794e2b5926036f073a64a716303deb829488ef6eeb182a54fffe0ba5441d513375005d3ff8f35b24c059e4d807ff356bbec9521

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\minidump-analyzer.exe

MD5 c16d878f6062917ed856e87410c8a42d
SHA1 7286565d2770d5c8bbe6138a4d3a4424c7793cdb
SHA256 ae30d28169d5c4317c516b61cbcec12300173f390a6a8542559395a9cbe3705f
SHA512 eb8a23fdc5dff0aa7aaa241c9ce88d10846fcea9c08f32d5f04cae81899ae7c77b8363e874b3f96f72de28e66bf0da71c3ac16037493150091e0783d02d39b0e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozMapi32.dll

MD5 753557b2340cf9f648b91f461eaa9c87
SHA1 21103cfdc460fe4c05350ba87acd525b361ff413
SHA256 11adc671dec079ce80e96dc6aa6adf8fab7144c414174e44542d5559f1e25601
SHA512 fd90413c24f59b8d2198efee8f8e322752dc06c9ab8e3eedb08fb337542ec4ec80815de9b3a263689594af9aed11e8b54f501acdb2ddd5b55ff0f3dbad3df5d2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozwer.dll

MD5 376b31a8b3a41b05fe7dbc025c794db0
SHA1 a814bee32e59fabd27dd0ac7166b632ee8ab4715
SHA256 2852e0e7016443bfd9c4cb715169477b89a3d8e40e12e1d2d1f9cc3df96798bc
SHA512 1eda94bad4d0ce48eecbfc94c728462a0cff1a4cd586de227007e7281d31a65d572525d8ef11f0d26e397831f83341a3ca933bbfac9fa30cf89279411afe739d

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nssckbi.dll

MD5 6d14eb47c90f63549ad7aebc6f663e0f
SHA1 280c1bfd15757c595275b932e252f6a641abe5b3
SHA256 2d872c1a432dc556d21702e5addb1be6544cdeca20e818c28fe1475f45aef946
SHA512 c03ca69344341eabbc02202a01b348d13e3b4a35c50a0e20b6c9ec94cd76060f1ef87a979880d51421861b06998d0e5ac6c1fdfd024b5537b990bc46e4c6f970

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\osclientcerts.dll

MD5 30a803e6d3b001c7ea6d60282ec89ece
SHA1 9bbd2fe272388e666bcd0ed7365221cf58b12141
SHA256 281cc2479d4f79709d305399851a95eb4bf486274b3c976019cdc45be5e5fd95
SHA512 9fe01ebba863d19ed00627437e546e19098c794e6fa399d99cb8a9ad6a6b13c2c2ec406e2d07148d53fe94b01283917d6dc2241fe7086cdbe68c274b8857c4c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pingsender.exe

MD5 c158adee5aea09cf69d97335b7dd95e5
SHA1 3a32be5863e9514290542210bd975a94bcfe12ba
SHA256 d245767449dd5a61939703f1dfff908e4f680e89fa5b936dba1a1874dbee9147
SHA512 848fe4700b744e6732e6d2cfa44e40c8a257748b16b45b9f8aa6e15eebc307fd50b0b7688bb40f886ccc70afb74f5dad369d988aff932ebb55264a870713c9b3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\platform.ini

MD5 49d86abbb0d3bf41563b5fe7f493e383
SHA1 c0887844db2d72346c4cfa528c57c3cc8255ce05
SHA256 25bb9c44df7eb62eff9b6e7e48598561c9ce5d4f4c52774c9d77890d71811aa4
SHA512 40426b2bed856f3090d7fd65d6ce1bd413418a673f9cef9b4fe89c8607932fca48693f80a2430bafef1bc47af1bfb7f6e3d560f240d3a5b9e185800de0a3d6cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\plugin-container.exe

MD5 3c73d5124aae162f94754ac70a5b61c4
SHA1 f12cc2dd1376be65b77c16ae0247a1e8b9dae173
SHA256 fdf6300ee656d774a81bd61d608cbb1d0180c0edbacd0a218bc84693a0834c13
SHA512 3a4d834c1f31ec9c17c25bc831f42d0bbfb3eded5adf8be8d5895feca178c4a9b610d2fc0b7aa9734c1e559a37ba92478d3c69b8b454f0ce115847158530f8df

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\precomplete

MD5 12bac409a02d5c863300a0e2f095e05a
SHA1 5939e68bc68bcb52e272a864508a531c482ece5b
SHA256 b971bee8682f3be1b88dd7f183cf232762203ac74c9f8636d3198fdccdad5596
SHA512 081b48cb89958b11664f6b30b5a9f4ae225deea9ca8bbd3bb7674581ad5a35adca4c8fdb605c17c98629759499a1f2fd5ead18c1ab88c7ae9c93b7a9c4cf2d05

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\qipcap.dll

MD5 50791aff95302ec609d5e7925f88042f
SHA1 8bd727d8c590b2576947cab899065a8bd6421a3b
SHA256 d784bfc258775ec6e7171895273adbb28159a16b004050e888bdc57c38fc53e1
SHA512 f68f49f2980a1663be2d98e458ed574bd40dc324457a006a903734cf049312aced55d593d60e608073e48ec1f66ab21d4bf1025334eda49d4da51362d11766cf

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MSVCP140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\VCRUNTIME140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.DLL

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

memory/1484-937-0x0000000000940000-0x0000000000BEC000-memory.dmp

memory/1484-941-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1484-943-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/1484-939-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1484-940-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1484-938-0x00000000744D0000-0x00000000744ED000-memory.dmp

memory/1484-942-0x0000000074240000-0x000000007424B000-memory.dmp

memory/1484-944-0x0000000064540000-0x0000000064591000-memory.dmp

memory/1484-946-0x0000000074210000-0x000000007423A000-memory.dmp

memory/1484-945-0x0000000066C00000-0x0000000066C14000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR16FB.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR17C7.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR190F.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR195E.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR199E.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1A5A.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1A8A.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1B56.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1C8F.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1D0C.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL000005cc\BR1D3C.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

memory/1484-970-0x0000000000940000-0x0000000000BEC000-memory.dmp

memory/1484-971-0x00000000744D0000-0x00000000744ED000-memory.dmp

memory/1484-973-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1484-972-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1484-974-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1484-975-0x0000000074240000-0x000000007424B000-memory.dmp

memory/1484-977-0x0000000064540000-0x0000000064591000-memory.dmp

memory/1484-978-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/1484-979-0x0000000074210000-0x000000007423A000-memory.dmp

memory/1484-976-0x0000000066C40000-0x0000000066C4B000-memory.dmp