Malware Analysis Report

2024-09-22 16:40

Sample ID 230302-cdbzdsaf7y
Target edf02789603a77a4c7b42dd8091babe0.bin
SHA256 8f3bb770ad8cafcabe4eba9f67ba79f353ddee4caf30532e724bdeb15489df64
Tags
babadeda crypter evasion loader trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8f3bb770ad8cafcabe4eba9f67ba79f353ddee4caf30532e724bdeb15489df64

Threat Level: Known bad

The file edf02789603a77a4c7b42dd8091babe0.bin was found to be: Known bad.

Malicious Activity Summary

babadeda crypter evasion loader trojan

Babadeda

Babadeda Crypter

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix V6

Analysis: static1

Detonation Overview

Reported

2023-03-02 01:57

Signatures

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2023-03-02 01:57

Reported

2023-03-02 01:59

Platform

win10v2004-20230220-en

Max time kernel

145s

Max time network

122s

Command Line

"C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe"

Signatures

Babadeda

loader crypter babadeda

Babadeda Crypter

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe

"C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe"

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

"C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 151.122.125.40.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 210.81.184.52.in-addr.arpa udp
US 8.8.8.8:53 1.202.248.87.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
NL 20.50.201.200:443 tcp
US 8.8.8.8:53 1.77.109.52.in-addr.arpa udp
US 117.18.237.29:80 tcp
US 8.8.8.8:53 199.176.139.52.in-addr.arpa udp
US 8.8.8.8:53 216.74.101.95.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8DDD.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8E5B.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8F37.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR94C6.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR94E6.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9584.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9554.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR967F.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9845.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9875.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR98C4.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\python-3.6.9-4.tar

MD5 d948bb94494348c51694553ef558e3b2
SHA1 7231990bbf6d55fc22ed3aa923845ce0d472a93d
SHA256 917cd8eb876d1f77ff1750a0b48a1e6f85d5f16f2caf113a3ebb52660a1fa5c5
SHA512 3e3c7b8e3dc6bfa53857c6a29b5ac0c6a05caa02b3a028ad1e6b266a3e756dfce1e509ac4b353e0c9efc7b80878dd37ed55182d98d234eb71711e67bb172c130

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\removed-files

MD5 95c5af7af5cce4af76f94a5a339deb34
SHA1 7b549d6f769d23d9dc73e3bceee6e0209e561363
SHA256 9c928f3eb41faa3465a2a672af976432f7b0e65aff527c1747a346b5a514f572
SHA512 14c2dc57a4cea69c3f4be44ff7e11196ca35513bc3afa95838bf0e04e0ae047abb6da720aecaa938c9b800dea5a84cf63e434c8870f27dcc12b9803842f46eec

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp-cli.exe

MD5 813a6f3215657bc9ea02e2fa13ee2465
SHA1 8adf7b7e16b12d641ee9efaab108b7af01e14fa5
SHA256 6373b4b10d34a52889b00d1a040252b0323a3b47027029b19ad77ffc447754a6
SHA512 1a1ee6435724f1e0f23e474ecfb19515713657cd4cc4642a4d6fe62f19a5f0eaf97f7601b4e59ebefd3c2da13b7c8920bbfbee415624c05eeef5ec756b297584

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnpkeys.exe

MD5 dba5fce543412113bb666141e1ed0467
SHA1 ebd632c0f684a368bad2d14c657775fa55394408
SHA256 1e67cd0b79d0e217b22de3624ee5657573152b04196a57f4253f1912d8c8c83b
SHA512 26cc65a10780bce643c505822b5b7a5d5c94bdd360df6e3d4dc7a68457628d4724223d3997aa2ea54954c8fb6f3786eb918cd92d9c6eba2573aa61da9771155e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp.dll

MD5 b98331a3acb9bd606205bcb1050705d9
SHA1 213554003fb6804ac42cb1f98b609ca2f2aea8eb
SHA256 30a5750b6fce67efb2c04649a26e9f08e9ddc941d2e8b9ac424cfc156a60002f
SHA512 6b55e4329ec03a5d63ea4d2c025185e5f1a4d86da73abfa75822e4175c652fbfa4df6f020d3bc08c584a8a3dd424ca238d6b3b97ac75bb91f45de6f9f0c80e80

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\softokn3.dll

MD5 397d908d0b2fe3b12480c78270a906d0
SHA1 4f288cbb15d045414eda27fb5cfedd70f0ac13a9
SHA256 48392c5bbe15380960aceb6f279c7a6bcfabedf534c41a771586eb176d709f33
SHA512 8de0111ad951c8653927978535c76ed05e03f321aff6205bb8c611d66ef1d542de31ea7a28852fba48908cb120dc833915a3c3b4a2bfdf151b41498608dd4b73

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.VisualElementsManifest.xml

MD5 4d5f1879f229d9c0c0f1907f513ab02c
SHA1 ec58f4ccf2aa21cc7a075b720773861882186c0b
SHA256 9eefc90d6525f476810ad24ef09b05c200c552b6010619c80180052570870061
SHA512 5cb6696efde58153d8e2a90b1540b86dc7150284907f79beab4ca8afecd3f8e413be2394b13feea9f2ce7237c0d29154ffbe6d139d4acfa114afdf60ec5b9027

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\Accessible.tlb

MD5 e49aeb412aab7c49a27e6feaa0ca40ce
SHA1 6a2f6ea9facc48a3f736e03fda2c1ce44b744af3
SHA256 754fd922f8c93b66f723c30d39083a6a1fe33fa4b6439d55ad2459be40c3151e
SHA512 8c3f957d032fa8edb523cd3f473a57e2cc020c9e6e33aea183cad8b435777660f4c7e87ba62c67bbb1aef726d109f0f34b2d86c159ca9bd98bfad43c89af7ad2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\WSEnable.exe

MD5 1a3403377c91d3f50a08a3f48f84f532
SHA1 c964111a4136afdba80b04704b3d5b0777ff002b
SHA256 78b742bc8c622395891ccab7e8d1968979b5d0e581e2b15248b96ebfa4e9e82a
SHA512 02e22991d198bd86470589aa51e53e6065e9cddf0022031e2cf08fc7fe210e375e4b24484f7b32f64bcf668fdd675465956753e744857d576d97b215c97c23a9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\update-settings.ini

MD5 f792f87b62ca28cb5e81049b66583f97
SHA1 d4bfe85e8353149e981d517e970a75845c470bad
SHA256 99e82ee4b089ac404e9dfe1c2e521153b2622a50dc6e2cdd668606c1a7c3243e
SHA512 292054c0a794037efff9b52d1965f5103ec4b7bcbf28a85701d9d7981a1d57f8ea9a04b7ffe374f14207728b7243a888fec8ae6b984f02db376316eea15679c9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.ini

MD5 f3ccae543ad159738db80023d96495c0
SHA1 35829d3207577500fe07ab9e4bf445127b7e60ef
SHA256 ab5e110f7c75f27e772a29321240dc8621e9c7cb3909b5de3d419c12d0d5ef86
SHA512 a3f8eb5127bbd945d4d1c43a573b5ebbcd375e14cf9a8dc83e7e33d23445beac161769878f2c2b5e023cdb2554586739e91ad863da49baec6f89aae46e242b36

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.exe

MD5 39f842e56bcdc46ea75e56e38a5776da
SHA1 b80fd74e05bc5d6023e348825c55f8306b7b1c27
SHA256 d0578346d4e1f7d1ff4e9555263220386e5b1c37f4b362eaf2ae22d96cd0c44e
SHA512 c08f0512efbcdcb59673c2a9f4c19f161f268e8f1743fa27932bb6886e6aef666dcf04e1fac1120adeaace9eebff634ce0d77405f3a2ecea0f7c52f03dbaf68f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-datetime-l1-1-0.dll

MD5 b669e6de4647cd31009b15d5edd7c999
SHA1 16f05edfa04378e99d906e9162b502c99d8ddb61
SHA256 4e560ebdfe0bc1193a0f3feaac35634b0655829d5cc7e79d113f3a994f16d3ed
SHA512 afc8ac85c8fa15fbb3e72b8192314b8ca7eaa0a686ef77747adadd0b902260f2cb0482f76012cfd5023a12a7c0d89b973af97bd4f208389d8ca26005fe4e16dd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-debug-l1-1-0.dll

MD5 bf8a71efcaa8260de58ab657dbf624c6
SHA1 48a1e8fd73c0b16304f0fafd6e7f6b5efb476314
SHA256 c3003ff52917dbac5d3feec1bdea8ad4163893ec2d320f904b6d3698a6dbc7bc
SHA512 e1284fe0c7f42204043320322dbbaadfe194aae4eef0aa863b25176107ec9900a2a0dfe4778b7ca5960d6b187e7cc61e028bd02ae0dae20a90591e33165dbc0f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-console-l1-1-0.dll

MD5 22df48515382f53b828728892c65e62d
SHA1 f834220481f9acab2fce917bd6271705c3300872
SHA256 97955d1f5134350fbe6c829061e01106304978651979f4ecd5ec146bfc70d36b
SHA512 97507029a6d0057812da1a917b14e021747a1e13e4a1406e73d4f330f0fd1b9822f6300a5030d2aca8063da6da2a5a1e6e9a5a2c8ca612401188713e779fa608

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-1-0.dll

MD5 977831a443ea30ac8cb70f4a069a2795
SHA1 b07313dc2760c524d1bae783e81a7f18743bff87
SHA256 f6eb872448b5147e59f373eee8a9852d1afc5eecb967f713a7f7acb4939e9a63
SHA512 0c17bb97188b6b2aaa49fb3cef94053bf20e7b587cca9307ec4a4e166f4703d17a50c12148b3112cb5d98088bfd186adacb8c55c3d8a634ead2dad93b70b5f18

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-interlocked-l1-1-0.dll

MD5 8dcf3111501ed0a01855ebb328537bf7
SHA1 2134bca1fa16133632a1b3f28fc38edc15e933ac
SHA256 76f092341fbef40d5f35f70bab55f2eeb3e70a9b60f46043b342ceab7f79cef1
SHA512 4cb596ca11b4941571f3b998c98707bdf45ad608c9f661e0f0ae528fdb797190c9bb22e58ff65a98e52e3e51396f4c8b22229eefe54f0a73eb49c79d07ce1604

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-heap-l1-1-0.dll

MD5 6e306654a55454e40889407e9334da0c
SHA1 0612894d9fbd8f92299541535f78db05fba3a78e
SHA256 eb02fc995bb92b214dd684e24c1060735f61ad4884ccb4aafa86c7c1de66d621
SHA512 f5a6980824cbfa82c47b20581658eb9fa8eeb2dbcf6bf9b148fe09099a3b131c2a4cc2a129135e708fb72f1cc43f083f93fc85a0e03209b75dfcc09106b977ac

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-handle-l1-1-0.dll

MD5 c8d52cde743f4559e6eda1472ad44277
SHA1 09a19c5c5bc45dbf5391d882015b47cdad4b5631
SHA256 d2926dcb85ab577be75ecab1fc8dcd062318f147e0a9262a3b807bb5acb62beb
SHA512 3a031f282303cf664c6ab04c1561598595ef776799005d8ac7ae091ffd140e4d1d1e23b9f6783618c2bae4dc4d1cf741fdb3f83390d6854de97d85af4c940b23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 a8f889870885c5784afd47f5e3d33eed
SHA1 494b86c51c8908d17e563c80da0d42350aaf1155
SHA256 8979fe86afe23035caedd5df135786da2b28c095b69ce0179b6484fd680c9b91
SHA512 bb18675a9b311e4c34806ec834886659a95207a4ec9b48b082f5fa0e05f016b9f946db29c7aa20662b4090c7f42a606f9f3a5df48d7ed20c5b404ccf91a1b7eb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-profile-l1-1-0.dll

MD5 258caf72fd7c60586b4bacfee6b37872
SHA1 4a473ff7cdf254336cf2ff3ddeb03bd047b35af5
SHA256 04c0a5392a18a7555635cde23f9111ea4da550c309827b725a74bb6fd4f0cc64
SHA512 121a366f79ca1c9212d109d1f72a53b31f0bf0394b947949e2a0191629ace8ed107118e512bc8f4e9b43a84b6c936422372be2ff497f2cf13276217b15d079c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-1-0.dll

MD5 efbbbcef1514840d5ad9d8c084a0147e
SHA1 d046a440556ff7b9857963d86dd050ccd6b0533c
SHA256 9c1d190c85b9ccfb171d3db4ec363c97a3452bb365dd75dbda5ec9cad1a5d803
SHA512 fe78850b3acaa725f4a3f65fccc3c2644ef43eebe3c0083c0d4e9e967cfb230d966dee87dcd8a27f4dc452d7e72ea7efb24ab7b9dbcd58ab81f78d0d110829bc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-string-l1-1-0.dll

MD5 01cbaa0aafba1275cc23c29f139d399e
SHA1 5ca1434545c02c3f34bc9facf9b2eecc89ec3a24
SHA256 dcb3fc36c43a402b4b35644f1e7f6d6db31ef8d0a731c3b882e2cf3201a6714c
SHA512 f5a3d05690bf409d2b8d7eb96ac4fde1e2d27add79945d6d9f2482ee61c6698ee0e167e9677a61a435d99175979e8651f34b92a6d057236254a0a2ba1a9cc79f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 cec2f0ac232cd07d217299386118692b
SHA1 7cd8218afc5ccf528bb2807168e11e5820c8bddd
SHA256 a5f4f23b01cac69058b7ec0e30b470f90bfc6d40de20e618c3045bf06e4a2cfd
SHA512 e06fc36de71caec6732d2553b5afcd6daf0b8eb4f1aea7d6f6c2ae00b3e3f4172c932458ebb6644e41dd26a48b66dbe935a40bcee68aa7cad4af155befe7019f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-0.dll

MD5 2557484c75d4507688b68a64882e0022
SHA1 ff78c6d44f7474d98402f8e17cfce5d712c41b95
SHA256 50b3e4ffee430c1b45f0ca75959936608f756ae5eb0352e8f3f5f69c5adfaa20
SHA512 e1c502e889664a46acaf0d8cab5d5082f46ad3f6f1a24ec702ec5174d077fff51cce7f80b13c5c22704937ce380ec3b14c088955d94eef1050d293c078869870

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 56813b784a1f8cdabedcc10de6e84864
SHA1 b636ba140e1ba7de5e59932702e7b4e53025d651
SHA256 98ee724aa3f5a8ec4f3f8596be5aba5cd19b556f88ef9fbaff1569051a4d0dc1
SHA512 f11739be9ff624044035678cf39b91d28a53f1ac56342baf985a4328da4c64c81107d7e1787ee50efb382472e4d46bb21c520918b8831edc7f6b3db70befa068

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-memory-l1-1-0.dll

MD5 98b1e6d052cee5ccbb7e5af795b9f48c
SHA1 357ef3f8011d7e7f1d4cb30beae58d24d6b05085
SHA256 5c950723ff3118801884df67b6a14543978263a2d2a0437d8c8b2fe8ef3925d4
SHA512 31d961ada87eedfc4c1bb8938b0c4b44842153f4450f48a0c1dc12208f5c1ba62b076ef91a0dbd1c3f98d1e96517904b95e072002c50d2873c8638ddb25417d7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 b0537a9eccc0f909c0715fc93b473d8d
SHA1 79e9929c83f5f73314c52f26be4147a74aa80e23
SHA256 8784c4912a2f391d5f0c79b38f48baf88e98bf4fa61614ccb9232d9bd1e4ad54
SHA512 d68e50361566e8800afb5fae32c65c90d2ac7877f9a02f3e2e6af61ccd8f99b484c808a9ba62ec9e4727481798b3d3f4f74d19b16c6ed80536cf89351071bab6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 1a456489a0e26cf602d4af97fd537b0c
SHA1 fa62a55a403ee92b1d5f31ce2c5cc65e2de03247
SHA256 3e8d67f3978e40a636c5fa86c310801d6d6b74127e556c57ff6fde8e1d7b706d
SHA512 04a61c6d79c72d729d602c4a5d069c73cd92b0586d988056b2f2cebf88bac5723c1928d4a1a08fe13151ba9905cc28aeafbe344c829fadc66f138aac43e8c147

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleMarshal.dll

MD5 21019b8d2736ba2119992486493a1ad8
SHA1 dd1cdb18b7f7435c8eaeb219b5cd94529a17191f
SHA256 4de9d6f66de5305adefa837460da8ba68c68d4faefe8808c2d44b4637ef306fe
SHA512 7d3964ca8b1ce3bf52212e7e118d4a224f1a74e00652495f72d2f316886b353927bc6b6548308f4fa3e09316315acbd8908a86bd8129c494fef1704404921f06

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleHandler.dll

MD5 d5050b714a9aff9fea4d2e075a597c17
SHA1 f4a292fc70eeaac72a0fca08d414b3dcd29eaef4
SHA256 3be8e82af047b28cfe8153c015f44098301955bb45fdaf1c126bb32a2cf0358d
SHA512 434f73e15b80c75bd55d2e068f37a0551090038c3f2b325c73e03dabb25dc40a1dc0e3e96a3e935d2db3022442e6c18585ac6d9e2cc926b2c9b93c1594d43d00

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 aed0b2511a396bb258a7bc7bb646b951
SHA1 151b08d20538990b894afef34de451708b5f334e
SHA256 fb7ffa16bfdf7392535b8e78a86db89ed9032f67a16b127a105582fab118cf2b
SHA512 dd7cdb5f401dce1566e331a3184ebd2c71f6d2dc4eb59f384bfb2daea8ce8a146d7449d989da2193abf30cd568e67bc932e28c8b93c7d6beceac0c7cb9ae1f5c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-util-l1-1-0.dll

MD5 7294cef433dd8afa73982ea96dbd6f6a
SHA1 c73b123197e6ad47b13febeafa912fdad566c8ee
SHA256 21c57c8ae9407cedb50bcebf7f844a5933d274676f3194a87997672c7177cadb
SHA512 24048bd06f0a3ce593eadab4fee4e26aa339faba52ae52dd36f0c66ee5d7c166f68fff8ff5dbfffde26588351ca4b6de033528dd4b0a15b0afe3ddcaf13b8661

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\app.dat

MD5 959484c8547305fa953c18dfd8908237
SHA1 ea7d05f9e395a10925e4257610d6f69b97455a94
SHA256 a3a08a040e8a4aafa0a313660c3e1400143ac5802b9fa7f9779baa12852dca5f
SHA512 16a70e31edad5674d4f26b474718c97d36aaacc54bad95c111eb729a46cc4fe51e6f27492e7ced42af7597c6dddfed84faa5fe0f73eafc5b2cabe9be622deb23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\application.ini

MD5 144e43c13aa3960fab83e9fc83a3193d
SHA1 1a9eb2e61787ab5f7e4639a5872d609a9690446e
SHA256 c940f1343198d3927483c67fafcf741615058409e4ecff4e2d9255b73a6689cb
SHA512 dea162e0f2d1597af1dc739b0223bc76631bc78f14e857b9279d8d61aca285e994618d1cfa92ede60418cec82a2c2b5071a3b79bd10354cb4fbdb11d124381f3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.exe

MD5 9036057c005986ce82f5f42ac5807569
SHA1 433d79828968e2c257c0fe28edfb8fa77ad4b1c5
SHA256 1ea06a885041a31a4015fe55b2a7d6527bbafd8d3be5c1f7f4417894a8c8f654
SHA512 c44dc8e2d3a429ac3d64a07806eb84ddb21b9cfa49c5434a27ac1337997daf04289c42f1c5215a9ef892c31c3902bba7c4901e6951f39c8b5cd7350bcc47234c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MapiProxy.dll

MD5 d17b9c294f61a3cc63336a709dc1b003
SHA1 0a1bfd779c940ccfe1cfc70a39d427d9423fb976
SHA256 2696de4b64e70a565e6b355e1687b598978ea5a92545829c93fcebfc18dc4899
SHA512 6a58cfee52badb8cd42d598a8794e2b5926036f073a64a716303deb829488ef6eeb182a54fffe0ba5441d513375005d3ff8f35b24c059e4d807ff356bbec9521

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice_installer.exe

MD5 a5f2d18facaa6281457e92aa1a6fed95
SHA1 988c4f07aa884a75fbd27a4a0c76b8febf8d6413
SHA256 c96ec68985b09cbb81d2450db611f9739fdf89e76e6c9355cb1bd755c541ca21
SHA512 acb0acbca8c961832a1175e1a4ceed56039cbd54ce4f1f61b8761ed83ca89e8b3925ac46558d81afac668d954f09be3e9892ec664c0728b375cc5549e1a58756

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice.exe

MD5 831dad9c790385246d311db333436239
SHA1 f7936de984c3a1286cc3774ddba78812efe7b3df
SHA256 d556017c18e41628f7f5b831259a1cbe611b4f214ae607e15918dc366c40d5b6
SHA512 b7cba5bd4ceac12dd611992cc35c5076984d1b1c75784d96d9dcd9d71f232c17be86af18a42e673f06658edb3b72c0edff94b4d3bf048c910bc01c03a6c56ea5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libssp-0.dll

MD5 402f519e62883aecae592df374308fcf
SHA1 3f5704f0e3ce6282c51942ef5f12bee416f738d0
SHA256 696fba13526b2e53577de896e2bf1a5fb0b72258d32244a48cee7218164c600e
SHA512 001563ad000358ec1ca3118bdecac69fab4d6257e912f67a170fd3be93a3f0d946e448a36963fd8730cb41f7ddc5b9a4b42e83bfc4b881e8b42448a0aa37aa99

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libotr.dll

MD5 7939d03f9318170efed96a9f3f24773e
SHA1 7fd4814cdeac68fa27b5c622708fdcd30f398ba5
SHA256 8ac7a9f2a54498c35d80d4561032c765749e8a0e16b1ae3210f683f150d63567
SHA512 562dc32d2a191365879449a3575a1ec9e5c4ea49f0b756fb184c3779d6af1636a2807ba630343410fd9a7fee78cbf0aa232b87efd16aca5e9cac754b128526d1

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libEGL.dll

MD5 596e7aa89431613d0248aad6099cb792
SHA1 5e7b3bcc592edb31731a0acc5ec1801d3a10fc98
SHA256 8404b35893817c13cbc817f0708bba5ce76be24ce137d5bd38ed11c0d94aaf36
SHA512 1d09eb54f1db4fdb97579910bf4310a63909ff753c2340aab8179ee23a6e4695b5fa2f79120017a462efb8b449e915e1571afb7c48008a3244b8d24953581abf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\install.log

MD5 e25097c27f3c028f4233f9ada33493ee
SHA1 7b19479d916e786312aa1a22dbbf12adf7a8c4d3
SHA256 9cf14a75f8f20ab0eef62368575fed49b4f21dccfc0fc5769aa613a940f0e74f
SHA512 9d6c0c4dc147028823edf09cf85bb29ea06ce9bda73b2cc7f0f67a75efabc64da3b32a892b829d0ae4270c38b855e004668c10a7e277ded74215a6f56bb19bd4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\IA2Marshal.dll

MD5 906d7020727d47b1eb67ac14eaeb605b
SHA1 2739adb2c52759a77aa2ae60e9f17d2cd291132d
SHA256 f514665a4eef6e69367ccac68351dc56cda0606793488eb4e1cb269f91c7cb94
SHA512 9c904fa6e62d734a8223e9dc881b5ca90f98ac0e5939c1f564a676d374b07924813a91502285f2ff33b7078bf48d7a416203b8387aa605c3ba0d74d6b04b820f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freebl3.dll

MD5 cff5feefed016f7c533115c0b18b5237
SHA1 3a34c05360231f098c37d77a60f9f6021d6e7d20
SHA256 dac4d003d0c005a4324a6d7ab0b28bc0d6114ab0bdf90f5f1594e10ee63b487f
SHA512 16a309b38ab9efb5d6b8fb108f3a2152d6ae0ee2f7e3795e96422cf196e8b3c062bbbc8526066afc2ce3b0050226b9f9ea2f7191f544f2b97343f1eb69648cc4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.ini

MD5 1b0d446f9d17c1374c81acec9d8d2406
SHA1 016bca3d4ee9a0dbb4350ee7a1898779dced6c11
SHA256 a0cc8cc3287d54d7e23a156256a553792970df9ca57f6ad85dceed32b979da71
SHA512 4e7de92579628cf8c31287506d6f3096bb15402ee6d694a72462cbd1f093e7d04cbcc9e13691b94408091e0c5ea8d8c528365a90885b55a126416af37be6979a

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\breakpadinjector.dll

MD5 51459dd1ff97d5b7403c729b9eb19d92
SHA1 c5ec382097f0040b29ca044e870cd27b4ba463dd
SHA256 dd1f8fde218ff502829aca988e20c7b40c7046d1a5353d9362b97b1fdbcefcf0
SHA512 3e4e33069861fae4b484994978e2a1a98271016bf944c64b0d0cb4f3e146ac54a7415b1403974991a8a2b783ea7e32a8f01fa55657ceeff41bc7b427dfca4ac7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\minidump-analyzer.exe

MD5 c16d878f6062917ed856e87410c8a42d
SHA1 7286565d2770d5c8bbe6138a4d3a4424c7793cdb
SHA256 ae30d28169d5c4317c516b61cbcec12300173f390a6a8542559395a9cbe3705f
SHA512 eb8a23fdc5dff0aa7aaa241c9ce88d10846fcea9c08f32d5f04cae81899ae7c77b8363e874b3f96f72de28e66bf0da71c3ac16037493150091e0783d02d39b0e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozMapi32.dll

MD5 753557b2340cf9f648b91f461eaa9c87
SHA1 21103cfdc460fe4c05350ba87acd525b361ff413
SHA256 11adc671dec079ce80e96dc6aa6adf8fab7144c414174e44542d5559f1e25601
SHA512 fd90413c24f59b8d2198efee8f8e322752dc06c9ab8e3eedb08fb337542ec4ec80815de9b3a263689594af9aed11e8b54f501acdb2ddd5b55ff0f3dbad3df5d2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozwer.dll

MD5 376b31a8b3a41b05fe7dbc025c794db0
SHA1 a814bee32e59fabd27dd0ac7166b632ee8ab4715
SHA256 2852e0e7016443bfd9c4cb715169477b89a3d8e40e12e1d2d1f9cc3df96798bc
SHA512 1eda94bad4d0ce48eecbfc94c728462a0cff1a4cd586de227007e7281d31a65d572525d8ef11f0d26e397831f83341a3ca933bbfac9fa30cf89279411afe739d

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pingsender.exe

MD5 c158adee5aea09cf69d97335b7dd95e5
SHA1 3a32be5863e9514290542210bd975a94bcfe12ba
SHA256 d245767449dd5a61939703f1dfff908e4f680e89fa5b936dba1a1874dbee9147
SHA512 848fe4700b744e6732e6d2cfa44e40c8a257748b16b45b9f8aa6e15eebc307fd50b0b7688bb40f886ccc70afb74f5dad369d988aff932ebb55264a870713c9b3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\plugin-container.exe

MD5 3c73d5124aae162f94754ac70a5b61c4
SHA1 f12cc2dd1376be65b77c16ae0247a1e8b9dae173
SHA256 fdf6300ee656d774a81bd61d608cbb1d0180c0edbacd0a218bc84693a0834c13
SHA512 3a4d834c1f31ec9c17c25bc831f42d0bbfb3eded5adf8be8d5895feca178c4a9b610d2fc0b7aa9734c1e559a37ba92478d3c69b8b454f0ce115847158530f8df

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\platform.ini

MD5 49d86abbb0d3bf41563b5fe7f493e383
SHA1 c0887844db2d72346c4cfa528c57c3cc8255ce05
SHA256 25bb9c44df7eb62eff9b6e7e48598561c9ce5d4f4c52774c9d77890d71811aa4
SHA512 40426b2bed856f3090d7fd65d6ce1bd413418a673f9cef9b4fe89c8607932fca48693f80a2430bafef1bc47af1bfb7f6e3d560f240d3a5b9e185800de0a3d6cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\osclientcerts.dll

MD5 30a803e6d3b001c7ea6d60282ec89ece
SHA1 9bbd2fe272388e666bcd0ed7365221cf58b12141
SHA256 281cc2479d4f79709d305399851a95eb4bf486274b3c976019cdc45be5e5fd95
SHA512 9fe01ebba863d19ed00627437e546e19098c794e6fa399d99cb8a9ad6a6b13c2c2ec406e2d07148d53fe94b01283917d6dc2241fe7086cdbe68c274b8857c4c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nssckbi.dll

MD5 6d14eb47c90f63549ad7aebc6f663e0f
SHA1 280c1bfd15757c595275b932e252f6a641abe5b3
SHA256 2d872c1a432dc556d21702e5addb1be6544cdeca20e818c28fe1475f45aef946
SHA512 c03ca69344341eabbc02202a01b348d13e3b4a35c50a0e20b6c9ec94cd76060f1ef87a979880d51421861b06998d0e5ac6c1fdfd024b5537b990bc46e4c6f970

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\qipcap.dll

MD5 50791aff95302ec609d5e7925f88042f
SHA1 8bd727d8c590b2576947cab899065a8bd6421a3b
SHA256 d784bfc258775ec6e7171895273adbb28159a16b004050e888bdc57c38fc53e1
SHA512 f68f49f2980a1663be2d98e458ed574bd40dc324457a006a903734cf049312aced55d593d60e608073e48ec1f66ab21d4bf1025334eda49d4da51362d11766cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\precomplete

MD5 12bac409a02d5c863300a0e2f095e05a
SHA1 5939e68bc68bcb52e272a864508a531c482ece5b
SHA256 b971bee8682f3be1b88dd7f183cf232762203ac74c9f8636d3198fdccdad5596
SHA512 081b48cb89958b11664f6b30b5a9f4ae225deea9ca8bbd3bb7674581ad5a35adca4c8fdb605c17c98629759499a1f2fd5ead18c1ab88c7ae9c93b7a9c4cf2d05

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MSVCP140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\VCRUNTIME140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

memory/1440-994-0x0000000000AE0000-0x0000000000D8C000-memory.dmp

memory/1440-995-0x0000000074A80000-0x0000000074A9D000-memory.dmp

memory/1440-998-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1440-997-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1440-999-0x0000000074740000-0x000000007474B000-memory.dmp

memory/1440-996-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1440-1001-0x0000000064540000-0x0000000064591000-memory.dmp

memory/1440-1000-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/1440-1003-0x00000000740A0000-0x00000000740CA000-memory.dmp

memory/1440-1002-0x0000000066C00000-0x0000000066C14000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8DDD.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR98C4.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9875.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9845.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR967F.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9584.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR9554.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR94E6.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR94C6.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8F37.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL000005a0\BR8E5B.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

memory/1440-1027-0x0000000000AE0000-0x0000000000D8C000-memory.dmp

memory/1440-1028-0x0000000074A80000-0x0000000074A9D000-memory.dmp

memory/1440-1029-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1440-1030-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1440-1032-0x0000000074740000-0x000000007474B000-memory.dmp

memory/1440-1031-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1440-1033-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/1440-1034-0x0000000064540000-0x0000000064591000-memory.dmp

memory/1440-1035-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/1440-1036-0x00000000740A0000-0x00000000740CA000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2023-03-02 01:57

Reported

2023-03-02 01:59

Platform

win7-20230220-en

Max time kernel

26s

Max time network

30s

Command Line

"C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe"

Signatures

Babadeda

loader crypter babadeda

Babadeda Crypter

Description Indicator Process Target
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe

"C:\Users\Admin\AppData\Local\Temp\edf02789603a77a4c7b42dd8091babe0.exe"

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

"C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe"

Network

N/A

Files

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR19D8.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1A94.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1B7F.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1BEE.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1C2D.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1CBA.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1CEA.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1DB6.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1ED0.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1F2E.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1F6E.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\python-3.6.9-4.tar

MD5 d948bb94494348c51694553ef558e3b2
SHA1 7231990bbf6d55fc22ed3aa923845ce0d472a93d
SHA256 917cd8eb876d1f77ff1750a0b48a1e6f85d5f16f2caf113a3ebb52660a1fa5c5
SHA512 3e3c7b8e3dc6bfa53857c6a29b5ac0c6a05caa02b3a028ad1e6b266a3e756dfce1e509ac4b353e0c9efc7b80878dd37ed55182d98d234eb71711e67bb172c130

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\removed-files

MD5 95c5af7af5cce4af76f94a5a339deb34
SHA1 7b549d6f769d23d9dc73e3bceee6e0209e561363
SHA256 9c928f3eb41faa3465a2a672af976432f7b0e65aff527c1747a346b5a514f572
SHA512 14c2dc57a4cea69c3f4be44ff7e11196ca35513bc3afa95838bf0e04e0ae047abb6da720aecaa938c9b800dea5a84cf63e434c8870f27dcc12b9803842f46eec

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp.dll

MD5 b98331a3acb9bd606205bcb1050705d9
SHA1 213554003fb6804ac42cb1f98b609ca2f2aea8eb
SHA256 30a5750b6fce67efb2c04649a26e9f08e9ddc941d2e8b9ac424cfc156a60002f
SHA512 6b55e4329ec03a5d63ea4d2c025185e5f1a4d86da73abfa75822e4175c652fbfa4df6f020d3bc08c584a8a3dd424ca238d6b3b97ac75bb91f45de6f9f0c80e80

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnp-cli.exe

MD5 813a6f3215657bc9ea02e2fa13ee2465
SHA1 8adf7b7e16b12d641ee9efaab108b7af01e14fa5
SHA256 6373b4b10d34a52889b00d1a040252b0323a3b47027029b19ad77ffc447754a6
SHA512 1a1ee6435724f1e0f23e474ecfb19515713657cd4cc4642a4d6fe62f19a5f0eaf97f7601b4e59ebefd3c2da13b7c8920bbfbee415624c05eeef5ec756b297584

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\rnpkeys.exe

MD5 dba5fce543412113bb666141e1ed0467
SHA1 ebd632c0f684a368bad2d14c657775fa55394408
SHA256 1e67cd0b79d0e217b22de3624ee5657573152b04196a57f4253f1912d8c8c83b
SHA512 26cc65a10780bce643c505822b5b7a5d5c94bdd360df6e3d4dc7a68457628d4724223d3997aa2ea54954c8fb6f3786eb918cd92d9c6eba2573aa61da9771155e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\softokn3.dll

MD5 397d908d0b2fe3b12480c78270a906d0
SHA1 4f288cbb15d045414eda27fb5cfedd70f0ac13a9
SHA256 48392c5bbe15380960aceb6f279c7a6bcfabedf534c41a771586eb176d709f33
SHA512 8de0111ad951c8653927978535c76ed05e03f321aff6205bb8c611d66ef1d542de31ea7a28852fba48908cb120dc833915a3c3b4a2bfdf151b41498608dd4b73

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.VisualElementsManifest.xml

MD5 4d5f1879f229d9c0c0f1907f513ab02c
SHA1 ec58f4ccf2aa21cc7a075b720773861882186c0b
SHA256 9eefc90d6525f476810ad24ef09b05c200c552b6010619c80180052570870061
SHA512 5cb6696efde58153d8e2a90b1540b86dc7150284907f79beab4ca8afecd3f8e413be2394b13feea9f2ce7237c0d29154ffbe6d139d4acfa114afdf60ec5b9027

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.exe

MD5 39f842e56bcdc46ea75e56e38a5776da
SHA1 b80fd74e05bc5d6023e348825c55f8306b7b1c27
SHA256 d0578346d4e1f7d1ff4e9555263220386e5b1c37f4b362eaf2ae22d96cd0c44e
SHA512 c08f0512efbcdcb59673c2a9f4c19f161f268e8f1743fa27932bb6886e6aef666dcf04e1fac1120adeaace9eebff634ce0d77405f3a2ecea0f7c52f03dbaf68f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\updater.ini

MD5 f3ccae543ad159738db80023d96495c0
SHA1 35829d3207577500fe07ab9e4bf445127b7e60ef
SHA256 ab5e110f7c75f27e772a29321240dc8621e9c7cb3909b5de3d419c12d0d5ef86
SHA512 a3f8eb5127bbd945d4d1c43a573b5ebbcd375e14cf9a8dc83e7e33d23445beac161769878f2c2b5e023cdb2554586739e91ad863da49baec6f89aae46e242b36

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\update-settings.ini

MD5 f792f87b62ca28cb5e81049b66583f97
SHA1 d4bfe85e8353149e981d517e970a75845c470bad
SHA256 99e82ee4b089ac404e9dfe1c2e521153b2622a50dc6e2cdd668606c1a7c3243e
SHA512 292054c0a794037efff9b52d1965f5103ec4b7bcbf28a85701d9d7981a1d57f8ea9a04b7ffe374f14207728b7243a888fec8ae6b984f02db376316eea15679c9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\WSEnable.exe

MD5 1a3403377c91d3f50a08a3f48f84f532
SHA1 c964111a4136afdba80b04704b3d5b0777ff002b
SHA256 78b742bc8c622395891ccab7e8d1968979b5d0e581e2b15248b96ebfa4e9e82a
SHA512 02e22991d198bd86470589aa51e53e6065e9cddf0022031e2cf08fc7fe210e375e4b24484f7b32f64bcf668fdd675465956753e744857d576d97b215c97c23a9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\Accessible.tlb

MD5 e49aeb412aab7c49a27e6feaa0ca40ce
SHA1 6a2f6ea9facc48a3f736e03fda2c1ce44b744af3
SHA256 754fd922f8c93b66f723c30d39083a6a1fe33fa4b6439d55ad2459be40c3151e
SHA512 8c3f957d032fa8edb523cd3f473a57e2cc020c9e6e33aea183cad8b435777660f4c7e87ba62c67bbb1aef726d109f0f34b2d86c159ca9bd98bfad43c89af7ad2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleHandler.dll

MD5 d5050b714a9aff9fea4d2e075a597c17
SHA1 f4a292fc70eeaac72a0fca08d414b3dcd29eaef4
SHA256 3be8e82af047b28cfe8153c015f44098301955bb45fdaf1c126bb32a2cf0358d
SHA512 434f73e15b80c75bd55d2e068f37a0551090038c3f2b325c73e03dabb25dc40a1dc0e3e96a3e935d2db3022442e6c18585ac6d9e2cc926b2c9b93c1594d43d00

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\AccessibleMarshal.dll

MD5 21019b8d2736ba2119992486493a1ad8
SHA1 dd1cdb18b7f7435c8eaeb219b5cd94529a17191f
SHA256 4de9d6f66de5305adefa837460da8ba68c68d4faefe8808c2d44b4637ef306fe
SHA512 7d3964ca8b1ce3bf52212e7e118d4a224f1a74e00652495f72d2f316886b353927bc6b6548308f4fa3e09316315acbd8908a86bd8129c494fef1704404921f06

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-console-l1-1-0.dll

MD5 22df48515382f53b828728892c65e62d
SHA1 f834220481f9acab2fce917bd6271705c3300872
SHA256 97955d1f5134350fbe6c829061e01106304978651979f4ecd5ec146bfc70d36b
SHA512 97507029a6d0057812da1a917b14e021747a1e13e4a1406e73d4f330f0fd1b9822f6300a5030d2aca8063da6da2a5a1e6e9a5a2c8ca612401188713e779fa608

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-datetime-l1-1-0.dll

MD5 b669e6de4647cd31009b15d5edd7c999
SHA1 16f05edfa04378e99d906e9162b502c99d8ddb61
SHA256 4e560ebdfe0bc1193a0f3feaac35634b0655829d5cc7e79d113f3a994f16d3ed
SHA512 afc8ac85c8fa15fbb3e72b8192314b8ca7eaa0a686ef77747adadd0b902260f2cb0482f76012cfd5023a12a7c0d89b973af97bd4f208389d8ca26005fe4e16dd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-debug-l1-1-0.dll

MD5 bf8a71efcaa8260de58ab657dbf624c6
SHA1 48a1e8fd73c0b16304f0fafd6e7f6b5efb476314
SHA256 c3003ff52917dbac5d3feec1bdea8ad4163893ec2d320f904b6d3698a6dbc7bc
SHA512 e1284fe0c7f42204043320322dbbaadfe194aae4eef0aa863b25176107ec9900a2a0dfe4778b7ca5960d6b187e7cc61e028bd02ae0dae20a90591e33165dbc0f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 1a456489a0e26cf602d4af97fd537b0c
SHA1 fa62a55a403ee92b1d5f31ce2c5cc65e2de03247
SHA256 3e8d67f3978e40a636c5fa86c310801d6d6b74127e556c57ff6fde8e1d7b706d
SHA512 04a61c6d79c72d729d602c4a5d069c73cd92b0586d988056b2f2cebf88bac5723c1928d4a1a08fe13151ba9905cc28aeafbe344c829fadc66f138aac43e8c147

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-1-0.dll

MD5 977831a443ea30ac8cb70f4a069a2795
SHA1 b07313dc2760c524d1bae783e81a7f18743bff87
SHA256 f6eb872448b5147e59f373eee8a9852d1afc5eecb967f713a7f7acb4939e9a63
SHA512 0c17bb97188b6b2aaa49fb3cef94053bf20e7b587cca9307ec4a4e166f4703d17a50c12148b3112cb5d98088bfd186adacb8c55c3d8a634ead2dad93b70b5f18

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-handle-l1-1-0.dll

MD5 c8d52cde743f4559e6eda1472ad44277
SHA1 09a19c5c5bc45dbf5391d882015b47cdad4b5631
SHA256 d2926dcb85ab577be75ecab1fc8dcd062318f147e0a9262a3b807bb5acb62beb
SHA512 3a031f282303cf664c6ab04c1561598595ef776799005d8ac7ae091ffd140e4d1d1e23b9f6783618c2bae4dc4d1cf741fdb3f83390d6854de97d85af4c940b23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-heap-l1-1-0.dll

MD5 6e306654a55454e40889407e9334da0c
SHA1 0612894d9fbd8f92299541535f78db05fba3a78e
SHA256 eb02fc995bb92b214dd684e24c1060735f61ad4884ccb4aafa86c7c1de66d621
SHA512 f5a6980824cbfa82c47b20581658eb9fa8eeb2dbcf6bf9b148fe09099a3b131c2a4cc2a129135e708fb72f1cc43f083f93fc85a0e03209b75dfcc09106b977ac

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-interlocked-l1-1-0.dll

MD5 8dcf3111501ed0a01855ebb328537bf7
SHA1 2134bca1fa16133632a1b3f28fc38edc15e933ac
SHA256 76f092341fbef40d5f35f70bab55f2eeb3e70a9b60f46043b342ceab7f79cef1
SHA512 4cb596ca11b4941571f3b998c98707bdf45ad608c9f661e0f0ae528fdb797190c9bb22e58ff65a98e52e3e51396f4c8b22229eefe54f0a73eb49c79d07ce1604

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 b0537a9eccc0f909c0715fc93b473d8d
SHA1 79e9929c83f5f73314c52f26be4147a74aa80e23
SHA256 8784c4912a2f391d5f0c79b38f48baf88e98bf4fa61614ccb9232d9bd1e4ad54
SHA512 d68e50361566e8800afb5fae32c65c90d2ac7877f9a02f3e2e6af61ccd8f99b484c808a9ba62ec9e4727481798b3d3f4f74d19b16c6ed80536cf89351071bab6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-memory-l1-1-0.dll

MD5 98b1e6d052cee5ccbb7e5af795b9f48c
SHA1 357ef3f8011d7e7f1d4cb30beae58d24d6b05085
SHA256 5c950723ff3118801884df67b6a14543978263a2d2a0437d8c8b2fe8ef3925d4
SHA512 31d961ada87eedfc4c1bb8938b0c4b44842153f4450f48a0c1dc12208f5c1ba62b076ef91a0dbd1c3f98d1e96517904b95e072002c50d2873c8638ddb25417d7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 a8f889870885c5784afd47f5e3d33eed
SHA1 494b86c51c8908d17e563c80da0d42350aaf1155
SHA256 8979fe86afe23035caedd5df135786da2b28c095b69ce0179b6484fd680c9b91
SHA512 bb18675a9b311e4c34806ec834886659a95207a4ec9b48b082f5fa0e05f016b9f946db29c7aa20662b4090c7f42a606f9f3a5df48d7ed20c5b404ccf91a1b7eb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 56813b784a1f8cdabedcc10de6e84864
SHA1 b636ba140e1ba7de5e59932702e7b4e53025d651
SHA256 98ee724aa3f5a8ec4f3f8596be5aba5cd19b556f88ef9fbaff1569051a4d0dc1
SHA512 f11739be9ff624044035678cf39b91d28a53f1ac56342baf985a4328da4c64c81107d7e1787ee50efb382472e4d46bb21c520918b8831edc7f6b3db70befa068

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-0.dll

MD5 2557484c75d4507688b68a64882e0022
SHA1 ff78c6d44f7474d98402f8e17cfce5d712c41b95
SHA256 50b3e4ffee430c1b45f0ca75959936608f756ae5eb0352e8f3f5f69c5adfaa20
SHA512 e1c502e889664a46acaf0d8cab5d5082f46ad3f6f1a24ec702ec5174d077fff51cce7f80b13c5c22704937ce380ec3b14c088955d94eef1050d293c078869870

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-profile-l1-1-0.dll

MD5 258caf72fd7c60586b4bacfee6b37872
SHA1 4a473ff7cdf254336cf2ff3ddeb03bd047b35af5
SHA256 04c0a5392a18a7555635cde23f9111ea4da550c309827b725a74bb6fd4f0cc64
SHA512 121a366f79ca1c9212d109d1f72a53b31f0bf0394b947949e2a0191629ace8ed107118e512bc8f4e9b43a84b6c936422372be2ff497f2cf13276217b15d079c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 cec2f0ac232cd07d217299386118692b
SHA1 7cd8218afc5ccf528bb2807168e11e5820c8bddd
SHA256 a5f4f23b01cac69058b7ec0e30b470f90bfc6d40de20e618c3045bf06e4a2cfd
SHA512 e06fc36de71caec6732d2553b5afcd6daf0b8eb4f1aea7d6f6c2ae00b3e3f4172c932458ebb6644e41dd26a48b66dbe935a40bcee68aa7cad4af155befe7019f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-string-l1-1-0.dll

MD5 01cbaa0aafba1275cc23c29f139d399e
SHA1 5ca1434545c02c3f34bc9facf9b2eecc89ec3a24
SHA256 dcb3fc36c43a402b4b35644f1e7f6d6db31ef8d0a731c3b882e2cf3201a6714c
SHA512 f5a3d05690bf409d2b8d7eb96ac4fde1e2d27add79945d6d9f2482ee61c6698ee0e167e9677a61a435d99175979e8651f34b92a6d057236254a0a2ba1a9cc79f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-1-0.dll

MD5 efbbbcef1514840d5ad9d8c084a0147e
SHA1 d046a440556ff7b9857963d86dd050ccd6b0533c
SHA256 9c1d190c85b9ccfb171d3db4ec363c97a3452bb365dd75dbda5ec9cad1a5d803
SHA512 fe78850b3acaa725f4a3f65fccc3c2644ef43eebe3c0083c0d4e9e967cfb230d966dee87dcd8a27f4dc452d7e72ea7efb24ab7b9dbcd58ab81f78d0d110829bc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 aed0b2511a396bb258a7bc7bb646b951
SHA1 151b08d20538990b894afef34de451708b5f334e
SHA256 fb7ffa16bfdf7392535b8e78a86db89ed9032f67a16b127a105582fab118cf2b
SHA512 dd7cdb5f401dce1566e331a3184ebd2c71f6d2dc4eb59f384bfb2daea8ce8a146d7449d989da2193abf30cd568e67bc932e28c8b93c7d6beceac0c7cb9ae1f5c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-util-l1-1-0.dll

MD5 7294cef433dd8afa73982ea96dbd6f6a
SHA1 c73b123197e6ad47b13febeafa912fdad566c8ee
SHA256 21c57c8ae9407cedb50bcebf7f844a5933d274676f3194a87997672c7177cadb
SHA512 24048bd06f0a3ce593eadab4fee4e26aa339faba52ae52dd36f0c66ee5d7c166f68fff8ff5dbfffde26588351ca4b6de033528dd4b0a15b0afe3ddcaf13b8661

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\app.dat

MD5 959484c8547305fa953c18dfd8908237
SHA1 ea7d05f9e395a10925e4257610d6f69b97455a94
SHA256 a3a08a040e8a4aafa0a313660c3e1400143ac5802b9fa7f9779baa12852dca5f
SHA512 16a70e31edad5674d4f26b474718c97d36aaacc54bad95c111eb729a46cc4fe51e6f27492e7ced42af7597c6dddfed84faa5fe0f73eafc5b2cabe9be622deb23

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\application.ini

MD5 144e43c13aa3960fab83e9fc83a3193d
SHA1 1a9eb2e61787ab5f7e4639a5872d609a9690446e
SHA256 c940f1343198d3927483c67fafcf741615058409e4ecff4e2d9255b73a6689cb
SHA512 dea162e0f2d1597af1dc739b0223bc76631bc78f14e857b9279d8d61aca285e994618d1cfa92ede60418cec82a2c2b5071a3b79bd10354cb4fbdb11d124381f3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\breakpadinjector.dll

MD5 51459dd1ff97d5b7403c729b9eb19d92
SHA1 c5ec382097f0040b29ca044e870cd27b4ba463dd
SHA256 dd1f8fde218ff502829aca988e20c7b40c7046d1a5353d9362b97b1fdbcefcf0
SHA512 3e4e33069861fae4b484994978e2a1a98271016bf944c64b0d0cb4f3e146ac54a7415b1403974991a8a2b783ea7e32a8f01fa55657ceeff41bc7b427dfca4ac7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlicommon.dll

MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\brotlidec.dll

MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.exe

MD5 9036057c005986ce82f5f42ac5807569
SHA1 433d79828968e2c257c0fe28edfb8fa77ad4b1c5
SHA256 1ea06a885041a31a4015fe55b2a7d6527bbafd8d3be5c1f7f4417894a8c8f654
SHA512 c44dc8e2d3a429ac3d64a07806eb84ddb21b9cfa49c5434a27ac1337997daf04289c42f1c5215a9ef892c31c3902bba7c4901e6951f39c8b5cd7350bcc47234c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\crashreporter.ini

MD5 1b0d446f9d17c1374c81acec9d8d2406
SHA1 016bca3d4ee9a0dbb4350ee7a1898779dced6c11
SHA256 a0cc8cc3287d54d7e23a156256a553792970df9ca57f6ad85dceed32b979da71
SHA512 4e7de92579628cf8c31287506d6f3096bb15402ee6d694a72462cbd1f093e7d04cbcc9e13691b94408091e0c5ea8d8c528365a90885b55a126416af37be6979a

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\dependentlibs.list

MD5 c35d2da6df0f7abb4d0bd534c5d5b6b0
SHA1 a4da4ca15d97746796412c2bad3fc8fbea716869
SHA256 ce638d544efe50176888e17bfbf78f118dc733ce5c2fee2eb66436ba96341345
SHA512 d27f58fb344b2303db2f4a48a153c9f11eec1663020ba8b5b973fd001c4a8c27c11e29a54b6d1913888b4ddf376aa7f45c8218378abe39a64ebdae4feb6b25cc

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freebl3.dll

MD5 cff5feefed016f7c533115c0b18b5237
SHA1 3a34c05360231f098c37d77a60f9f6021d6e7d20
SHA256 dac4d003d0c005a4324a6d7ab0b28bc0d6114ab0bdf90f5f1594e10ee63b487f
SHA512 16a309b38ab9efb5d6b8fb108f3a2152d6ae0ee2f7e3795e96422cf196e8b3c062bbbc8526066afc2ce3b0050226b9f9ea2f7191f544f2b97343f1eb69648cc4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\IA2Marshal.dll

MD5 906d7020727d47b1eb67ac14eaeb605b
SHA1 2739adb2c52759a77aa2ae60e9f17d2cd291132d
SHA256 f514665a4eef6e69367ccac68351dc56cda0606793488eb4e1cb269f91c7cb94
SHA512 9c904fa6e62d734a8223e9dc881b5ca90f98ac0e5939c1f564a676d374b07924813a91502285f2ff33b7078bf48d7a416203b8387aa605c3ba0d74d6b04b820f

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\install.log

MD5 e25097c27f3c028f4233f9ada33493ee
SHA1 7b19479d916e786312aa1a22dbbf12adf7a8c4d3
SHA256 9cf14a75f8f20ab0eef62368575fed49b4f21dccfc0fc5769aa613a940f0e74f
SHA512 9d6c0c4dc147028823edf09cf85bb29ea06ce9bda73b2cc7f0f67a75efabc64da3b32a892b829d0ae4270c38b855e004668c10a7e277ded74215a6f56bb19bd4

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\lgpllibs.dll

MD5 9616551bf5d32b5f09a05c42bfd944bf
SHA1 4d9310aea5fb156cb58633baff315164d68661be
SHA256 dc204fb1e134ae1600aa60e4fbd8a23fdb9d7ec906f5196ac7f739b8429b2722
SHA512 30b18d5ca4e3e9906f3ce519ad07bcb093ff814a7ab437e8626a968e83a93af26f131cd96abe1fedd8db229e4053d688629985c9b490925f94a0bbf9a6889fe7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libEGL.dll

MD5 596e7aa89431613d0248aad6099cb792
SHA1 5e7b3bcc592edb31731a0acc5ec1801d3a10fc98
SHA256 8404b35893817c13cbc817f0708bba5ce76be24ce137d5bd38ed11c0d94aaf36
SHA512 1d09eb54f1db4fdb97579910bf4310a63909ff753c2340aab8179ee23a6e4695b5fa2f79120017a462efb8b449e915e1571afb7c48008a3244b8d24953581abf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libotr.dll

MD5 7939d03f9318170efed96a9f3f24773e
SHA1 7fd4814cdeac68fa27b5c622708fdcd30f398ba5
SHA256 8ac7a9f2a54498c35d80d4561032c765749e8a0e16b1ae3210f683f150d63567
SHA512 562dc32d2a191365879449a3575a1ec9e5c4ea49f0b756fb184c3779d6af1636a2807ba630343410fd9a7fee78cbf0aa232b87efd16aca5e9cac754b128526d1

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libssp-0.dll

MD5 402f519e62883aecae592df374308fcf
SHA1 3f5704f0e3ce6282c51942ef5f12bee416f738d0
SHA256 696fba13526b2e53577de896e2bf1a5fb0b72258d32244a48cee7218164c600e
SHA512 001563ad000358ec1ca3118bdecac69fab4d6257e912f67a170fd3be93a3f0d946e448a36963fd8730cb41f7ddc5b9a4b42e83bfc4b881e8b42448a0aa37aa99

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice.exe

MD5 831dad9c790385246d311db333436239
SHA1 f7936de984c3a1286cc3774ddba78812efe7b3df
SHA256 d556017c18e41628f7f5b831259a1cbe611b4f214ae607e15918dc366c40d5b6
SHA512 b7cba5bd4ceac12dd611992cc35c5076984d1b1c75784d96d9dcd9d71f232c17be86af18a42e673f06658edb3b72c0edff94b4d3bf048c910bc01c03a6c56ea5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\maintenanceservice_installer.exe

MD5 a5f2d18facaa6281457e92aa1a6fed95
SHA1 988c4f07aa884a75fbd27a4a0c76b8febf8d6413
SHA256 c96ec68985b09cbb81d2450db611f9739fdf89e76e6c9355cb1bd755c541ca21
SHA512 acb0acbca8c961832a1175e1a4ceed56039cbd54ce4f1f61b8761ed83ca89e8b3925ac46558d81afac668d954f09be3e9892ec664c0728b375cc5549e1a58756

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MapiProxy.dll

MD5 d17b9c294f61a3cc63336a709dc1b003
SHA1 0a1bfd779c940ccfe1cfc70a39d427d9423fb976
SHA256 2696de4b64e70a565e6b355e1687b598978ea5a92545829c93fcebfc18dc4899
SHA512 6a58cfee52badb8cd42d598a8794e2b5926036f073a64a716303deb829488ef6eeb182a54fffe0ba5441d513375005d3ff8f35b24c059e4d807ff356bbec9521

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\minidump-analyzer.exe

MD5 c16d878f6062917ed856e87410c8a42d
SHA1 7286565d2770d5c8bbe6138a4d3a4424c7793cdb
SHA256 ae30d28169d5c4317c516b61cbcec12300173f390a6a8542559395a9cbe3705f
SHA512 eb8a23fdc5dff0aa7aaa241c9ce88d10846fcea9c08f32d5f04cae81899ae7c77b8363e874b3f96f72de28e66bf0da71c3ac16037493150091e0783d02d39b0e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozMapi32.dll

MD5 753557b2340cf9f648b91f461eaa9c87
SHA1 21103cfdc460fe4c05350ba87acd525b361ff413
SHA256 11adc671dec079ce80e96dc6aa6adf8fab7144c414174e44542d5559f1e25601
SHA512 fd90413c24f59b8d2198efee8f8e322752dc06c9ab8e3eedb08fb337542ec4ec80815de9b3a263689594af9aed11e8b54f501acdb2ddd5b55ff0f3dbad3df5d2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozwer.dll

MD5 376b31a8b3a41b05fe7dbc025c794db0
SHA1 a814bee32e59fabd27dd0ac7166b632ee8ab4715
SHA256 2852e0e7016443bfd9c4cb715169477b89a3d8e40e12e1d2d1f9cc3df96798bc
SHA512 1eda94bad4d0ce48eecbfc94c728462a0cff1a4cd586de227007e7281d31a65d572525d8ef11f0d26e397831f83341a3ca933bbfac9fa30cf89279411afe739d

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nss3.dll

MD5 c21fbee0e891e185c3f861ef4cee648c
SHA1 1265d1ee99745428d15ab4ee203b33a2d19b509e
SHA256 f0dc4d5d21450922d7fa87b5fb6972d8b33d406e8efc56360d7870dc50b48c2b
SHA512 92ae80205fbebd4ced39d126e0f283460ad82b0e7bdd38b2300c3f90066a29ba3cebefec048c6502af9bdca86313487beedc4069c0400bb5db99e17b6c163e93

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\nssckbi.dll

MD5 6d14eb47c90f63549ad7aebc6f663e0f
SHA1 280c1bfd15757c595275b932e252f6a641abe5b3
SHA256 2d872c1a432dc556d21702e5addb1be6544cdeca20e818c28fe1475f45aef946
SHA512 c03ca69344341eabbc02202a01b348d13e3b4a35c50a0e20b6c9ec94cd76060f1ef87a979880d51421861b06998d0e5ac6c1fdfd024b5537b990bc46e4c6f970

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\osclientcerts.dll

MD5 30a803e6d3b001c7ea6d60282ec89ece
SHA1 9bbd2fe272388e666bcd0ed7365221cf58b12141
SHA256 281cc2479d4f79709d305399851a95eb4bf486274b3c976019cdc45be5e5fd95
SHA512 9fe01ebba863d19ed00627437e546e19098c794e6fa399d99cb8a9ad6a6b13c2c2ec406e2d07148d53fe94b01283917d6dc2241fe7086cdbe68c274b8857c4c5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pingsender.exe

MD5 c158adee5aea09cf69d97335b7dd95e5
SHA1 3a32be5863e9514290542210bd975a94bcfe12ba
SHA256 d245767449dd5a61939703f1dfff908e4f680e89fa5b936dba1a1874dbee9147
SHA512 848fe4700b744e6732e6d2cfa44e40c8a257748b16b45b9f8aa6e15eebc307fd50b0b7688bb40f886ccc70afb74f5dad369d988aff932ebb55264a870713c9b3

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\platform.ini

MD5 49d86abbb0d3bf41563b5fe7f493e383
SHA1 c0887844db2d72346c4cfa528c57c3cc8255ce05
SHA256 25bb9c44df7eb62eff9b6e7e48598561c9ce5d4f4c52774c9d77890d71811aa4
SHA512 40426b2bed856f3090d7fd65d6ce1bd413418a673f9cef9b4fe89c8607932fca48693f80a2430bafef1bc47af1bfb7f6e3d560f240d3a5b9e185800de0a3d6cf

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\plugin-container.exe

MD5 3c73d5124aae162f94754ac70a5b61c4
SHA1 f12cc2dd1376be65b77c16ae0247a1e8b9dae173
SHA256 fdf6300ee656d774a81bd61d608cbb1d0180c0edbacd0a218bc84693a0834c13
SHA512 3a4d834c1f31ec9c17c25bc831f42d0bbfb3eded5adf8be8d5895feca178c4a9b610d2fc0b7aa9734c1e559a37ba92478d3c69b8b454f0ce115847158530f8df

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\pr

MD5 f4b41ccd633aa872bd82e5ddb13d3f81
SHA1 e1d858694a3e6ce80aab807c9272dfdc5a9ea69b
SHA256 4e9bbac45e706872b1477135d668b2c7302d61694060763d86507cfee7d17371
SHA512 5b71664cf1a9f152a6c393aa29038e608f78a6aace7eb2ecc8b59a564a7ae4b122d945ba040f8e06dbbdd9afe429a3b9cb961de92fd10fcb357962cd3fb71e86

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\precomplete

MD5 12bac409a02d5c863300a0e2f095e05a
SHA1 5939e68bc68bcb52e272a864508a531c482ece5b
SHA256 b971bee8682f3be1b88dd7f183cf232762203ac74c9f8636d3198fdccdad5596
SHA512 081b48cb89958b11664f6b30b5a9f4ae225deea9ca8bbd3bb7674581ad5a35adca4c8fdb605c17c98629759499a1f2fd5ead18c1ab88c7ae9c93b7a9c4cf2d05

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\qipcap.dll

MD5 50791aff95302ec609d5e7925f88042f
SHA1 8bd727d8c590b2576947cab899065a8bd6421a3b
SHA256 d784bfc258775ec6e7171895273adbb28159a16b004050e888bdc57c38fc53e1
SHA512 f68f49f2980a1663be2d98e458ed574bd40dc324457a006a903734cf049312aced55d593d60e608073e48ec1f66ab21d4bf1025334eda49d4da51362d11766cf

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\thunderbird.exe

MD5 7238412641bb82a88845c355c363e897
SHA1 5a64f26adf8078941d7218b247e5728161864486
SHA256 e5bbc723a99815cf321ae9bf30f9fce147132c1a1410447d4e9c8da829eedd1c
SHA512 97e1304880d8137a9086b5f6d7b8834630d27a0babe552077324c3a04007de669eb314568ad9aea4e497f0910f686a740c9a5b97b5bbf768d774fa023a6f07e2

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\mozglue.dll

MD5 fc4d816a5412c30fa7e5d0f7d1c60043
SHA1 3765ff30683e2e880b367ec1a8e24da13d426e9c
SHA256 e00b8b5ae5a8437186bcfb4115e2466590753f8c268609e5d62fd7f438c7faae
SHA512 2fc0c0ae355ecbc9ad0deb5246a04891761ff3476f4019075324de9df4d04c695cd1d453d6001bc05d796a99d28a7c4f032349fa198fe1542f4fde019ee50013

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\MSVCP140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\msvcp140.dll

MD5 5ff1fca37c466d6723ec67be93b51442
SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\VCRUNTIME140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\vcruntime140.dll

MD5 a37ee36b536409056a86f50e67777dd7
SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.DLL

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libmec30.dll

MD5 bea96b5dcb3121560701af2b1db1eecd
SHA1 4247cee3d591cb3c057ba13820ef2f54e68f91de
SHA256 7ba2fd9c4dd159b1cfc9c693826ee10c2fbb6922e08dab5aa7ef2caa60c1eadc
SHA512 6322cbcb9f1bcb0d5fa6dc4d4fc17db1b046ccaa39f32c7572c216967ed51cc2186b576ab1c8f0d9de6fde3357ab1e5a7e776e0f0e97b9a0c8573be0180316d5

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\freetype.dll

MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\zlib1.dll

MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\bz2.dll

MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607

C:\Users\Admin\AppData\Roaming\Clipboard Fusion Manager\libpng16.dll

MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd

memory/1972-936-0x00000000000B0000-0x000000000035C000-memory.dmp

memory/1972-937-0x0000000075110000-0x000000007512D000-memory.dmp

memory/1972-939-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1972-941-0x0000000074E80000-0x0000000074E8B000-memory.dmp

memory/1972-938-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1972-940-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1972-942-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/1972-945-0x0000000074E50000-0x0000000074E7A000-memory.dmp

memory/1972-944-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/1972-943-0x0000000064540000-0x0000000064591000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR19D8.tmp

MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1A94.tmp

MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1B7F.tmp

MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1BEE.tmp

MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1F6E.tmp

MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1F2E.tmp

MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1ED0.tmp

MD5 0700f3dbe367287ce10472cffbd3d7d1
SHA1 079790389532599ce04fd82c2b89db5e4dedf26c
SHA256 77e46a6a8fbc079cdb1d3ee299af36c3d1881d38d93c4e0551f114965cdaf10f
SHA512 28eb67d348c8e9e36032d041315b6ee790d2e9021a3a657a7fe33c66ad1f8daa5b3e0833a2a432cb4a4c5795fea5a80a1810440fb441b6f0d56cf0d00d3e0a17

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1DB6.tmp

MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1CEA.tmp

MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1CBA.tmp

MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

C:\Users\Admin\AppData\Local\Temp\BRL000007b4\BR1C2D.tmp

MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

memory/1972-969-0x00000000000B0000-0x000000000035C000-memory.dmp

memory/1972-970-0x0000000075110000-0x000000007512D000-memory.dmp

memory/1972-971-0x0000000066680000-0x000000006668E000-memory.dmp

memory/1972-972-0x00000000712C0000-0x00000000712EE000-memory.dmp

memory/1972-973-0x0000000067C80000-0x0000000067D0C000-memory.dmp

memory/1972-974-0x0000000074E80000-0x0000000074E8B000-memory.dmp

memory/1972-975-0x0000000066C40000-0x0000000066C4B000-memory.dmp

memory/1972-976-0x0000000064540000-0x0000000064591000-memory.dmp

memory/1972-977-0x0000000066C00000-0x0000000066C14000-memory.dmp

memory/1972-978-0x0000000074E50000-0x0000000074E7A000-memory.dmp