Analysis

  • max time kernel
    151s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2023 03:01

General

  • Target

    2023-05-08_5661aec52fcc80ccd4c5d263e113c115_ryuk.exe

  • Size

    190KB

  • MD5

    5661aec52fcc80ccd4c5d263e113c115

  • SHA1

    b09fb5cfbfbadd6afdd536aa89ccab405ef8c5b2

  • SHA256

    6cbc05acf871c106f7804069fffef908472a31ea1a782add45a100d14c8f5ea0

  • SHA512

    15e2a11d1d0b614cc1181a787a3208d011447ce68f6be93df227bc1b1b95400151251cf0bf9013900876b1d8e9c93b05ab0af0f1112b2e50176879a94a19d30a

  • SSDEEP

    3072:wbYRYDEnRuxvB5oveeGiKhvFB1JWxEc2C+mZbD+o4Xd/x+j8TYQWuni/qpe:fYDcsTFbF75xCxk/dTB9pe

Score
10/10

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\RyukReadMe.html

Family

ryuk

Ransom Note
[email protected] balance of shadow universe Ryuk

Signatures

  • Ryuk

    Ransomware distributed via existing botnets, often Trickbot or Emotet.

  • Modifies extensions of user files 8 IoCs

    Ransomware generally changes the extension on encrypted files.

  • Drops startup file 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Runs net.exe
  • Suspicious behavior: EnumeratesProcesses 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2023-05-08_5661aec52fcc80ccd4c5d263e113c115_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2023-05-08_5661aec52fcc80ccd4c5d263e113c115_ryuk.exe"
    1⤵
    • Modifies extensions of user files
    • Drops startup file
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1592
    • C:\Users\Admin\AppData\Local\Temp\gEgLRIv.exe
      "C:\Users\Admin\AppData\Local\Temp\gEgLRIv.exe" 8 LAN
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1608
      • C:\Windows\SysWOW64\net.exe
        "C:\Windows\System32\net.exe" stop "samss" /y
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5600
        • C:\Windows\SysWOW64\net1.exe
          C:\Windows\system32\net1 stop "samss" /y
          4⤵
            PID:4860
        • C:\Windows\SysWOW64\net.exe
          "C:\Windows\System32\net.exe" stop "samss" /y
          3⤵
            PID:88560
            • C:\Windows\SysWOW64\net1.exe
              C:\Windows\system32\net1 stop "samss" /y
              4⤵
                PID:88584
          • C:\Windows\SysWOW64\net.exe
            "C:\Windows\System32\net.exe" stop "audioendpointbuilder" /y
            2⤵
            • Suspicious use of WriteProcessMemory
            PID:1188
            • C:\Windows\SysWOW64\net1.exe
              C:\Windows\system32\net1 stop "audioendpointbuilder" /y
              3⤵
                PID:788
            • C:\Windows\SysWOW64\net.exe
              "C:\Windows\System32\net.exe" stop "samss" /y
              2⤵
              • Suspicious use of WriteProcessMemory
              PID:944
              • C:\Windows\SysWOW64\net1.exe
                C:\Windows\system32\net1 stop "samss" /y
                3⤵
                  PID:1172
              • C:\Windows\SysWOW64\net.exe
                "C:\Windows\System32\net.exe" stop "audioendpointbuilder" /y
                2⤵
                • Suspicious use of WriteProcessMemory
                PID:888
                • C:\Windows\SysWOW64\net1.exe
                  C:\Windows\system32\net1 stop "audioendpointbuilder" /y
                  3⤵
                    PID:324
                • C:\Windows\SysWOW64\net.exe
                  "C:\Windows\System32\net.exe" stop "samss" /y
                  2⤵
                  • Suspicious use of WriteProcessMemory
                  PID:3448
                  • C:\Windows\SysWOW64\net1.exe
                    C:\Windows\system32\net1 stop "samss" /y
                    3⤵
                      PID:3788
                  • C:\Windows\SysWOW64\net.exe
                    "C:\Windows\System32\net.exe" stop "samss" /y
                    2⤵
                    • Suspicious use of WriteProcessMemory
                    PID:29740
                    • C:\Windows\SysWOW64\net1.exe
                      C:\Windows\system32\net1 stop "samss" /y
                      3⤵
                        PID:29872
                    • C:\Windows\SysWOW64\net.exe
                      "C:\Windows\System32\net.exe" stop "samss" /y
                      2⤵
                      • Suspicious use of WriteProcessMemory
                      PID:36060
                      • C:\Windows\SysWOW64\net1.exe
                        C:\Windows\system32\net1 stop "samss" /y
                        3⤵
                          PID:36496
                      • C:\Windows\SysWOW64\net.exe
                        "C:\Windows\System32\net.exe" stop "samss" /y
                        2⤵
                          PID:78312
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 stop "samss" /y
                            3⤵
                              PID:78144
                          • C:\Windows\SysWOW64\net.exe
                            "C:\Windows\System32\net.exe" stop "samss" /y
                            2⤵
                              PID:80472
                              • C:\Windows\SysWOW64\net1.exe
                                C:\Windows\system32\net1 stop "samss" /y
                                3⤵
                                  PID:82808

                            Network

                            MITRE ATT&CK Matrix ATT&CK v6

                            Discovery

                            System Information Discovery

                            1
                            T1082

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\ProgramData\Adobe\Acrobat\9.0\Replicate\Security\directories.acrodata.RYK
                              Filesize

                              754B

                              MD5

                              ccf99d3c38a2b15d2add6c02050a6ac4

                              SHA1

                              c9df26567ac4619ee5941d2a2b0c5190e3636eec

                              SHA256

                              114e9d5b3866b9e12cc16b1811e6ee70ad09eee313d6aba206536421228cd00d

                              SHA512

                              66b7ff8d311aa08fb33ba974899224dcf752bc9171628ba8731f72c50fb4e5f7cf1c03748815539ea9750f85ba1e3d0ae21dcdcbf5eac5cc26e09e68ffc8aa4f

                            • C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml
                              Filesize

                              294B

                              MD5

                              4f887a29fa6c92943670da5c03745e3e

                              SHA1

                              3417215061e1410901fec377cfc4708ce71fd72a

                              SHA256

                              067722a02f47a0ffba865d1a0bac604342cc7362757c102f0d59876557ea99fe

                              SHA512

                              e59c2248e8f1db7fa89aa46f468938d36016d88b846eded07d8e6e6eca261a8b98e08fd3b312961c9b66daafdf5eec7ff17d4b805ea007f4d0b5ddb6a331a6f7

                            • C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml.RYK
                              Filesize

                              562B

                              MD5

                              9f18593b0852947818c316f8db12b084

                              SHA1

                              3d7792739ca6d5918a362ffde82000b7f7222ad4

                              SHA256

                              a3ed84994c3460cff5cb11f6c85ec7770ac9d35aae83745edadad31a7afbe654

                              SHA512

                              8dd46dd10e9d4888500bd29dc0c2b80bb57c7cda395da424f6a5ed4d626066a846e50b52e301462dd4c2184501165240ff5e5d567f8bc44c2aadde6338c7fccb

                            • C:\ProgramData\Microsoft Help\Hx.hxn.RYK
                              Filesize

                              674B

                              MD5

                              62364fd95a929ba24f355d8cf696660c

                              SHA1

                              3c729a89fa4cfa41d0e58c7e56f4423f0620c50e

                              SHA256

                              ccc2eb7082487fcd99086883fb7432562e7d4e2a7797a0ee033287f81b33c877

                              SHA512

                              5d62fd1a5a9784b45f4f9e997a28415095c59fa6ad3478d248110b40b42b99701ce5c5f3685e33c254d5a3d8c25a61c54ff7670ec0ae2e67e872fff1d3ac2f8c

                            • C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxW.RYK
                              Filesize

                              13KB

                              MD5

                              3e9892b65e1ab36bff702e33eec4e125

                              SHA1

                              dc421a49d684d9f13c67a1390082e22d3d33705a

                              SHA256

                              ef1984ab4247fe546c4c6cf7da8f358ca96dea79fdb7b21d8de58b5e460649c8

                              SHA512

                              a5ad07ef9e873f81462fbf57948049f26ec6e81336acf9393778486d0dbd0649712974c0701637b40648ab053c8a12ce84f8f7665049dfc6f9d06fc30fcb475e

                            • C:\ProgramData\Microsoft Help\Hx_1033_MKWD_NamedURL.HxW.RYK
                              Filesize

                              13KB

                              MD5

                              b47ad8bfe740a36a2ca0ca213e505c0e

                              SHA1

                              cac720d81b45595e7fc97321356ff54443f9ea63

                              SHA256

                              518f3eba89cb51100f91cdca636bb8541373da5e4f1ad1f0433d83ec65e32883

                              SHA512

                              5e059e0674380f0b74dc7520131446f6107d546f0d15b5594a8e58ea81bd29799969975465d7eeb181692b2271dd0ac1ebfb07efddc367ec701e2c4f1f0b6cac

                            • C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxH.RYK
                              Filesize

                              10KB

                              MD5

                              04ac0dba272e880a401b3308002ff6fd

                              SHA1

                              3eee24eb657822852fcba624f6eeb7db1138e55b

                              SHA256

                              c490b06a7830799078952d34ba3a191f229c2d6124849865de5cbcdf8b882a5a

                              SHA512

                              567241d36e0d2845bad1c1c78b415e888bcc8b09338c046c24b64e56bf52fa2e311e22ae0e5163f9db50e22613bd9dfd0bb484115566bdf012f6ac8540691d91

                            • C:\ProgramData\Microsoft Help\Hx_1033_MValidator.HxD.RYK
                              Filesize

                              9KB

                              MD5

                              b16f094e42f94d1c4883ddbfbaa58819

                              SHA1

                              7eb06ecaa60891f33a69ba0f88873cbb2a29b35c

                              SHA256

                              fbe18431a36fb0abe37087b3091c3db42f5a21f6f7127c211163db06e36670d8

                              SHA512

                              282b07d815497b99399297465a1ac6dadc2aae0508bfed197b6cb7602a5841771f9306679db5c42417dddda60b17fc20f47233b43a83c386d2c80e3d790d9cbd

                            • C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn.RYK
                              Filesize

                              626B

                              MD5

                              6249c21a206d0b99a4a9cf5c1c03e39d

                              SHA1

                              f01f046660f486ae3a000f5644501ee0731ddcd8

                              SHA256

                              d8a76a229093bfee3998387ebe9524a11ae4571301237d17c74d476922e0c942

                              SHA512

                              00718d95e066e9ca954e25a490502bdebbc362d911f80cc1d54f9dec3425942e6871943f010cd3152b0b90082284f91f85a8e924cd2d43d504e6130bef0a245d

                            • C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn.RYK
                              Filesize

                              658B

                              MD5

                              42ff8e547d51b0e2acd24c662b2b057a

                              SHA1

                              c046cd0a7fc791f09dee94f1e2eb3f23174e4c8d

                              SHA256

                              c62799a2f400ca53af6d8bdced5bd001058cc63533acb0339a5b207caa60a503

                              SHA512

                              844171e1b053154f04f7c8edab22cee641c7aa401a7de79f05c8526f90a90a7ba634e6b4a6a39418cfdcc9f89aa1b988803ef366787ceef02089bbcdb2f80a63

                            • C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn.RYK
                              Filesize

                              626B

                              MD5

                              2931f5d33465ab4d37b878cd61b40b21

                              SHA1

                              86ec53c2f695069c46b1261d7f9ac4cf6818e4d2

                              SHA256

                              8345a251d5a40cb8113c55294d1a94936f0d67777c558808dd330e07f020bc47

                              SHA512

                              e19d4fa46ecc0218c96f077dcc8279f19d39a817ceb02160546585b240ac45840604bcc10a4d329a99b69d26ca1a78b224058bf289dfa29be10fd17cec5382cf

                            • C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              cf427d9d68f250b47d5a0ecc7e675690

                              SHA1

                              3a760026881c3901b66645d7e0caac9b5ace7fdf

                              SHA256

                              ca7c8ea602e0d8acc8b92064070c27dee533cd1f26fa5c5b6d2c8f6be92ffc3d

                              SHA512

                              3955508ea908e9e275abd7999fd5a7805e47eb5831d6122b4ac3180c5f9031467791318af24ca7d39e33e15fcdf0b7f564247056f4fd95b5193922f635e5ae99

                            • C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn.RYK
                              Filesize

                              658B

                              MD5

                              1b4585e3d9a229de8681c53503bd8625

                              SHA1

                              e55463939b94d66b745907d59133eed4c187cf67

                              SHA256

                              c34716d81b727afd8b9955e7fa19a602803adbeec0cdef49a98678f6f8ea1c5d

                              SHA512

                              f71d735b2d54d89df1a30ac65d33be3d59bf9c2e354bb88bbdee49b53420f9fbe4750f5a51e941119cca5d6303fe581fe373514a1b7b59a971c3b50f676626c0

                            • C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn.RYK
                              Filesize

                              690B

                              MD5

                              ddfa759d40665d84c7e00a858b64bbd1

                              SHA1

                              583a03327387e186074b8fccaeb4686a540fccd0

                              SHA256

                              505b8942ec512a6e5d082b0d55aa88880fcc2c1b084591be3162e4f98d631a13

                              SHA512

                              384818e394173064d91322de2db668a7d336d3fd1e3286a755d5378998e791a4ec61a7f08b8e9c416c9f51dc6ad1e2a782b8c5f7d5b7df032294c773a5b80152

                            • C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn.RYK
                              Filesize

                              658B

                              MD5

                              3dc2bf03e73f72a787529d747b5e3775

                              SHA1

                              ebd81bab58174998ad5aea7ec1ae1c026632971c

                              SHA256

                              8d3674d9854f78493bac1f7d1efa21e5815741eb114e9cca5590becb3ac93fd7

                              SHA512

                              0c0c0973a24b1c8d902d828ce89d8471635271df82bae4e31b020b68024140e62dc01aea65e1e45d75cd5bcd29071a2b22c189889e4e7197e5761166e92abb21

                            • C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn.RYK
                              Filesize

                              674B

                              MD5

                              e37fa421346b082eae8f72a1a4756056

                              SHA1

                              c37484593aab88b5f31a14c554fa610c07010a14

                              SHA256

                              7aa0bd8a2c2ec2d4e287040f3d18140c35c18131d54ff69b326f89f839bb28c0

                              SHA512

                              366f8dccdfaab5e247ede04956539a6e12b3365310c61f3b02e3fac108a33d0b21cf9b64515f1ae058b9f9d36a665f8f12696eed2ce7ed09cf506a46b8c95627

                            • C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn.RYK
                              Filesize

                              626B

                              MD5

                              3933e8e22491407b70e41b613d9a6c11

                              SHA1

                              a7f80ef84e1ef374de9a7389adc0490432dd3747

                              SHA256

                              954a37b2c3baab87f1175f0054ecaf2d039849fa48f69221c643e92e3b61dcbd

                              SHA512

                              69c68308aff04fb50c13675c5d7652d0494298b93928f925fc8d46a9145785bdd1c7d1d74170bdcc070f89ee1338ab1b1157359c1b7200681a9ecab22211d303

                            • C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn.RYK
                              Filesize

                              626B

                              MD5

                              8ffd343a51cb112fdab208958958fe2b

                              SHA1

                              c7562d935c0cb361a19eac75c32579c500ad25f2

                              SHA256

                              d31850c4f6abf61342b6bddd7c946d9d400c90f12a510f12922bdfcb90c931fc

                              SHA512

                              54f61424d93823709ec3dc3011292150594a442f381d5f07a4ac0ecbe1e8936782a0360e2d36ef8b18eda768863ca1d93160a824f1d90cf2b3853af53ab65137

                            • C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn.RYK
                              Filesize

                              658B

                              MD5

                              82cb0f15ecb56dab502ee7f7525fef8c

                              SHA1

                              87e0492ef47734f9dd13f862f113816158a0b3f4

                              SHA256

                              3c386ab0567f51ef8eae9509a132dfa1a119baeab6f9860fcd9b03227988c204

                              SHA512

                              0bb0b22db7af5430ea3c1a18b6fc871eeac6d533a3906d062e1263f1e942ed2f2ff06ae8f691b8b459183c24bdb7ba0465f26039a0105a50467453bb3ad6da7c

                            • C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              3cda86f59aa3c369984c13abe578b951

                              SHA1

                              52c2dca2dc3951a6ab92bc460fefc7458f35052e

                              SHA256

                              e0981a1360fe5e13bf179bb290fb2381ad81b4981a93abcca7251a8c1b0c0257

                              SHA512

                              b6c7b7f39ccc628ecb672cb108711b33a04f5fab7b7bb6a578aef18a89961ae1d79b66d853f9290428ecab74f61eccb11cd3b94c1f7cd8dcbd987a933c041ff8

                            • C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn.RYK
                              Filesize

                              626B

                              MD5

                              a80136ba4ab002b29a236c4266e4c6ea

                              SHA1

                              d7fbc8ed1bd027bc9a1f82e3785f61eb21aa9e2d

                              SHA256

                              7ae63f6b45d8531141b295b7a9eee7cf10a1300edfbcc8c6773e8d098ac27865

                              SHA512

                              bfeac63ab0951f42ffdda9c81dbbb346791b8be6aedb57203bd76d9c74a7f949fde2b2adf49d5c2eb5ab947cf68094bd1813e748b0f0715a0bebd51c70980eeb

                            • C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              76d834d132c227ac99ae7b09ab2cfa0b

                              SHA1

                              1a7b92a927a79fceb3af025f05b13c5448c8ad42

                              SHA256

                              a4550b33ae1163334a27c47496b4bd91f575c8d3d4c1d8299d60057ebc3a259b

                              SHA512

                              cdc4365e30bcb53a79fe5c1fe2ca11a25ccaffd437fd6be16610df482681c5e6cfce361c60e66c65ca45927a6fb725d9806fda49b0156164089f34d442612f7c

                            • C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              7a6c5ebcb4045b1ebbf9c7bba12e3f41

                              SHA1

                              f16bd0d1c65496e0c4b58d0b393ff127720bdf9e

                              SHA256

                              37d241724bde2ff78fdb0cebe371ed1cb8d17d60d6138904d8dc646744ffce6c

                              SHA512

                              891cc68f12ce83c81d655e299eea48654da8ea98aa6b4e7d52cf6a3d0a49c96e415c699615f777b642eef419b2a5a309e848e8df7a90e1ded7ac2e1e86ec33b0

                            • C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn.RYK
                              Filesize

                              674B

                              MD5

                              61b74a733f5b2346c1d4ccca38b827c0

                              SHA1

                              1f7eaeac5bb2c246b33cde625863ebca2d69ddfe

                              SHA256

                              02b41cfb902f84ce050ad428b8b6eea349f5ecbf2a4df23a759663c7def2bde7

                              SHA512

                              e76c275c9a51c2082626829946d791926aee31627db706f7c7b0b71d118e6d3ead3c0d1ff0453fa58987f983bee6b6017e3a69bfcbe7051bc3f8c7c118bb860e

                            • C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn.RYK
                              Filesize

                              658B

                              MD5

                              a34ba75d31168a2cc8b4f5479b78561b

                              SHA1

                              14d10b5ac8d0b63d4d71345bb4a12d7dc99a90d8

                              SHA256

                              2b1cd3a07cd9ebb663e21947f83d6b99669c7daf1b412c32ba45edc053c3081b

                              SHA512

                              8982aa0051c0009c8a8391023878167c53589453951ebdb7c3bcdbf881224a13d9fa7eff248020a130cb76037ffdfed40f0d12c543eb64277b2a8f4a9671d476

                            • C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn.RYK
                              Filesize

                              674B

                              MD5

                              75ba94b75e2f19b0f06006257084ed26

                              SHA1

                              faeb31b03dd6623010892581d94d010fa11d4a7d

                              SHA256

                              6a68ef19754d6a4705846e8270875ad0376c0f898785d86e7437f6e2131690b9

                              SHA512

                              41d76f8087c263ed02244cd401533a6e56645030a67007ee6dc79bb7882880dd5f304b50dfaf0d6967b8baea62b7b1d071db9f399ae71bcab380134a0e1e9058

                            • C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              0b38be06890649ab05d8f2d8f5e64fdb

                              SHA1

                              ba94cb4b47b112336598c9eda94ea633a6ea4373

                              SHA256

                              bc14af1a344e8b5517c43aca6fe02b542ac12e3b32e946decd6ed7d488c208d1

                              SHA512

                              749cf28897851bd6390c0a692e74628c11eb3d8319cc92a97c7aa80c8926dc31fb7f70c1346bcc4b728a0d8c8f380f9b97e20dbf9def33f58a1886787da72811

                            • C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn.RYK
                              Filesize

                              642B

                              MD5

                              d6b97b41a691542802f872042b40b5a9

                              SHA1

                              430decc14775710c73f20ea2137a71a1d6eae371

                              SHA256

                              c6832ccbc1e31d9f7fbbeab258e7e429deb511510aa01e911355027e12313bea

                              SHA512

                              7e6d48fabe046ed1f99dc92e5f8becda5ddfed9f17be8ef2ca0ddbf807f69415ed6e622447fe06856443abfacd70e6ba63d3b0f0ce1543423f3148a478b83070

                            • C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn.RYK
                              Filesize

                              674B

                              MD5

                              251d48a2f1aa2dfb7202653dff8e9b24

                              SHA1

                              24ec651d0ff4f97401975b5fc3451e8a9830fa11

                              SHA256

                              a9814600ef067b4bcd9551f5fb0da29afc7d5069fb3b40d0984c8e938f05c870

                              SHA512

                              83b07b21cb6679e798bec2b378bc1a2e4f2a27e412714f98a225c81cf27dbc78ba929828ecabc99821b8b952030e57af6e83e2836344a7854ed7ac1135f21a36

                            • C:\ProgramData\Microsoft Help\nslist.hxl.RYK
                              Filesize

                              6KB

                              MD5

                              0f1cc9d8c614559c2267f8137fc3435d

                              SHA1

                              e64e4dfccfc433a9c47566c9a6ef7210c21a9402

                              SHA256

                              83e2c27a646153164cd0006b3edbccec60ba323691e89abc1086114ca56ce527

                              SHA512

                              3fb2b0214b1573d276f848f775027ccede8d333d45d2412d87549af4272732a68d6ae13cb9b907d31e497d2033d6e20f1f2c6c9d15d502904738ef3a25f4e1bf

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              f9e44458eef0e66fe22d87212b11fd42

                              SHA1

                              e3dfa5f000f731da08209ef8cc8b9699b63c6e8d

                              SHA256

                              b905e15b35b180ebbe0173564f7b63fcd7824a3ebeac84ff8f580deab5e37f33

                              SHA512

                              a64b5ffa2939625feae9bdd69d412df7ba8d261df78ddc4eca771fd9429fa257b331313933dbb6d757a8aeceb27ddc9a42c2b5689d561c2eb2540cdfae89d93f

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              fc09bb5a561b894f5c190bec3e8cc4ea

                              SHA1

                              f95b57991e84225f9235cad87f7b536e1244ecb0

                              SHA256

                              4a164305e0e576471e69fde449ff4beb94c6fd15166f7764d384110058641030

                              SHA512

                              e3d7d2cb044b750897ed71a167d118021c01df8017d4c5060835dfa4650d1e5650190d7a92a34f0f92b69b0143e8403d735eb22e52a574063c7d99253eeddd41

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              409KB

                              MD5

                              145730cefb617b9e0ca21c6340190517

                              SHA1

                              99bc7e03c4381cc58fbab57826bddcceafeb04e7

                              SHA256

                              65929eb4740cce96ff706d83877b58399d9b65878cb3a51d3cadd6ecf3d2f46d

                              SHA512

                              c262bb6b259c4982f0c78fda4ecbbfbd6f01ad11ecc7c317db54ae1ea305e8a5db50a47344d2da787ac3873a7b5809a2d1a073816ecb409cc0fec83f8372141f

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MTOC_help.H1H.RYK
                              Filesize

                              531KB

                              MD5

                              55002d0a75aa6469f3a610f09ede8a46

                              SHA1

                              69affa020082c5b0c71673fbf6333e91cf3bdc88

                              SHA256

                              124ec62ad8a23502765f31b1811e508ec629899914db6e7db9f6169cdb1ae87f

                              SHA512

                              ac065b1768844e65da93a6ce6540deeeacf39e558e1c2c83e7743b4ea067437a6095ef20ebd1b28ec997c2e4fc1bb223d6791835320c51d0b4a2007a0f9205f1

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              da69b1bb258ed7d1e0cfd85f1b6f87a2

                              SHA1

                              b69f9f7e16cbd8c21727e1425ce5be9b93e8ee26

                              SHA256

                              722bdce820776332e63a27adb43f5bddc71ce34ad2874257a9f0d4316178696e

                              SHA512

                              940852cdb485074a045c92b4785ba2a0aa8775285b44150c51a5034a4e28e37912a9d3eb5d31872ddc2c2890bf2be499b04b7324886e1efe4ad346e3aa2c79cd

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1Q.RYK
                              Filesize

                              1.2MB

                              MD5

                              298af62874dfd763014e00d416709527

                              SHA1

                              4ff55f7483de2ed7b9e6abde71b92b1f418dc3f3

                              SHA256

                              f9e978ea76480b83f5b72c9df2b9dc3451483fc1a7cb916972eb3054d0442ebd

                              SHA512

                              d83dbb6540327046c406a205a9a0d9cd7068f6146391ad7551b1781d86c3aee95efae48240dccdbfb23b4987e5c9084ac2be4a324db10ed47ed67de37b53e721

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              72420110a3c78bc891b1d7daac56fa16

                              SHA1

                              4e495c02abac813595c9a9384bad1f95068963cc

                              SHA256

                              f38223b0fca13d4b9b218adefe49d02a06108d0163d51a84b075e927c3104a81

                              SHA512

                              5240c817d258890f7d2d61cdb68127479e4514b501791017cca1bc431cd3b4e70da924d845849298d871062a1ac51f7c9052d6c6473818a6458e6ff1ff23f580

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              82869a544b14fb98fdf4168abbc9b099

                              SHA1

                              a2a331f3570125612d09256ef5975b4821a9e1b1

                              SHA256

                              198db21c48336c6c7501a904db4601f790bd7d8d20571d2fc2cb76ec630bd5a2

                              SHA512

                              5674fad5dd674f43b50c934844b9421fc9c27641292a5a0471f7ff69cc2859bde2cd628f8da342375c9d8cbb82cdec4ea10cac2c98506595ff5446562d46c59e

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              201KB

                              MD5

                              deb1f18a9c7aef84bd7d0135ca0a630e

                              SHA1

                              4c432a54eb54425b559fc7ce2dbae26f55a1dce1

                              SHA256

                              734eb92f78b2ff351b62d08c0a8b425c9b86d258786d5d924d42244dbe570184

                              SHA512

                              9a7d44cec6e848f93251538c6d1eeb22072492da93086a3f1d734e98c543c7f7f6868c723ad0997c173ff2010b8b9289ae6509d82b90120a7dcc859d5adae2f5

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H.RYK
                              Filesize

                              491KB

                              MD5

                              a57f49d7a042412b92f8c80fb893195c

                              SHA1

                              1a5373b7a13937e8994bc342ef36d18858d8f5ab

                              SHA256

                              4fef3fb9b9e311267bc3d86677511315d6dab451101b3cd3feeb9b66281f54d0

                              SHA512

                              72e7102fc573bac3d6902631126be7deb13b4cc0d95162f5e272bbf3ea71961cbb5f398a1cf585886054da3caa45ea8933a2d7a56afce0b8d88da9e229fdf8ea

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              716cc8abd9418e02ce016b6156306a99

                              SHA1

                              924a68d809125c566a21bb1ecc4225ace71dd183

                              SHA256

                              f86704de2102f435d09f7b930b42a702bcd95ed61464c848bfaa997442b40d99

                              SHA512

                              32b52fe105c1aedf66cfa82ea1eb300a58d75557c2a205bb75b9ae96a35d8625b69419b2a418ade11388b7056e0be30c4307e5ff003a0eb11937d193ca254f9b

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.RYK
                              Filesize

                              864KB

                              MD5

                              5081d3ba30bf73c5aaa6719ded262318

                              SHA1

                              464c35198faf9c48f841e28608ed80d15e4ef754

                              SHA256

                              77f3bd2dfa6388e408aefaf23f46f5bf82711740e540f7d0ad598d7f32f24ec8

                              SHA512

                              bc6d6538d0c396cafa67e0b2741b864ad525aeb60c0dc5ab569bf7fcb6376cb0c26adfa3173f5b3d43635311776962f97cb5ee97b83ee6a4cb71bd18177337a7

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              2cf1466294806d49baf90f627b21bd23

                              SHA1

                              b9f876ec6bab1e735ef834048d99f792d1a5f0c9

                              SHA256

                              296112e5a87135fff0a0fd2e185619b09b5abd30d964dad7e30a61286a1b2c5c

                              SHA512

                              bd41a3bfe397017e6ec12da6bc1b39168440f2e3685c5554e4f6f2e0185491a84c1b04f7c42d36cca030f154de1a4d8c8a5094b57a2b4739a712dedd416c9573

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              0c26454131ef4fedce5c9bf20beb4936

                              SHA1

                              267fa49cd05441f0fdf84b45e0cdf4f07d168c17

                              SHA256

                              0c8a1f6fb4a5d96b032523f20eea38c6a2018ec40f060c9b5cea2a7ca6b0cdfe

                              SHA512

                              4334a7692a6ab00e583ea08e3dcf7303427b1a2dacdeb94044264cadd054cb9e76f1a93f1b7cd5aa8b9f716ed3a650159d57ae39ecc2e28b522d93568a361587

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              425KB

                              MD5

                              f1d0d8572e8a3f52282fe043a23ed4b6

                              SHA1

                              b65b232c2451613c81223ae4670e85f4f24c3bc2

                              SHA256

                              6011b6b5ce34a9c8b62baa33404661e53383ad87b42b20012bf40b0e3f6beeea

                              SHA512

                              35b521593d6e233df403da293a3c4702912201b5b9dbd0b39e025e4af332d6fc5345bb53e36a8b232f3aa791f8c30753457be145a1b8275a7dedc92465dad96b

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MTOC_help.H1H.RYK
                              Filesize

                              531KB

                              MD5

                              8ae37599f497b0e9d7585ee0005ef68c

                              SHA1

                              8149fae10bde9c71a89653b00501c38c3a8f07e7

                              SHA256

                              8d241f1893f766be0265649a4e264eedab7dc32fb6bf0fabd0b62a750ce51957

                              SHA512

                              eb245ea6e304419d6d38ea4976400507d74f0b363c7f9684f953e9e8cf61fb5f22c5bb9917a5bd082b8c6c35ce73e9652519506339fc664e5aa7cf5ca244a7d5

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              31f080ddf90b33f99649d47e42144e13

                              SHA1

                              5c3d12cae72601267498960ae7be074e06f89a30

                              SHA256

                              ab27d71e341b64884294be32d92a854ad1bd49cb5b317cc4c20bd8d8d2116745

                              SHA512

                              b0931d51d6f7b0b26a86f0f35ace6955ffe5526ba7ae84357a1717a868fc26b3853054a656e42a73e800255495849e239e6158c50ff37c34bcf86a6af0367dd5

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1Q.RYK
                              Filesize

                              1.0MB

                              MD5

                              2e12f2514c5c0df8096d378fff2ce5d2

                              SHA1

                              a2f726b05847ddbbd815c5c7e38f8c321befaad0

                              SHA256

                              aed756aaed67d45d71d173dbf19162f4626379d7f22169b0b65e8b351865f148

                              SHA512

                              ceede479ce12722d984162f3427555ad15e4722ffcf27aa72139709eb6fc99365e5b44d626adebc2a7f96b29f52d3b4485a3aa40254fc440f83f2043154d4230

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              07425c2c6e5150a75bacabcf7db11bbb

                              SHA1

                              99b547f12b39c99bc84dd38d52381d621fa7778a

                              SHA256

                              ba6e6d059f4e96325b3f8bc02091ca1f4a26b31c2db5c2881058f8d91f6a6c05

                              SHA512

                              a8c77cc7e012dece7a82ade2aabfd6487456ceabd258f20221ba12d97775ade02694e84dcba5ab146d9c14dffc6a63ec2b473e68e46b304af12dc20b238a2671

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              3815b74ca5a7d51197d1e136b1b150b7

                              SHA1

                              9a519cb1067940f9d33d10557c46be3fd4360998

                              SHA256

                              cea58fc12f0fdbf71374bd03080bafb5705230ac7d0c78f0345a5f70660d2929

                              SHA512

                              321c7639851d28350052c71ec2bf8aa6c3e22724048c0950ffbf49372038369a9c53adeed8ae9e5af1b27c6b392879c1db8bd9917dcf8563cc71329f18e459a9

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              421KB

                              MD5

                              0a4cdf0ded67ea7d8ad23a71d381cac3

                              SHA1

                              30f6d899f6a70cf39572ec75d9cf40a5ef14f93e

                              SHA256

                              4b9b88f49c6d80102b5c880d1dbf6ce45063cac0c7931160c8e9212d10e29bfd

                              SHA512

                              c104c09bbcfce7a53c2176bd53ce9b7aedb3b0aaeab84fdcf4456c95b805a062c1b819e427503cbd217a7f76ef79533ee1784ce58e64ee58ba75109d826a4c6a

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MTOC_help.H1H.RYK
                              Filesize

                              546KB

                              MD5

                              3362af3f3b7fcfdbbc83ed657c3a3e01

                              SHA1

                              676019e0b5a02d690d18afd8be2b85d0fd62b416

                              SHA256

                              0993703d99e9cfb7c8f5f831cc8d1d51fdc1793c6216c80b2634d7d521bb4ad1

                              SHA512

                              7c7eced41e8f1f3463a604a24b09852b00668f22cbb684e1784dd3fad4c14feafac05321d80b4cf73b7b63a0abd1e13d061ee38477a11dbe86eddecc1a444679

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              6f98b7b62a741aa34556d91b04dacb28

                              SHA1

                              fef988a3fa5aaf28fb404211b8fdeb135238fc5a

                              SHA256

                              7efbed647e5a3e962dd066bb996cde402fcfa61ce5b7355598bf89362d4413cb

                              SHA512

                              3e59458a9511200813bcf09cda21a1147c50686d290cf1617d6ccf3cb39178fbabe8706a93c952085189f44d04d0bddf98e29c886138c107784371236e7f4d0a

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}.H1Q.RYK
                              Filesize

                              1.1MB

                              MD5

                              30fea858842750f95a73805efd9ffd55

                              SHA1

                              a5e85cc6bffe4d54c7f73306f6b9a73145112fd7

                              SHA256

                              6a5031604096fd9c1f7400870705f8757a12549409cc0b32460b5a6677aa09f8

                              SHA512

                              9e6cf45195956712b8d766fd522ec1ae5b96316c8959fd4abc2816eb8307acb5568cfb615a3b6e742c6dac537e3fb1b4711af16331c4fe34dc8b8e667acc55ff

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              6717b5b4d8f3a987485854d084e9d752

                              SHA1

                              7abfc2ee15f9a9767b7737f09659ec8737328c87

                              SHA256

                              2a7564dca360f694bc6687d7cd6beab2dfc3668732e610c8c28b605b04b84ef2

                              SHA512

                              578501ded0ce2304138265408ed57d428e7612184f5b68c1dbff1dabf0f51e24be7d2527e071efb25fb444763cc283115525f6a40bb2ae6a332fbf938decf656

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              0cd77ba6e810d1cdbcc14d9b8faf13bb

                              SHA1

                              c200dbd4f095831ef13692f451eaf6d016b2bd8e

                              SHA256

                              048a1dfd0bd4ffd81568687fec4fdfeba3713f9853dc58a9537a0ca5da41851c

                              SHA512

                              260290b6b0c660e8dbb90a65e7a7a32a5cea8fd4c319138d595d8832b80e1b226e309e60a3023ebc521c8aa902ee80ee49c6d95dcd69a5b6adf3068f4a220b80

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              421KB

                              MD5

                              fdf32bdfacc96cca29210dd8a9d56488

                              SHA1

                              bcea24e596548f4625028366494bfdf5427fe618

                              SHA256

                              26b8b0593c8bfc67e0b859a67a7511880034794cf49f0c910d72b3df4751a1cb

                              SHA512

                              eef063ea23697b08a3d1acf2bfd4157b7c1f24bfbeed5b69a2f99809566526f174af4e4459bdd9445b8e2ac156cd2c0193784a01844cba0304dff0d88d6b2bb7

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MTOC_help.H1H.RYK
                              Filesize

                              530KB

                              MD5

                              3b47b8e182faeb66c57f9aa9a5c02d61

                              SHA1

                              c423cefed6fd25e89826cf6a85eda419660d691f

                              SHA256

                              ced2659d0d255c7bb017db17bbc320f9c60a4a6fea0692c0858e5de2b9acb442

                              SHA512

                              cc0ff885828fddc37f1cf959d97f4a69d104b4d4b6023951e881382aea726eff21fabb0c5b15e1c1397024dc07209655d3d40b46866c2f80ec28e9853545d579

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              8c8bb85f2474fb7fef010028e65d3546

                              SHA1

                              2cdb5b73b7ee9d03e7a9b1415ed6f3507d2fc3b8

                              SHA256

                              3f54f81fb143166de8028e4babd147a22200702535d85ce7eaa766994cbc34da

                              SHA512

                              c9c17f5606356ce96a1852b5f69c86e0e5bed5b3d4fa4c1efb4d2ad05e75d97a1f4bfa1115d1509b67bb766176d15b7ea55ae22d79768dd886659f9d2b5909ab

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1Q.RYK
                              Filesize

                              1.0MB

                              MD5

                              328400e58727744aafbee3cf97aa3d1c

                              SHA1

                              4c3ffec2233d516237ea9f7fa4a84b58c58add7c

                              SHA256

                              e3174345f0afead538b31e1898016c6859996f6218afb692c2cf0129090ca09a

                              SHA512

                              4208c34523327e00b5b6b9796004172d2b67f5c365c0aa798b65db7b4e08f139c2fb25dec919b223c6aa66cadf03cf1dd5d6d9ceecf6732201e99b8271d58fc1

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_CValidator.H1D.RYK
                              Filesize

                              12KB

                              MD5

                              63f5fc01cf3136d1132baf7ba8613709

                              SHA1

                              c4e8c1e2d314a2a418338133b96c2d6db3bd9794

                              SHA256

                              0478ad14c2c4020f9aa6ba811b065c9881cefd18e952f2e8fa75914d5a5e5025

                              SHA512

                              09af88bc33dfb46a82c023fc2cd053b0e286b12cd6fbeae0e7c7fa4f93f4a4cc08d3983dee0e342dc15bb392edc6597b11654bd1fae3acaeb477369833033c4a

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_AssetId.H1W.RYK
                              Filesize

                              229KB

                              MD5

                              8852bc4b4f16a6d4701b9aefd2099437

                              SHA1

                              4f14a34010fe79149ff2e22ed0ae08ebd23d931d

                              SHA256

                              d24ce7e93c513e13f46ca1af00462a6f43c16c391b5ea13aeb63474b06cd916e

                              SHA512

                              6a7c80bc240ba858206d403fb114428aa5998f2e62ea92b6ecbc13c02f0c43a374512d2e5cf225993162e50ae8aa7b26a462aeaca5ea1727ea0a4ddded3badb6

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_BestBet.H1W.RYK
                              Filesize

                              357KB

                              MD5

                              ef2d6892a141bf630417b35a63d8256a

                              SHA1

                              a93b4a5e6b3fe5bbbf501b0b902f27f168c8175b

                              SHA256

                              2d7e7274692645365ef9530ce988145e120962ab0cf070838217cb55b20705ad

                              SHA512

                              f2d7ca7de0ecb7f0c1c75aa8669345af2cfc413b0187ddc7f6e8e1c03c82725d007d0125eafdf5fcc48c70b6c11e428595c1d6492e61ff5b6ae79fa75b916645

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MTOC_help.H1H.RYK
                              Filesize

                              352KB

                              MD5

                              bee7f8f5ac7f502d288171db5902cefb

                              SHA1

                              9518ab57926ba14a0753177788cf5720ef7a1f8c

                              SHA256

                              f5eb77c8ec0a30eac6cf73c9249560d9356a09f303f1ec2cb7ed5c1adbf292dd

                              SHA512

                              f4302e0d6a171f3b939e9b01573659348d66b550e120613815c7832e6b384749029f9b9fe463b4dd67c2df959d660d921e093352453d9d4266f7aa6493e11b29

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.H1D.RYK
                              Filesize

                              14KB

                              MD5

                              c47c0b8886e9130893154e1d26213167

                              SHA1

                              404eb3b359dbcc0508226300b2f7c19a1bcd99ea

                              SHA256

                              b3c17e086604033195f683d807144cba742034889c40aec1b6ca76cf38b573a1

                              SHA512

                              9d03d742f5a41e53548020f89297700838ecb8a059bd81a9e884457d9ea3d5a98381ee29b9daf6886b0c696e2ec8ca0ba631feca71c4cca61efa67fa628585ac

                            • C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}.H1Q.RYK
                              Filesize

                              1.2MB

                              MD5

                              6aaff010094fa665e35c529a5aada67e

                              SHA1

                              a8b43826db691784f0f2810afd9cae7cb20b1bf3

                              SHA256

                              ecfeefac3f10c1a0b5c6ccb908c39d452079793ee9bf691110b908c52cfaee8d

                              SHA512

                              372fb6c14d538b469d6cc53c60ba46dd8f44fda823e0cb1ff86d64e75b06aa4936c7bea5c8618d3c3323da0dfebe98e0398b8dc3b5c99a8966a7769786ac48b1

                            • C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08e575673cce10c72090304839888e02_d22ff74c-717c-4b4c-858a-21b1fcc6aad4
                              Filesize

                              52B

                              MD5

                              93a5aadeec082ffc1bca5aa27af70f52

                              SHA1

                              47a92aee3ea4d1c1954ed4da9f86dd79d9277d31

                              SHA256

                              a1a21799e98f97f271657ce656076f33dcb020d9370f1f2671d783cafd230294

                              SHA512

                              df388c8d83e779e006d6311b2046fcf9259ec33d379fc0e2c6a4b6b90418f587a12c5c23acd488413a02568ca2d3effe04608ec7c791925c7ed53dc71093ca45

                            • C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08e575673cce10c72090304839888e02_d22ff74c-717c-4b4c-858a-21b1fcc6aad4.RYK
                              Filesize

                              338B

                              MD5

                              a07735c5acb20a275ea17f00cd0b7dca

                              SHA1

                              27b2caae171154b6b6700d3a7421e59d6c1b4974

                              SHA256

                              111d9a708dbcb37232262f2599ac2d16ca555626963f75ffe68cfa28b5e24061

                              SHA512

                              ad1f6b980a5070f0e4380a9c69e34e4f89a62d3303f7dc3b181c550508212bfe6d203a1feda3313c24d63224b79a4601c3278b2c2b16d7b0be575f861965910b

                            • C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_d22ff74c-717c-4b4c-858a-21b1fcc6aad4.RYK
                              Filesize

                              322B

                              MD5

                              a808f80b1001599d6ae01e4bdb6296ca

                              SHA1

                              c4c96c070476b8214002cbc01cd7cffeff37a294

                              SHA256

                              cc89229731f38bea1336f43e475e2c3ba55f1d834248f84f9f4f08b1872d30cb

                              SHA512

                              64b1b8aeb35cd2e3328e070ba509f9d1b88ef8fec396d1b755a23d27a0db128a0074685284e4e413e1cffa0d1431b6b19eb5e198651f17c1f6f62f29d835142b

                            • C:\ProgramData\Microsoft\MF\Active.GRL.RYK
                              Filesize

                              14KB

                              MD5

                              cb7a5020e75eadf2d4d02ab5322f41bc

                              SHA1

                              f78dca3b02567cbac0570acfb0f7dbc444b629d3

                              SHA256

                              7372c8b97a0b2d147367e96773dd2ba6e42fdbbaf1ed4820007582388ff79523

                              SHA512

                              4e58c1b2f2e05ed681df2da6fb75f6aec018cb9562ff74d00a659681e490a17eadd7219c83c29ee18ea5b9ad88e98dddb56f84e01942cf58b84731f04b229547

                            • C:\ProgramData\Microsoft\MF\Pending.GRL.RYK
                              Filesize

                              14KB

                              MD5

                              0729281d685264f7c5084149dee78fd7

                              SHA1

                              550f3cfb6f86a86b8de08edf3001043c91cd0254

                              SHA256

                              651feeeb55ac920d2f4bd779c905a6fa1dab7f8b461f23aa5f937cfecfee9155

                              SHA512

                              8c66d87f32f970abe057477a72d5788fd502e53c16e56ea972f926ac8b5b97ac271822913e0bc04ad84d79c48b909223926a6d64316383a513d228cb678a19c5

                            • C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico.RYK
                              Filesize

                              5KB

                              MD5

                              f6648d2375e6bffbb1badf9b189a3535

                              SHA1

                              f5479fb8cbffd610564d9ef37dc4992bb64ac9af

                              SHA256

                              cc44ed57dcca8bf8384e0756f6e3c134eaf7a1c3ce318dd1cd3dfc3a55ec45d3

                              SHA512

                              e57a08eb597555cefe64341f65d7ee7a924c8fead3ee63fd1b2256dab7a91bd5d33aa5e17befcfc413e9234ca46c184bcc3d4163c2f520ea4ddcf484477c92d8

                            • C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico.RYK
                              Filesize

                              24KB

                              MD5

                              3afb6fbfb3468dd30b7e4731bc96389c

                              SHA1

                              423f14256ad6ef4830001781ada967cac48ecd72

                              SHA256

                              affacd0712d7fb93a8a5b834e25f9a35c3145d1a53144712a482df5ed1223713

                              SHA512

                              a2298d3b7005835ffbba6898c5692a284640e5b8748ca26185a4ff3520476b7fe97bb145827ff999f640af3a37a443d7e20d132507bd94c62e7f5d505e1d4625

                            • C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico.RYK
                              Filesize

                              341KB

                              MD5

                              cff8a4844aacdd50d527d215cf55016e

                              SHA1

                              eab320b7ee08aaf96cf3bd60dcadae4e13fdc7ce

                              SHA256

                              a58ec6a4a1543aab60e79269ead36bd5067f14d66c31ee3cde0de0353137ca0e

                              SHA512

                              1058e778d80d07123955aeb69461e4b7a8373b97832ffd5c3f809bcd4c33eb4e27edd0c855837c95d7afcfd48410c09aba94063d92213a8faf96a5f17ae02343

                            • C:\ProgramData\Microsoft\OFFICE\MySite.ico.RYK
                              Filesize

                              24KB

                              MD5

                              48d21c8bec82e32c472d7a4629d45eb0

                              SHA1

                              9f4f3df7b4b60b667a0e3c6a37adfee96bda1424

                              SHA256

                              a883392a923f6d81d5efc7b403c8c246c59ed1a9ee478b42c21d9268e4f4d4e1

                              SHA512

                              c76cdd200956bef2ab4a6019b19e9bd814f47af684b58b0e5a704fd74fbfb91501a04a0516f18ca5daa73343bdbe032fedd880eb698ad7f50cd2c6c756ae762c

                            • C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico.RYK
                              Filesize

                              24KB

                              MD5

                              4b4521df4375ce9e265140f1a449e770

                              SHA1

                              0c8db0d28424a2a0ba3e4cfce5e2f40d8c2035f5

                              SHA256

                              9c5d8f09c42c2c05635afeacb5dd6ce90f2cda895980d20b7459110a2bdc1a65

                              SHA512

                              089aed085ab9254bde93af2b4b4a1f3ade34aaee0ad0b45980e6fd160cc3b4beeec723cb49993bfd07ea2ceffe63ff16d76a3773342389d323fc68fc7e599f0e

                            • C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico.RYK
                              Filesize

                              24KB

                              MD5

                              5350ad4daa6ff6d69121327ae384bb7b

                              SHA1

                              375ffb18cbf5d18e84f3d24dc07de8cf100d8b81

                              SHA256

                              3697ef2575b6a3b7f0d7eab1d3cae22e0454d30ab481e657b1b05567e133e415

                              SHA512

                              db2acb90c878e4d8e608333562f2cf405dcabc5141ee171d7c215b7b4d47f3d8db10afa5f5519ca9791b292f12c2ca6b9cb4fadfa8ec5c8f8d367f59de17139e

                            • C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat.RYK
                              Filesize

                              43KB

                              MD5

                              e799f7867784b7e17ea3d85fb0dfbaac

                              SHA1

                              3dace1dd4f5f95d4114d85ec26dc4ec300c4c79b

                              SHA256

                              e4dea46ec258064b3e83f151088dcbaca9dfdc780085206246cd503f9efb62af

                              SHA512

                              e16f5e35352d1ccda0e375859b61626ba74cd745263ecbec2c0e38a1527b51ccb5e4e5f8f1ba40bc669bde1315b4d742070a954d8300a908329587d0b321e727

                            • C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat.RYK
                              Filesize

                              2.3MB

                              MD5

                              fdbe92366f5e752072efb9bd94ca208c

                              SHA1

                              60c5a236fda9617f98694f31c14a5a3feae1ce7f

                              SHA256

                              2449c39fa436351e0a7054263d9b0d11088fd001f225d7a1fbcc3f8eb501674e

                              SHA512

                              e60e83fb3fb86319b8ab3d0cbe940367954b790c46cc0ce670c102c024c57c282eefb48b58ebaaa3d03172e6f1a4c21bc0985114e94396466dc0506753a934f5

                            • C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.RYK
                              Filesize

                              48KB

                              MD5

                              6fe522f01620186053c96bd11e750271

                              SHA1

                              8e77f38f6895394f5d8dbd2574b7962bd0078f4a

                              SHA256

                              3dc02d0810830523f9ea75b1fefc80cb4a1fe1295c513c62dba25d73733548ce

                              SHA512

                              565571f650424d58f8dffc279a25696557285732fb60e82b32d5ea1cc533be0dc1b82c07023a39782f517b9372612dd565fadcbd3d0eea6f3173ba1d889be4b3

                            • C:\ProgramData\Microsoft\User Account Pictures\user.bmp.RYK
                              Filesize

                              48KB

                              MD5

                              f7288c7902ac62f2d4730bbc6897d2e0

                              SHA1

                              ec7b102d84d78826333faf7d04fb4d3a8e457541

                              SHA256

                              5e2a455cc80c7c4543477c152d1cd43a1ce83e9e1bb4622f632be5cc7e2d7706

                              SHA512

                              24bf5d66c7356faef036f0bac9eff544fd0ff58602471e98e5569334d1e7d1b2bbfada3a2abf707db1485ab12942cb0918c19684a29ac6e799c83baabdcdd15a

                            • C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasbase.vdm.RYK
                              Filesize

                              11.1MB

                              MD5

                              a967ae8ae391041a9adba7cb0b752c42

                              SHA1

                              9d7905317a5e3b4d279b8e7f63751162a8704e60

                              SHA256

                              06941896840fc5d60c02f014c57765fdb4359a37054749dcfd5cea5a8c8e2ab3

                              SHA512

                              6b98d1ac8f230f8a46dd9bd136a93320241c311ad8193c83bf6b733633936f9f41a191f965b0c7a3e40c737a22ea228abcdd6ba3930a48cef741862a1be2e02e

                            • C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasdlta.vdm.RYK
                              Filesize

                              331KB

                              MD5

                              932f82fec6ba4f456577cb8397bfc8c5

                              SHA1

                              ad9738eb39dc1e135eb6c14f654cd732ab0199fa

                              SHA256

                              4502a08ba3a70540b726d417460c84b15a98eb417726805f9f2e9a45819c0ffd

                              SHA512

                              cce4bac86f3437eb966498efc732eac401d10eb632d1d9b4cb139b2776084914a85c9172f75c3c4aa269ecb284ac6d55ce2f7a2d11bd5a3ecc1782875d71482e

                            • C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log.RYK
                              Filesize

                              7KB

                              MD5

                              91612099b73a606e4a81454fa74a24ef

                              SHA1

                              a003ada257f20f9745bb2bc2797075fe04e08e85

                              SHA256

                              50eb1af8ba50d73744fea0303c529ebdf572be19c6189d0c86a759ea83ead4bc

                              SHA512

                              bf33160970bfebe2306f728c98175ce621170313225f779d082aaf63376a39e4b4c86888a62f46d20641b751a57b4559a4e02aeff1adc27dca077edd177a9410

                            • C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.RYK
                              Filesize

                              1010KB

                              MD5

                              f8d0b7238410d8dd04e5f0b4375a1f41

                              SHA1

                              4de1f3dcf7a1412afff2fa6ea97908fd2083e136

                              SHA256

                              72205f8f6d0bd73d0c52f33811814a51cc1cc5b241168d44c913cc66c16e6a9e

                              SHA512

                              3d11487a36f805f566bebc3ace7655d6082a0aea0a3f68bd399be1981ab3960e9ab014b1842856a2606d05ca74ce1b6599e32856e3e978e58bbd2390830c4519

                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.RYK
                              Filesize

                              914B

                              MD5

                              adb0dcebd6963e808afb15bee714d13b

                              SHA1

                              327122b43e42714af925525069d65d53ed2d2a2b

                              SHA256

                              208a0912a284d5011a3db63a44e2e67611fe13c09a5d767a2b9a18a22307664d

                              SHA512

                              1350803fb67da2e4d550e8f5211f76948e0c6826d9fa8a412bd84ac891287f45f182a00e4935e68e32d09bb228aa9756efbe3f390f310629a66053313d1f88b1

                            • C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.RYK
                              Filesize

                              5.5MB

                              MD5

                              441e78a1db784023765f9076611f3181

                              SHA1

                              809cf3436fbbaab48d5734e056106e993ac05353

                              SHA256

                              6254bc1116d263052c2ea7d90ce8bd15537a8030e911edcca9fb55cb2eebdac8

                              SHA512

                              06fa04fde676a5761b113da2fba9d6146bd67bcb7bb8c5995d7389080cac69226d189b544607dbb2ab3b7e220e40bff06c7ac89c087d4dd35b357f05b6861a26

                            • C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK
                              Filesize

                              148KB

                              MD5

                              acbbe60ea7d527ed6b6795c72b3d9155

                              SHA1

                              c06f070db8c3d5344d4034c444a3a3fd39f7c046

                              SHA256

                              e8108403b0abee27fdafe0c94ade169d9cfe516340c36687a6c1ad82ee41cbf7

                              SHA512

                              274f40658bf5655466686f873b273baac2f5d230c96fba540ead1ce59c16af2ae11322d959e999f9742ab88283d6289e6b5a21fca6a9e494fa8c7909e9a93257

                            • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\state.rsm.RYK
                              Filesize

                              1KB

                              MD5

                              c0890b1ed853e527dc8fe0b96765dd52

                              SHA1

                              8106219bf9530435268899f57e732fd594e999cc

                              SHA256

                              eefdb68077177fc10930fc81037478ce5cd7f5059c5b341cb10cbe7b8103b178

                              SHA512

                              b9ceb90e92334681f67dd87fc53dc1d3ea502f74b1e3c399980a51312719e65d3857fda506ed74dbfc53f1c94f5cf4d3bdd6d4ff7da9754ff740dd7b2e9eb6ab

                            • C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\cab1.cab.RYK
                              Filesize

                              5.3MB

                              MD5

                              c054c83c55e5f07c6c39129fcc22b8b8

                              SHA1

                              b30c45a5f1dd07466ffa08301cc43a3872c928f1

                              SHA256

                              5fa8442c9e56286f64c060dcbcfea6db7cdec1e13433b8c92a0f8f23907b26ac

                              SHA512

                              4b9e4301c9213cdac3d3835f2fcee6b3296adaa6621d80aa2fdb6904474ec70d6fa891c2404b2ab97f11a52673f2369a73ffc4a53a304cb02d03302d2806f616

                            • C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK
                              Filesize

                              140KB

                              MD5

                              158e28fa730471819d9f5daae96cd045

                              SHA1

                              665a19a250d88288949ad45b0534c60ff4cc3ab3

                              SHA256

                              fbb5edb2e53f37b610aeff82592b023c9ab9953fec4e874e28c742f383e333a5

                              SHA512

                              04a75cc6dcd0a791df8f1bf75f12a175c323e417f05c96e78304b6bb453e9e166602236b8975844a42d30a2e3550fd8ce85f2b014b303a9164fb3cadff6cb533

                            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\state.rsm.RYK
                              Filesize

                              1KB

                              MD5

                              bca6fa26dc7022e8b058eee818c51d62

                              SHA1

                              765dc1076c5e849d768357e6e2d89c141fb12093

                              SHA256

                              69ba22530c8c5f8b581cdd84e7b225571a2ebf0ea895ea684e42eb3a8f240f74

                              SHA512

                              58547dbf2e00c3d91eda6b3a23ca2dcf8bb5d525aef0f9b90580acb37d2915d90c26cf59bdc604669527b33a863f83f506704ef1295e0cd8fec9ff420b2ce532

                            • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\state.rsm.RYK
                              Filesize

                              930B

                              MD5

                              5e55d1dee3bd814fb9c05b010695a913

                              SHA1

                              ea68b4ed977bbc1ec99218ca75286b78c4ad605c

                              SHA256

                              75a97418a86af255393c5ac66be16dd843b12d6c957185a4f93078e2d9d8fb5d

                              SHA512

                              4ac8b634497a0e1bc6396eed11c0c2155593c96c2a424017094834a2419433a50ec598f86b831b710a8dd7892b3a4dc14562c0a495b2b5df375c23aa0f0f735f

                            • C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\cab1.cab.RYK
                              Filesize

                              870KB

                              MD5

                              cfc163086cb29fce4e77ade0864ee0bc

                              SHA1

                              fb9a5f922f9f6b2f01fcf03a003ad96f79dba164

                              SHA256

                              98bee8f4917d0e7d6e958bb85bb4c1c0dd0278c5deab40be944724b4a887966e

                              SHA512

                              011ca037ed6bee03573240285b7bb384b99733cbe1ee13ba1d7a7e359fdceeb5e29db83687ebe799554ba305b234607e092b79ac9063a6bd79936996d85c7b67

                            • C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.RYK
                              Filesize

                              180KB

                              MD5

                              cd3189fa06e64abe1486e1b9e27b9825

                              SHA1

                              ecea22293e836047a8ff0a43abb36a1d7a4966df

                              SHA256

                              ea1dcd78c2e761436fd1459e3a6432b1b2a53c22d366ac62b76374431f87d96a

                              SHA512

                              66634db866519cfd32da8004724025e9a5da82d549b47bc54b189fd31f298468d28c59e014e83854da304346b2630e38cbd61ea8e5c61c4fa3ba37b91e9db67b

                            • C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\cab1.cab.RYK
                              Filesize

                              5.4MB

                              MD5

                              a10ac14ccbae4b603cfd9bf70c71f2d3

                              SHA1

                              35069393f40794e8ff5753002d4049dd7ac67eeb

                              SHA256

                              1d26f89a08585cda89750ac75b22830c83471edbe4b01309679784323291f478

                              SHA512

                              ea768c34b5adeeaa774239d1c96ff0bac2f4d87725b7d4f8955ac3fcdfd297e33d6eeb089a2fd19530126b5dbd393fce6829bd52c5cef3a17edc7fc5be15e26e

                            • C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK
                              Filesize

                              180KB

                              MD5

                              35e748e64d9b38edf0781acb8b522d0b

                              SHA1

                              0506d6ffe7a6bf53c00a55148374993356763035

                              SHA256

                              460de24b2f10b2e00dcb1cd85f1bcd036f4916d21d18e1114fb301cfc35b4543

                              SHA512

                              9e36094dfac7db786d2c4a75639d6507e6e338fa32a601410871e2f34b6faf429a1a64a66783809f529c2c79cef0260e8bc6c0992a0dab46d836cd01260ea4e5

                            • C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\cab1.cab.RYK
                              Filesize

                              4.7MB

                              MD5

                              9829686a31df97f4403fc433cdf58d79

                              SHA1

                              615ef512af02362dc3248e7b550fdb32d17e7b19

                              SHA256

                              b5651f8c3d6453d0fab9023772ef3e913e0fa0c0da2045d6fbb3741f0fa8c2d9

                              SHA512

                              468c386ef5ccb6f22bba22d1700f8a0545d292f6ebd0b8c011ea827425ec15dbcfae01b22005d399ea981c1264bcff58622b42adc13f723adcc639c367e0caf4

                            • C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK
                              Filesize

                              140KB

                              MD5

                              067eb645d9e5172140346988cdc29960

                              SHA1

                              1c89db536cf7b964dae6b2be65ee016e7dfc89d2

                              SHA256

                              1f3c57c79257824f3216d3d9b1c509866d708d5c7d626fbbe07672f901dc7622

                              SHA512

                              a183bfac414d53f2943d3b87ca17be9944cf870999104799a020b74dc6b9adb269aae298466300be76d632df1b04440c40257d7ae35f0745057ddfc18427e1ff

                            • C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.RYK
                              Filesize

                              4.9MB

                              MD5

                              1a0eb002d270b9980f2750ed8947dafa

                              SHA1

                              854e50be0a34710e71637206d82831713eccfeb2

                              SHA256

                              a46f0cf43ddc4c07d50622a8f1629c22b7ae74c08a362a4d6427762341b1f4da

                              SHA512

                              1c6be49d85f05d5d599e47337a29e1b709afde31f47794edff535bdf33a7cc070d486b41ec0718561aabdc1a9a45a10815f617b106b59582bc6b8d42e94856af

                            • C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK
                              Filesize

                              148KB

                              MD5

                              5001a55f258d221b1b24d2b72ef8fdf8

                              SHA1

                              d010a865a362b6398023c72cc648f0812c4f0dac

                              SHA256

                              23c8256bd28aef0c516241281433af12b72d2967de12a8e3159518e4c4c24e02

                              SHA512

                              ca3c81d1013a59664a4065002a321d021e97cdac8e3edba805c6354ffa0415b8ce582c8643a5a9958753ef16b571099d3d6a3edc3d58a5038638658ec282b911

                            • C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.RYK
                              Filesize

                              802KB

                              MD5

                              c65de28d2e4ddfa480e03b2680438200

                              SHA1

                              4e13f648a0c944dd6b0ae4c08bb146f69dcf7053

                              SHA256

                              d0e7ba39e7bf1730111042621f394b242162721dd7369c377c2589adf2d961c0

                              SHA512

                              a027ae35335eea097f56d54477faaa5ba8f026035ee7fe91120f7c3e6c494475954719f838d1b1806c294b427760a94122d9e8272037cb460e87240e5d8cb75e

                            • C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.RYK
                              Filesize

                              148KB

                              MD5

                              77f9f84ea26121d601e8e6587478d3c6

                              SHA1

                              c50abfb98a168a5c35cbf084244eaa9a35d557b0

                              SHA256

                              7f0ebc91df6b51d3692e30405af33e30e01b93c0b22648652af3fa7c2eb275f6

                              SHA512

                              182f3a5ac12e92a6dc795c9b1c6ac26ce61a65f39740a52e3f10dea51b9da3d88fae481d14a8bba4b338daa8a01737c3d1b2dce462c7c06a027ff6fcb4ca1b95

                            • C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\cab1.cab.RYK
                              Filesize

                              4.9MB

                              MD5

                              62848d400846d89e69cefbd43dbd1cb9

                              SHA1

                              176a841e81d32f3f66fc7c49c5d886d96677a9e1

                              SHA256

                              128624d7e2f8db6c3155fbe506d2bf706225b317d6482eec082aa8940de75af9

                              SHA512

                              17eb5c8ed99968199d74857f9fc2a068152e3527fe35d0756f7cab15bed74c0aa92cbab2e533cacca96c3200ba3861d486be45466de84cb0a55f7f0ab0ba0386

                            • C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK
                              Filesize

                              180KB

                              MD5

                              843b81c86e37372324903157c028afc2

                              SHA1

                              35772459918e72fd6feaa7c337a536943bd05adc

                              SHA256

                              9f954faf0861421dab86c73ba6a0d0cf454806c58e9a2eb8a48b1fc45623364f

                              SHA512

                              0fbe988464714f4c518aefc7da82b136c647c18dd7f6b3cafc9caeb644615ee2910aeacdd0a2030770dc0569d90326a0f10ef67e4b4c7f3a713245ecb0383ae4

                            • C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\cab1.cab.RYK
                              Filesize

                              1010KB

                              MD5

                              6b06cc242b1129f9c8d7b882e4d209c6

                              SHA1

                              b24990b2f6d95b94e66905d6ccb5901a8ef20267

                              SHA256

                              0d26db21725849c8ea09ac7f147d709245daf4086c47dfeefcc73dbacd2aee9b

                              SHA512

                              625828c9a9f258762fdb6283bf0743ea32665b51373c81a58cc8def2d32f659c81e74fbca7f4e27745aefe8ee5afc3eeb08326922bf718a8ad9c7e9e50b855c8

                            • C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.RYK
                              Filesize

                              140KB

                              MD5

                              d2329c2786373370199ad71f0522791f

                              SHA1

                              3d8802f879a4e9aace7d654258cad20c6f706119

                              SHA256

                              ec95091e813825766238e727cf347d9e67191f5e2fdf41feb6c42622390139ec

                              SHA512

                              bf4ffc93d1945bd655d5f39aa8c305e20a782a490cec093dab1aede18ba4072b5a41677902a13b452b317ada20fb0a54bc07cbe4cf6ffc9961507cb151ca8f89

                            • C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.RYK
                              Filesize

                              791KB

                              MD5

                              03e7836af9f9d4c98643ccc656ed9198

                              SHA1

                              ece6de84b1fc019d4eaeec87dff862f441011fbe

                              SHA256

                              b5afd52bf194479576cdf0e7c0b12486add0c663551a58c146238c6b8fef6074

                              SHA512

                              3c3dc6657fc2db638275b3bd01fc843bb3bdd1d9a3e7776070078973d4a54cf0fdffd91ab46191ce221797cabba9fc5d98efacb6a62ace639a1ac206867062cb

                            • C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.RYK
                              Filesize

                              148KB

                              MD5

                              681eaadd6b313700b682fac4ac24e8e5

                              SHA1

                              c017fcf645bca2b6374c19ab6859fc3033c9a258

                              SHA256

                              0450efe2233d275e1de92a124a24d545ca12af3f9b51b7b475322364365ff48d

                              SHA512

                              35fdd4b3009768d7c798684812d883f9789d3a950c4a4a88399596a76f1518dd4807947863076830f8001da759328d32ada871803b040d762d1a8e2899092129

                            • C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\cab1.cab.RYK
                              Filesize

                              974KB

                              MD5

                              a321dd2855fbd267ee8428c3a801227f

                              SHA1

                              16aaaeb98ce0adcd0e1b07c53d89dbb28b66fe50

                              SHA256

                              a1f12fc665c782fdd67d6b48018abfb28c81c14c3c6506daa38bbd6860b08ccf

                              SHA512

                              49f58c0eade39e479c150cfa2c2a909ca0797b0374faee44f14dc6041372450314f01a137fb514aff16dc0d47b63b111c7996cc0409ce8b0860b918f32dd9920

                            • C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.RYK
                              Filesize

                              140KB

                              MD5

                              cf428af38a75956b22e450bf52536f17

                              SHA1

                              de787232a46d2529d5e570a7027575eb5e9a7b8c

                              SHA256

                              438ebdc211ea3b782b9f3c357c829fd740219c831f3dd9c37fe38073106b2be2

                              SHA512

                              69c6426e3629771825d6269e38a2f18bd02882db3223dadc63f86e5d8d4bdd1e0e612d4dce591f36fded0a9f43ffe7c570c3968943b6e819bac9c83ec604b96a

                            • C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\cab1.cab.RYK
                              Filesize

                              742KB

                              MD5

                              70c3439a470b7b39bb926ac8d130a8a5

                              SHA1

                              cfb486da1ac00cffdc61e0ee41daca8b76290ca9

                              SHA256

                              55d0a90cbc9dfbf11ce77d113396dfa43f6466539dec6cf8dbc93bc88cd79143

                              SHA512

                              b244bce07830eb4f9b43fd9365d8ac4ab903f64176f02b632b3fe79b014d87ef3dcf939778524f2f946d435495cc8bbf6f234f0afd2236260aae478717c9497f

                            • C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.RYK
                              Filesize

                              180KB

                              MD5

                              1e1d25736d953d02b76f4200361024ac

                              SHA1

                              dd89b5ef77201737867f292d5950bddf7baa0b83

                              SHA256

                              7468b60ba2c66ce4df26f7ffe7defff3471ecca0890421a75b0f72abb9e3b498

                              SHA512

                              6c25cf071fed4336a7b6312c88a01e2016047ae9bd1577e8fc0ae9e72a1ef465b16bbc83f0e07bd1fd894d32e4269e05c538df5a73d9b7082a49afd8b242e2a1

                            • C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.RYK
                              Filesize

                              914B

                              MD5

                              8932b4621abc7c27f97b46f7e0867ac0

                              SHA1

                              5a96d7a7df8f8f5d14207912fff3ea82f922f180

                              SHA256

                              2b9c099e235f0937300662868567f582c1cea13c24c50467c84dbf3e7ec15264

                              SHA512

                              21140b9c3623f4b58898be4d0631cb75ac023a266c09b7fc7f2266b1fcaec9ae96a02c7befbaf8fcbefbcd4199039eb2f850b3579966b87dcee8c67667879eb3

                            • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm.RYK
                              Filesize

                              930B

                              MD5

                              b0b7ca740e56697f11b338b669b62028

                              SHA1

                              061dc841559752a8bee5cdf6f888f7e8778aa371

                              SHA256

                              0e4de8eb41917ff0fe715c348777db480601c9cd1b471c3af7203b091fd74775

                              SHA512

                              e48969245ef4e1caa41980663f4a1dfda892b6595f18b8a6b6dc3cb92ed148bc9c462c3e924f437ada5734bff1226e384837e1e9ea72ed39376003df65351d15

                            • C:\Users\Admin\AppData\Local\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst.RYK
                              Filesize

                              8KB

                              MD5

                              74a0ebae4f9f1973a8033a05a89f54cb

                              SHA1

                              3f60896604b6c5d071a1c47269327192307249ab

                              SHA256

                              8f8c238705d2522c9509179b07f768bdf948ecd7318a563eb6bab7e04219a739

                              SHA512

                              3b7d7b527edf9c5e31cacd982be76b689790331b55967e7fda67122194c991b4ec3da2932db0a6e2b50973271e373b6c7f90bac9367eaa056a2caea33258e630

                            • C:\Users\Admin\AppData\Local\Adobe\Color\ACECache10.lst.RYK
                              Filesize

                              2KB

                              MD5

                              5bd880d6731258a8c77da7083de1467e

                              SHA1

                              ea2083e2901f29a6c63b82ac9c9e25f9167ef0a8

                              SHA256

                              b29c0f7fbadfae2fdc6bbcdf0e48994e05a2669b4604a2ca702ca86f5eb33e55

                              SHA512

                              14b7d096e92f446d5a8e003ef9c13bfa1d6d0a4e3694dc0fc2a48ab62f205d4b3690125f034b83f185d2ad8b3343acb5e2456c2c6226df2f3ce0684649170233

                            • C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.RYK
                              Filesize

                              2KB

                              MD5

                              4ffc2f71ef988319e164ac3f51838707

                              SHA1

                              c4a35eb3fa21d0c6c118ac3f11e3b490eaed55b6

                              SHA256

                              139d33142716432e42b35eb922cca71109a0caa86a9119582190afcdd642dc04

                              SHA512

                              032daac2bdbd5743cfea5b2d07414b2633dd1f0d394e2b2acfe4c281ea7bd4827c4a75aba8ada5fefc250c5c4a2dfc0d87bb30fa0d06cfeba7e9973975776ba3

                            • C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wscRGB.icc
                              Filesize

                              64KB

                              MD5

                              387e8be93baeb75ef0fc942a5ddf6c15

                              SHA1

                              bc02f37f28e1515f4cf8f955cf4a2a9aaa5c2961

                              SHA256

                              6589b3d514eb58d6001015ddc028e24b7f332f11cf55b2713569320857a07959

                              SHA512

                              387f14d72671c2ea0b71805183733055ae0f11fc840a480ffd38ae0b4e208160cde96bee312f8957cc9e8c8c4c113ad691816e8404b413c3b04d7e1a35ed2730

                            • C:\Users\Admin\AppData\Local\IconCache.db.RYK
                              Filesize

                              763KB

                              MD5

                              a9f6890cccf70e3c35a209febe2c9cfe

                              SHA1

                              0f8c26dc63357ed06b7540b27c5c201bd28b02c9

                              SHA256

                              8b5e2071165b6c576b1bb2389965b068172b369d5ea040550a8fc62feb5518d5

                              SHA512

                              17ccfe193660f1b6e05c649cd8434728663b309e6996470b33022f76ceda9c0e0613d11b098805c23705b23a2dbcda66db788b3bb71baea2fdfe5125103958b7

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\Popular Government Questions from USA~dgov~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              d74ab13d0be3ba99c2ccf1066d420304

                              SHA1

                              069b7227630ea29bbe6f6e481f33fe13174cfe15

                              SHA256

                              47ee9254cdb0167c6dae4a8ea1c0ce71a77066de2af47fd056910e6acbb01dbd

                              SHA512

                              f5c789a45264a09d87197884372d6da1f059c5fe16f454fe0fbc03bf98a14cb47c1f7b2cff27bf49f2b8954b54f0e3c8bfbec42bcac620ad22239b08bcb2e2de

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\USA~dgov Updates~c News and Features~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              0757db1c034cadb51f96491cce425f3d

                              SHA1

                              91b3ed3b66d266d9ebda50ebf68cfdb33e02e797

                              SHA256

                              0026ec182c704b52d4a5d74f39884e85d1016121cc35a0741d5626c46c23bf15

                              SHA512

                              2b718971a571c9237b284e51c32536fae6076f93728475eb1a665f6068eeef9864039dc29b6d9eb76dec0ec20689e72d1613499a1a0dd8122a29f2a365f3b77e

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.RYK
                              Filesize

                              7KB

                              MD5

                              7450070b9fb5a133d68a25290e422932

                              SHA1

                              5459c2c80596532d368b80f9a5af83becee54dcb

                              SHA256

                              a5f83360313af66496f08cdb584dd2ab599df5d65c1cbed63eca9e441c40215f

                              SHA512

                              782e7dc7e6686d233ff0a3e749d29e35ed5162f6d53fddf81aaf1dba17a39e7eed7de95f033baff80a15193ca8b1a1a377655f1dd0819ce9fe42cc41e8b59d16

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              3b81f7eaa7bf0e27548489f842c13ff2

                              SHA1

                              6f7df5e057945e6b8ea3f774725d1d739adf9849

                              SHA256

                              f7980a606c0e4322d5d6b5d1042dce609e15a48f3c8612044e21200e127904f1

                              SHA512

                              2804e0820fc0c81fe0753d8b06199435555a016050509e20622943a7ca2e44c2f3bec85094cb5205711cb9e73bff2447a6e924707cf6610dc3e8290d87f7c17c

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              06a9725abf2336ca0c589d9330504934

                              SHA1

                              ecf5838ffc56efd2f9c050c7683582b9c514cf3a

                              SHA256

                              3b10cc22032c2f549b2172d556b053044688a5493ac78800269c49982d581d51

                              SHA512

                              ed0c0affa395dbabb6c682cfc75aba03ab67ef5f14355f3be0122be897664fca7c2bf8932c95d25b262088b99760c86af90ac0d9fadc92ea2314c9b4aa3258ff

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              30d9dd41a11664f77c2b12fb0fa85e91

                              SHA1

                              92dc6cd8d9ab8f4d89d808080eb2f28b00975225

                              SHA256

                              fdd716acecc2afa3cabea9553d485d1255320d316058750234698bde94e05050

                              SHA512

                              888faaf4c9248f22ff58b17622d232122cd78368becd24ad26c50bcc07b19f4f5cabe2bcfc08307976be6a0b76a9a9834f9b304214e8c673f516c0d11a157e38

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Suggested Sites~.feed-ms.RYK
                              Filesize

                              32KB

                              MD5

                              2c16fccaa5793dbcffe51399226d13d5

                              SHA1

                              464dba243321c4a9a2776965e34d9112e6828244

                              SHA256

                              6eef1084bddee65fb2bb3d0f3e7a3abe9386697c9234383646379b71f1fc4cf4

                              SHA512

                              65bc171e38b1651d20beb549cd5bf2b1d9d67b6c520b6df81bb7690449f122131a0ed063ee1afe1126d47adf5a696facbcf3f5b9d69fbf96ebf2fa148e793b0a

                            • C:\Users\Admin\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms.RYK
                              Filesize

                              28KB

                              MD5

                              ce197f71adac0fa162b77e2ddddb1f94

                              SHA1

                              f94a1d645f81790d715fe854aa3216912ff23e3b

                              SHA256

                              696ddf4a8f20f5373d7ee11c27d42627a404fe8d067f2632938edf82d0597e01

                              SHA512

                              7ae3e8ff3772acdc865bfe32d3d41addb2dc2ae34267dff5b5e2c3db5c3d398888f73d7bdbd1eefff1b34d4825c515a3cbc259044ac8ebb3bff7b1a4ab973221

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.RYK
                              Filesize

                              149KB

                              MD5

                              52c21f9175c45b55c2481760a5940ea3

                              SHA1

                              78fb59d3a3820384eb91967e1ac37991afa4453c

                              SHA256

                              937101139d713a550f6ca5cbd8ea08b1246c0abb77c22629c62c473f52ccd4d2

                              SHA512

                              82460d68be9ad2badf2587b3793c3ac37e86c7e76a97324ba80f879961b8046c24669a073fddfaf7a5ffdac3fb648ae5aff3b889b1db937cb3034df9a88309f4

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{00403280-B162-11ED-90D0-CEE1C2FBB193}.dat.RYK
                              Filesize

                              4KB

                              MD5

                              3d71d2440119036c0c1e84191bef4419

                              SHA1

                              e888b60eb6c95193409d4b5a12fbb7bf1c82b105

                              SHA256

                              c198572b175cf32843e2e86c6992495d85a02d10b8281ed6d4b3d892ffe58def

                              SHA512

                              e043d4d5aa64cf27426c6a2576393f01c23801c5f56d1356827c4f593620517bee7ff1c9a44e70830a1533d7175b8c83d0ac2f60d88d772d1526e86f7f8fc676

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-2845162440\msapplication.xml.RYK
                              Filesize

                              674B

                              MD5

                              d24174b050fa9e95e53813140f64f569

                              SHA1

                              97c47696d60453a7656a26a1956ccf46f32ecc20

                              SHA256

                              6c1910d997739fa37b566e5af3bb6adaa7af74d906a415d37656b1eabd04097d

                              SHA512

                              4b19753d344a0be82d37c8d74ef702f21b6533249c2af47f17d459b07cfea247962f3e3bbab31f3de2420109c455fa8bcaf09159d6b226030d3e542d42f4ec59

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Tiles\pin9728060290\msapplication.xml.RYK
                              Filesize

                              674B

                              MD5

                              ac138ca83a7dace823651e91a95ae471

                              SHA1

                              afc4fa4e12fab4c9e598cfdddeb6a8360ab6a1f7

                              SHA256

                              ca1095a85a6a5f931810ce4274737d2d3b0fbea7cf7d43d2ba00d96bdcaf1985

                              SHA512

                              7ae04a031f70ca532602be7c1abd222805bde8a7fa15d517c00771186abdffc7b6e5234c45ca815fd0f048b225e4f01dfa26442da18a6846c713a26102352769

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.RYK
                              Filesize

                              12KB

                              MD5

                              c21ba1c42e49fb123fbb376ab076ab22

                              SHA1

                              e5ef7a3cf3de839bf4506cbb1a8587cf00741bea

                              SHA256

                              60d570a52063f14ce5115ee4c7db078064365ab477d4b802b81f31274addb717

                              SHA512

                              ccb7263e8d584b108bbe9ef0682ee783f439f9eb2dbc810ffd0cba33af0ee63ad9d63a8cc6e6e9a973d1135fa3be2affba25684b18f6355469478d17c20c6181

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.RYK
                              Filesize

                              6KB

                              MD5

                              b402a216f636a4bec7954e20124d3e1f

                              SHA1

                              8ed474fecd2651cfde9c5a53b1486e2c7ae7f505

                              SHA256

                              b692b6ea93f2d7e836b5dd04cc7b1336ddb0ede58100a80b2f7422d7b3546493

                              SHA512

                              c60b33a847d4a60aa152e9a771d21b986ed85355479dbb16bb39f0899d667725c411e6426ca34cbdfff6e68538f1a9ef4194123a498240be9f8524d388705660

                            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\jpkegi3\imagestore.dat.RYK
                              Filesize

                              4KB

                              MD5

                              880887fab442ebf0b0345489f16d45cb

                              SHA1

                              280e118c2b8f05a927d92e199aa4b75baf415424

                              SHA256

                              387088c8585a83d5b5d826994aff037289d62e0cdd7772857a8ec5a0a124d1f4

                              SHA512

                              8b3108d153bb335c3a06310fa5a05bdeb43778f22c0f0ed4c839c20001d94e36c78921ad87b7dbda034e5db31a1518fa86480a34673ff1577e1564f2fee8e6a1

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.RYK
                              Filesize

                              1.0MB

                              MD5

                              7a5e4dafce3853131d07376b1ecf3d96

                              SHA1

                              673bd404bfe9b5c60331f9f1c9a934eb523f5ec8

                              SHA256

                              2e73df3c3b4da067c720bdfee1040f4d30f7cdd945469b23d6723c028ae77ad2

                              SHA512

                              195ccc36733b528b9dfa1f8c98fa2bd5bf4b98821912ad77d007ccc73ce898eddc08cf5937398144b1b1363dd50b37870c1d4df8632897f6ba1eeb2159e4659c

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb.RYK
                              Filesize

                              68KB

                              MD5

                              2eca4d1073a8508368cbd60e95342f9a

                              SHA1

                              e9e1be48e7c8c1ee541b79757b9d9718743f7399

                              SHA256

                              87ccec4a71dc4a2b5ddd79084f6f74b2105514bd1da327ab3eb7d03b954bbf7d

                              SHA512

                              d9b7b31aed587e30bf1f4ff2f3abde27f5be6727d1d2a5e76b028b58cddb31e6e90c27547154770dbf889388185596f8bdbcc1b1ea04238da8feba7f5ced10cd

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\01_Music_auto_rated_at_5_stars.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              7a553c60f9879c32da28dfc60b92059e

                              SHA1

                              5e2f2cd3186409627388800a8a34c852c54d8ea4

                              SHA256

                              fd03e8c3d86472a1d4ece79a63cf68c65294426bef4da4cd16b21fb591bedc70

                              SHA512

                              1b6ef940ef147e12a895e853c77e29bbf88c2440efe1eaecd9f0881ab3e4f5dde36ade66e52e1fd3d707db440016030036ec3505e3beb545498593dec7d76ee5

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\02_Music_added_in_the_last_month.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              0d480f9bc4fde37c7049a547dbec5750

                              SHA1

                              a9696e4e528636da320ac0fc29a79a06e0e537e4

                              SHA256

                              c064e7410ed855c8532abd97f548c747c48edfb510e9a777d66992114bc4a493

                              SHA512

                              1c815d9913907c22df79389f6736d5eed139ce84f2e2e99b448523fcae1ba8bc2361876864c6091a8ca4a524577396c3aed95f7ad2d18c936b67110ea844c24f

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\03_Music_rated_at_4_or_5_stars.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              e3db355722d0c6efac9b603484af6fff

                              SHA1

                              51cc6748286c27c02089344031ad716854541047

                              SHA256

                              bd7ffef0533fec4c8b966bf5f0016a1d1b0a4c6c99a83d529f69f97b2adf11ce

                              SHA512

                              5748d62fc7d639f497dde3e8fa392779ed55acc540693cd04e27c25c2a61475805d7eb8565ddac468ae2fd012ad69537e2681ef1b0c5b7ef2153282e7a0a11f6

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\04_Music_played_in_the_last_month.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              353494f5cb7180c1775a49e43ebabf13

                              SHA1

                              ada35d90fb6a9b0a7a68073766489aeeff4b4bc8

                              SHA256

                              9e072399209ed6b6981bfaa2e049a6a5cd902e1ec656ce5794b3ec90b6132e83

                              SHA512

                              39bc40e3be98f463fd618f2ea1c8903e3e34f9d533741cfec9e0317ed8c45d9efcfc1fceeb42fa6454771bdff02699885f7bcea264680b87a55c1dbcbe121011

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\05_Pictures_taken_in_the_last_month.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              4a60988abee28f740b4be5ad3c955c70

                              SHA1

                              652c7aba165ac4b628a9716a124777011e72dc52

                              SHA256

                              1cd27bc7fb17eedae0e27188ee6793a206908c389496c7a9549e3f3c64028fbb

                              SHA512

                              0996e77812f2fc188f140888c5c7dd6ce8a47061fe1dcdd2fc964acdeb1fbfc91c3789eaa5c0f35759f8a172ee0341c18cec3f68e65aef13f33ed04a153d1dba

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\06_Pictures_rated_4_or_5_stars.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              232e837bf76921086c51d5d0c41d9641

                              SHA1

                              af2a4782b777987d5ad21e514e18230b35d5e873

                              SHA256

                              aaf7e28af1fad0db10ec4bd80ab2c798dc9136076fbec7f2ff12d6db7c767297

                              SHA512

                              0ec1469b38d56a5168130b8dae3e29c32954793d08e2c7a290be096d6e50f0313cfea4a3f70a0d2e355e46ea871bf176d9842801893cdd56e1361caafd63faac

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\07_TV_recorded_in_the_last_week.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              7a1880b05f21bb22d37f74f458bf1ddd

                              SHA1

                              8c29670414edc85131453da53486376f1a072341

                              SHA256

                              092b2e6e383508c586f18ce389d1870e3bd4977ef73ecd6d47f03ac8587f4471

                              SHA512

                              0cf82ba123f5ec8dbfc87fd142cb441c80fab1dd8cef45780010b0d5016a668521cc8041ce408db586573f0d6c8e79b3ede0d2e61e4f091e457b8d8062361187

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\08_Video_rated_at_4_or_5_stars.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              abb7bdd53652d563002c318ae793a468

                              SHA1

                              22244a16767ad0a57a1ce7e3cb231e0c5235e378

                              SHA256

                              d1255aa5f4ab08dd8cb181283db90988f0085839a69d170d92053e2558266072

                              SHA512

                              ac27aed933e2b02e78023ae4432ebb0932f07f5658bf0dbf5e4ff34d6e033f00e5039a789870f9aec9f2471a663cb3de2ff9c3c2aa241425fda83d085e8b4e62

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\09_Music_played_the_most.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              26b460ccfd55c338493b0e52ab6d124b

                              SHA1

                              21f000784380e9fddc953de0e3b14270ea599bdd

                              SHA256

                              7e97e276bbbeb40dc286c8c543b6954296474654d4ddff6dec6f4e5ac538eaa5

                              SHA512

                              788db48a3694fdca5190618431986c1b18d0fa8dc8a52304b433a04d307c186aa1b7ee4fc1221bc94443e5aed19b4e1f29ad585457d3ce16e16b6f74c227a1b8

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\10_All_Music.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              647b08f8d832d59d85cf5fcf48c018ae

                              SHA1

                              2e33be672e33890e7fee4407c189dce3aec21bae

                              SHA256

                              9598b9bfdd1f428e6e0c8333f8cc04e1c8be3d2737c309ecc6d69ec8fd98555b

                              SHA512

                              b96a3266736f0ceca7c9c9e0a920d093f387cf5da242e187b89d6b7fa5849aad4a31646717d8744a8f88936384c0752fccf23057dbd17930a99e640628f44cc0

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\11_All_Pictures.wpl.RYK
                              Filesize

                              866B

                              MD5

                              51b790ace8a9516bc9fe9fb5b139df1c

                              SHA1

                              0b73f0a704b50eb42736b31213b031759a514398

                              SHA256

                              77f5668d1d1a1e0864923aad42dce8eb21903e5c2184416fa8ea452a880a6251

                              SHA512

                              2583a8ccadb74cb93d1322ac81cd0615c52d5e419170b214fa05a1c6194c8e9a14a072e5ff8d1e4f7f580d28f57025b7bbe605baaa14069336bc80f0f4b9859d

                            • C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00007416\12_All_Video.wpl.RYK
                              Filesize

                              1KB

                              MD5

                              15c9a91157dee8828065440cec581092

                              SHA1

                              b07de5d8ac27a1d43aecff9bdce80612d6b1c4cc

                              SHA256

                              bde2850360211d224d101f317f8325503a7b4bd9426a4ebb74bca17ee4ed0d08

                              SHA512

                              31522fee63439dd9f356ecefeedae6c94ec0a4b0cb363b2f1dab3a24008c99547f7d4f71a3049b5545f214a9934f684a4f78cde54edf3915445490b55f7e9272

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.RYK
                              Filesize

                              2.0MB

                              MD5

                              c5ecfe5c2328c556024c4f61a4546c67

                              SHA1

                              cf5344fb5c0c63e917f2986127b6dd72fcff0968

                              SHA256

                              8a9b00f7dceac685b87e3e64fa9bf156483bd800b43079ab2598ea121d120b15

                              SHA512

                              1a9e3ba705ce3beeb9460fab7434b61de9762ab61f3841d14f11f63b20bae9d61600975a63ec39afb3d47c991402b9a187010550e20bec4100ce29c204f8f22b

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat.RYK
                              Filesize

                              16KB

                              MD5

                              31607e37b04d5a09f0d1ca04cc45ebf4

                              SHA1

                              7bac081bf053764d3960dcad21768ca268e16cc9

                              SHA256

                              f7845927d8ef4e02a25685c9fe844ac4419fc27c304566e2057c2f4ed56b27ee

                              SHA512

                              1f45c0ef236ebfb8ba2ed70d07ea344fb7b2b9f1e96fd56bf4e8df433d22f0b69a16998467b11868a2a86b26ab0ef434668568d0e61593612f4d8f867b9a8193

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.RYK
                              Filesize

                              2.0MB

                              MD5

                              fb5bb6b687a0b9540ec456c0b81c5e3b

                              SHA1

                              c27c6d821c44b6b634ae9a7d87bd2b72592e61ae

                              SHA256

                              a83ba279e16923b1e3af341d40b7a6dc3ca70cd104b17c007e366b0e72a35cff

                              SHA512

                              98a3def8c5f39f16797c2ea32b70af94cdd58c1529cdb89c61d0e7d6bc97bddbe9feb769204df4ead8c7a6cda8066854a0748765b2334bf6cc769a4befae5bd9

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm.RYK
                              Filesize

                              530B

                              MD5

                              fbd80c0921711b22e803e76cc54007c4

                              SHA1

                              a3bac2cac3f42d46adae8e240ab2eb5e186eba57

                              SHA256

                              2d30a8c46ea4bfb2d8fab27650355a49c2e566354bbd862b1b3938ca55747aa4

                              SHA512

                              2b91fd504fcdf0359db4023dd71c5ea42a874dd3958e123c18afeabceab20a6418ff26b7b17219ac2711ce89e22c4576f61e345ca9990bcf1434839c1d3b1de3

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg.RYK
                              Filesize

                              1KB

                              MD5

                              a201a300a3f1e6639704e002e046ed3f

                              SHA1

                              6f87040ad4c6f7dee668dbf523554d3bbc1cb3da

                              SHA256

                              7b266e7a82b497c06aa0bbd307eda2110fbf97a06d5f687f15ee4858f658500d

                              SHA512

                              a8ce89ec8b40bb6fc67f66fc2987470488ec8a25f9f63c8061f4a43de518f3afe780a3a5b4ee98e643d221be5ac87c9d848a2a3955ba597dc9d3921c63940a1a

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Blue_Gradient.jpg.RYK
                              Filesize

                              2KB

                              MD5

                              b8f32380054f9cfcada8ac61914240b9

                              SHA1

                              021ba38c517fbc06fbe7a5563a58448db73fb3f8

                              SHA256

                              635900597e0d94c28a2883bb72cd6f59c5ce2679f475faca03d83c9c578a62ce

                              SHA512

                              5bd0ed3762ebe3ef0a1abad5d16c124f889abdc301fcc84623b0126a35a16fbb31efdf82038c5531484b31e4f4418097617fd8c4c281719a03d11bba3104ed08

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Cave_Drawings.gif.RYK
                              Filesize

                              4KB

                              MD5

                              ea5eec32c5e41e565174bdbe43d4fa7a

                              SHA1

                              ad2ca42811750bb4b4fbcd502a5ccbba7d4fe734

                              SHA256

                              03c0562fdc516734aa19fb9135158e3980ca2c5f9c3ec145fa052dc17d8167b4

                              SHA512

                              2b8f1da2a8e60140fe8a14acdb4f288ba410232d5f39632ebb1156ecfb4d3ff7b73ccc0b4bc257b82105b8e0254781804aea7eaa6f8a4c8f55c5070aa2fc1adb

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Connectivity.gif.RYK
                              Filesize

                              2KB

                              MD5

                              0ffbd453a19506dfc653d176b0e0c94b

                              SHA1

                              b12bda9ebeb651d7bd42f7dc37977b8545ff92a0

                              SHA256

                              28e40fd19b77cfb281dc47ec6e9f162e947148a214c2e152a0a46d5be87d9ade

                              SHA512

                              f102668f7e427b031e227faf224b9598c2f981ffd76ac96a2d09239f8c66f7fa5fb7dc35532043defe66994cd27e4ead80ed953716ab8419a5fb94148ae4a357

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Dotted_Lines.emf.RYK
                              Filesize

                              3KB

                              MD5

                              458ce3cf9a17968e8d967684d5c6de32

                              SHA1

                              8d00623042504d968a95a2213f13c058686d85a3

                              SHA256

                              145442fece3bdfc1203763ec7c6bb04c39d032d2f3072f641ef0c4bdd134de77

                              SHA512

                              42d96da5fe0ea250341102f14e133e117e8ae590072c230b5f60e4843c3b4b8fe6620a56a8472443de20cfd8f9086465dbe0fa7f9bd0e3faaf4ddc1660b4eebd

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm.RYK
                              Filesize

                              514B

                              MD5

                              39982e1f376b672e27c72572b9b9e224

                              SHA1

                              37dc4af70bc5c238007dfa48a4c397a4e52dc6a6

                              SHA256

                              900102e2ec55683c7f7b888fbd6796dfadb63af07b197a80bdaeddb1f210c5dc

                              SHA512

                              a624893259bd8360a8faf8db86a350ae04e212117328f0441b1dfaa1cba5aa3be849c4bb47f3abeacee454e209f53c2b5836a1e273ec63032d9b183415dcb00e

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg.RYK
                              Filesize

                              23KB

                              MD5

                              0e45f02fc6f352e0159247c042f498bf

                              SHA1

                              a2ed2acd74ceb5a72b8436940d68d06ca80af5c3

                              SHA256

                              09bb4a6252162d203fb57a1696b0073498b88505c469fdb1f90000550181b217

                              SHA512

                              3d3a8cff921819c9322f5f50436ac8cdcaa16bbcf808967a6e9cc49629338adc6bf2ae414656ccf32487f195c874d42cc673897c33b24d56f07281d7e4d1c88e

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Genko_1.emf.RYK
                              Filesize

                              5KB

                              MD5

                              f9915756143f1b3414102a9c054c66a6

                              SHA1

                              0d99340f4a69d9e41e18a1a114e2f8dd9ff9f792

                              SHA256

                              b5dc777ee9d542ddd27399fb21a2e47689518ee6f428ed32b5de57dee925b413

                              SHA512

                              511bcfe58f5702f58182aa8ada5611078b932d9d47901a43246dd41b16d84bbb49e2b32149fb3950d1b2ec9bf5ef56ea7d45f0fbfeecef8a9aa8f4e4d51387ce

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Genko_2.emf.RYK
                              Filesize

                              10KB

                              MD5

                              a9cd1d233c8162e6b3e0e974a45d5026

                              SHA1

                              690454b552215755c5c1b64294e805b91b4fcfdf

                              SHA256

                              ea85d33c5b9fd64b61f1c412dd760012e637d7fbad725af2a4784e607228b2d5

                              SHA512

                              3c8a95c8fa8adf8dc45c883aae7c2cba32be2c3ae453a448add137f699857655bcc1d58ade3c65a7207cb697a6439dd1fa3f063a0a03a9189823115e9057503c

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Graph.emf.RYK
                              Filesize

                              114KB

                              MD5

                              99cd665f19e5b038076c1c0a5940f9f9

                              SHA1

                              08294bf879313968b630cc07e65974b252e57860

                              SHA256

                              c08feb71bf6f2e938e425825fc61d2c9afd6865dd62a9744d1a377900e4fb289

                              SHA512

                              e5f76a4cb321dbd2ab8294513da1764999cc17d360be521689e586790abcaab6a3f4e63aa40af8c9900b8ce0338c98cf735e91d41b5a626312daf4b2bf089b8e

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.RYK
                              Filesize

                              514B

                              MD5

                              7a7b25206c8b9afe26219bc08129b4ae

                              SHA1

                              2a01dd15d1d26776885cbe4fe516861d76dcd0a2

                              SHA256

                              686048080c0ce3f824452bbd160f4f026348b64792b34bf3edcb6340c1f89113

                              SHA512

                              a8f67ee2ac0cf958ee3bc33d6dca018061c3c5ee9e54c60396152dbf0b7b973a7de834d4544e6d44b412535037e9e538eb2a02ad69f6f42a5130f591584dcc84

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.RYK
                              Filesize

                              6KB

                              MD5

                              5a73fc63801602c8cc6a8a2aeac482d4

                              SHA1

                              366f9c20dd1aeff2004de1151f2f216053c4ec52

                              SHA256

                              1c98bf99b1e0f0c46db6cb6f3f4d0d1da20f82a9458a2621ba16554f3ed5f2cf

                              SHA512

                              5caf7afa51cf8af5658b9f0fbbc3341fed0b76c985638d8abc85da119a9eb427a3a9ce1467b25e880a0754857d038748bb50e5f7bf5369f5672d7dae57f8051f

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm.RYK
                              Filesize

                              514B

                              MD5

                              ba77d1b58b51f9a856aa916af1ef5ac3

                              SHA1

                              1b1b31ce7e40c7ec5af09690ec7a59fb2bd8f79c

                              SHA256

                              69d664c79a70f34346d62b6eeeb0319418483c030e44972a53dcbb2899c5437f

                              SHA512

                              2141af2fc994cc96d3c1218474c69f9bf230b1f7cf83d12448e8c53761d7cab008b5679018bfd42d6af601af96cdbc240bd38817aca31b5dd680947f466d4055

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg.RYK
                              Filesize

                              4KB

                              MD5

                              1b79b8c8a0d96dffaf430e419eccdab9

                              SHA1

                              7d10cae04b8d5fd720adcd55040f169c703845a8

                              SHA256

                              fbc55cfe3416e4a77c9a2ca3ce2c4ad9ab6af28db9efa3fbfc82eb2390d3448e

                              SHA512

                              ac4bb15d96f01440aa85ebf9d3e89f71041919629f960c9caf2181e18eddd3d3163e17808ded6e9998d119543f2a0eb53ab4e10e7a3afd21c2d3cc4023b0e78d

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Memo.emf.RYK
                              Filesize

                              149KB

                              MD5

                              086c651ae00ef14e18088ef70850ff7c

                              SHA1

                              b8d780b7dd935d03da80afb49e87021221ba5671

                              SHA256

                              5f7a3ea9330e537538cdece39d139b27b1956536df22a7d8701872002299ece1

                              SHA512

                              b709d3f8d9d0665086121c978181cec1657abd71be67cbb5a63c8501cb5649d5704734099158ad640172818849a95d47f321a4d2b7d5daef5eab8e93a14c1590

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Monet.jpg.RYK
                              Filesize

                              2KB

                              MD5

                              b8179f4e6389eee6ad308231cee9f45d

                              SHA1

                              3eb4fce04d5280845ba22408424b1e8afdc1508e

                              SHA256

                              9cf5b44acd428f4c7aa07c3f73dd9f1834ef3ae172c0267519b84cc81f2d6637

                              SHA512

                              71d4a045742afee867c3cec2a411787b3a77aa1888277b1c0d931cd350423c52b38b45f362f41cd341495f71b4cad8aa8dd357e8f7afdb982b6716994686932d

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Month_Calendar.emf.RYK
                              Filesize

                              4KB

                              MD5

                              d1693a5059270cb3e71289f6aa9a5320

                              SHA1

                              dfac6a9c9fd5e9168432c2aecb1ce35a3c4f4534

                              SHA256

                              6f614cdb10647a03411f88ef2f57cccd49e032b640b924b992956126c9ce6b0d

                              SHA512

                              42a61edeebd9a9d0cc61c85bb071c844fae4bd8b8007cce2a9061046d1681d4bef14965e4290df5591b2334cc2dc7a4c29d9d7af0bb79b87a77147614a3e1274

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Music.emf.RYK
                              Filesize

                              25KB

                              MD5

                              4ba088e7aabd6a497ba56f2daaaf1cd8

                              SHA1

                              91471dcba9dad09293eb465254610d8917ae3d15

                              SHA256

                              bf9cf22416e3ba08d5b821ca555ebd2270768b9a54b7ed2913089b6fb79f0c53

                              SHA512

                              f03582594d8a8938b5874bf05c5e1fef917eba2fb83f5478a77b3ceb205f6fd7cdcf2e3542ce085906d2cb54874ef4228ef542fe9665ae9b18025e2c5e82e31d

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Notebook.jpg.RYK
                              Filesize

                              3KB

                              MD5

                              948146e3b358c694b39285bf465dd494

                              SHA1

                              98a5b64c11ab1bfcfb81f05c514d7aeb1d36b082

                              SHA256

                              4bc2268428cce0d0468ccb23c4842f4331d149e0315012ce7ffa7f739c5bbfd5

                              SHA512

                              5deaf3a844e8ea15b16f0ae19bbae4b15c67f97b9245cdf58dc7306c94bf46ca1ea18d9c62a4b0f71d363c3e65aa7bab0bfc85d9399e95f372d91baba6586b48

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm.RYK
                              Filesize

                              514B

                              MD5

                              15a064d5e202b48105aee62fd5bf96db

                              SHA1

                              fc047d23b7e08f6bcb5181a57aaf9d3c196fa410

                              SHA256

                              f78258591340d7963147dc8eb632eece54fad01d418b28e18501bc471fada853

                              SHA512

                              9d902489fc6d64b3faec97b35067235c2aaff6c3f46830cf4f2e45f9682aae9bf6a1c8f0ff30f13b94115f8e77379d006092729c1f36b6b83a550c594d83aa72

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg.RYK
                              Filesize

                              6KB

                              MD5

                              3808fd446db4c1137650f669a650b987

                              SHA1

                              d029228922a1628ee897befdaef3d0fe825cf0c4

                              SHA256

                              6b91350e393c726b2d0343a8eeaa36b8638d453033d09f914d4c489637e0ad57

                              SHA512

                              ffa6b8638c437a9e3fd63378eb87c818f49eabe0dfec005bd3f10ee62dedab1e4697ee0193eb3a21885fabe0bc865f483d579a7dc59e2977c713be4449dc1bec

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm.RYK
                              Filesize

                              514B

                              MD5

                              cd5dc284f7952381e2cf1d38cd5c5914

                              SHA1

                              b5e29f3b36536c40e4fbc69a7ddc59e441b0daf7

                              SHA256

                              37fd234ca1c6003b73048226967593a8341295b8c3c2147aeaeed6832fa06b71

                              SHA512

                              5ddadb8533b33d7c496e5d2f6fc5401b62949ff799a1bd006413c0b8bb23f78d72bcd19427470eb1449e04d2f43142777709e9e0b6d8f76358886c2a1f898058

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg.RYK
                              Filesize

                              5KB

                              MD5

                              1859046b20774b7713ca241181709b29

                              SHA1

                              8c42a83df3aa29fb3714899493a06a818cf71507

                              SHA256

                              a8df76737c129b002a4a9bc759f3a1ace68b65f359bb91e1ff52454b8653a5c3

                              SHA512

                              f95e5ac6f1caa8941c934a96d3376a0acf6c005d927aeb6ff3540b163c7e579970f1f4d50a917e811071e9873c9586d4b270b31e2b8fd465afa16108d76b8a46

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pine_Lumber.jpg.RYK
                              Filesize

                              4KB

                              MD5

                              e9f0cba464debbfa0d6d006244ae19ca

                              SHA1

                              b9cd0c61e00d61116992dba735660efeb4939ebb

                              SHA256

                              f1ea117df17b1ecc5253a2265bc89a13b823af4503423a64a536aa8d5d65410e

                              SHA512

                              0c686f1879a2ca2040907ba4b54936cb12b63d9901b443a9be35097ede452150f23e1b61492d79bd9208df885ce9c881f6e0ee1fb248bf667fc391c5d6a01aae

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pretty_Peacock.jpg.RYK
                              Filesize

                              5KB

                              MD5

                              e55f4a7348ba64b241575f711034e68e

                              SHA1

                              131753f0d5adf057f71dadae7e443f5deaa3f315

                              SHA256

                              19de7e1f0e3506c772db137d6d0f890eb60989d13ef0cd4cb76f439764716fbd

                              SHA512

                              422b55bedd47c6f1bf5ee3c9a395dd817b99799be4756e2c1e12adad688c7060b59a0205b38daf1c30148b81d15eb9d040e7be0e1a7a1a8139a65b8e4c0fdeaf

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Psychedelic.jpg.RYK
                              Filesize

                              14KB

                              MD5

                              4eb4ed3d5877a330475c118aecd7a2ab

                              SHA1

                              7d4b1ca43407dabfc01308620bc94a8a639338c3

                              SHA256

                              bcdb33887abf248bb2fb2b69b05af090f6e2939c96dc26bfdaae377f0675be6c

                              SHA512

                              dcad54f43e9c2472ed57f0677b3de165be21a0c91bf636401034b946ad92464a79d0b764cef0e82cea1f8b7d4addd74d1df25866d79164c6a00f9fc7c30ee626

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm.RYK
                              Filesize

                              514B

                              MD5

                              ab6ba1721dba03b7b7c806dfd08f4fc9

                              SHA1

                              4836e7b9e91d40b9b399127141dcdf7536ec7f27

                              SHA256

                              a99fada599bd2a116387590a05b0be3301a2a9bc340cd58b92316daf84a53e33

                              SHA512

                              df3db52e2f42ee33566d3f7ccd67bea22ae6e4d85f7f61e81029870068f39d29f21f81968f9aa6fceaab29f8779fcc7382da3fc1ce7d7241aff672218fd046b2

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg.RYK
                              Filesize

                              2KB

                              MD5

                              036847e4a7a01615998f7d5a8950e566

                              SHA1

                              1efe228f90047c829a5d0150ca7b83d4ad5c8822

                              SHA256

                              27b4262a334ab843fe0c740c0dd61b682da23743b7be08c70009dbb62856517e

                              SHA512

                              be810667859148db99a01cf6cdf00354da91ceb2cffc927c7a7881b0d3b7c6a92e82055ef8fcb1ef491f04b61ded847c718e770558f306c33f2473f5e9fef4d9

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Sand_Paper.jpg.RYK
                              Filesize

                              15KB

                              MD5

                              c7105277523ec975bad6070457ab33c0

                              SHA1

                              cc2afde05642874e50ddc1da2dcfd81164e205fa

                              SHA256

                              09e05bfc262f07ebe2b06c72ab7707a958555a3289d00c46cf5fab463ca0e15f

                              SHA512

                              1479a5973dabbb4aebbbdf061d02fc6cdca3eedd0505c6d5e5ee85260abf234b52548cb02be9f1ce78f8d3d4dad4b87dae993439366a35d6da83f297ea9695bd

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Seyes.emf.RYK
                              Filesize

                              36KB

                              MD5

                              4ed675bd7b5eacc9ce82098adb5c2c6d

                              SHA1

                              0b30bb43b4bf88e0f5b42fc7856fc6045a156b7b

                              SHA256

                              ad9423eda2b21a31c173d80397d8e632b528586af6cca83a4da5bc69ed95997f

                              SHA512

                              61f72313a59b0e48cd58ec8f11e05a3758309bc56c83495ff4b813d63f016074026cb4bc5c15d0bbf806920cf67fd5d4ad817fcd7ce05565e9fd39dcfb84e090

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.RYK
                              Filesize

                              514B

                              MD5

                              6534e46c8b455a3b82943657afd9a631

                              SHA1

                              07f8edc463a072166fb33957bd68c13c6905315e

                              SHA256

                              998771e42272d08e8cc0e698920db914b1b84912b5f7cf3218ea7afe705f3bde

                              SHA512

                              078d79f91583d4c6771ed44faf1fcddd3a5d1eac68c37a7de3ef1288b18158dfb924dd69f5f7bf3dec2843c60688c2f7359db9783d60db6e2325867c31969fc6

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.RYK
                              Filesize

                              4KB

                              MD5

                              9bcb185445e41a32a16b4d989b4be39e

                              SHA1

                              a53b97288bd82cb8d5d42a0142da547619896487

                              SHA256

                              b30b286602721374d9cff3778c8f2995925036d50680336586688b38a3fecdb5

                              SHA512

                              73408d23387e6a0ee80171c617b44193287da9903363cbc1be276761d72d4b993ab68552e0c4474ad42bd68135cf6b6dae4f50d68d8d1f374e12bdae1688e8b1

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Shorthand.emf.RYK
                              Filesize

                              79KB

                              MD5

                              dbd2951cd8e45d01159623d9f53f2636

                              SHA1

                              eb514fcdedf83ccd554a46a8d9733817a58c0ff7

                              SHA256

                              3ea4d0a01a368df66ce214fb3ef586a4e958f44d700621e0d8d43723c9cfc8b2

                              SHA512

                              a0b7904d4e85c0546881787d67fe2961c0d363a75a86340e7ea9bd0604608c4c7be07fe23a17924f6de008b50490317a9d121c1fccc5d4351ebaa3a585d2bcb6

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Small_News.jpg.RYK
                              Filesize

                              2KB

                              MD5

                              19148c933114474d8168655bd642a4b3

                              SHA1

                              1901c7a78d6b875a9ecbdc4742ae99f6d872b338

                              SHA256

                              ded56fedf542dcb2be33031b8bdddf8d11d0d57c41003542069b9660e2968711

                              SHA512

                              06d6dec5161fa309f875aeed5163885705323a518cb1fbfea4ead2da75762b88864c32e9818365a11209c74a98b76a04a89b88dca46053e1e457849588544d3b

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm.RYK
                              Filesize

                              514B

                              MD5

                              63af56cc0a96bd54c47cc20e8bc6cc95

                              SHA1

                              7971f2297c82413cf74a0dc9e1be0ee41bbd52ff

                              SHA256

                              2f4a6a938be30f7239fe12902c0b1d05e54ec6a0c5ef66db11f6f45e46e50fbb

                              SHA512

                              f557958a8c94610563272e2b334c7a1aee192a9b786bab8cc0c11de2404dd2eb76174e9029eabec988123b1e7ecdaeeac2075f0e252d25222e1747d5a600a702

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.RYK
                              Filesize

                              10KB

                              MD5

                              e37553a6fa0f21d215f0f7d2b66c04f0

                              SHA1

                              cae658dd442972beca5102fe2ecb42a3c1946290

                              SHA256

                              6bb05a92ae02fe8d09a40db1ab0830b7f0a379c03f8b47aa3791309b75f18fa1

                              SHA512

                              15122bc323da904a4b6551f1e2d2078e6c5ffdc9793f4f2a0d51725645894674a6ea9726687b030f061142e048eca10dc5d7c045b517cd70c5434c0d8d54207a

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm.RYK
                              Filesize

                              514B

                              MD5

                              2f10969ff96c8ea444c834f803195fd1

                              SHA1

                              d6a58bdb96bd3782eabd85ae67aed466bb531d22

                              SHA256

                              a185239d962550d0df8264787648ee2a35b159948be62301f4fcd3376020ce9f

                              SHA512

                              a1b27b7156762c7f2ba0d68d039e134b42ecf3f3384b6f65087f440796f10942393c8b6e1eef7107239ac633120967bea2493b8174dec8c59a00f3162df198fc

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg.RYK
                              Filesize

                              7KB

                              MD5

                              d605a2544da5cb9314996d7ce595dd15

                              SHA1

                              efe5cfff1414bdd368c8243e3572915ddf07bad1

                              SHA256

                              af66be615b985207e27308f498ad540a6c55f58eef657252f5f259b8fda67468

                              SHA512

                              361acf0ef014ee919d33f572dda9d4ec2be2eb79a7f6230775684576de10ee9015c66340e0dd0136e3a1d6e040169d80d12a7a73ac5098e55d5bf3825d497eec

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stucco.gif.RYK
                              Filesize

                              2KB

                              MD5

                              e62b454ef31559e0dc0babc1b60d3a6d

                              SHA1

                              776932a01b1939383eb3fadd1351693b61280403

                              SHA256

                              54e8e1e0da35c1d00fca6b4d9ce8ed1338f7b9a5bd6429d47b0bfe3c45882161

                              SHA512

                              e18f4e00e99fc592162b3baac2b73018e99f47a4618443a5495b8f1955916cb39e55d31c644e4ca053aeff3b3eebdad791acd2cd42338c3789b9ec2ac19c2acc

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Tanspecks.jpg.RYK
                              Filesize

                              3KB

                              MD5

                              96bab435fa914bdceba6f93b92bb366a

                              SHA1

                              04680110969fd6a9637a7811105d0518cc7bc0ad

                              SHA256

                              b37f0c6378c3f766a41e95478c24cb706a279e4720cf98bd66375843571ec6e9

                              SHA512

                              2c7b68b33af9d4a07b8cc5e5ed7ca68598fe0d130a47b69e4bdcce831d10e99f6b607bd2cb4e3759d766052ae81ffbfa3a5b933f9312ef84ee3355a3f6f90170

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Tiki.gif.RYK
                              Filesize

                              4KB

                              MD5

                              80d771aaab0e0a2e112d663678c086c1

                              SHA1

                              e536484a1e2ecd3fe4677ade0cbe0eecc95ac0f3

                              SHA256

                              d607b26272570e8b75de2f21c37bfc4e4ff192dc08194fbc9896558b6fcc7e9d

                              SHA512

                              16103fc9eaf0c41fa1e5656c92f16c74c8b194c03335ec3127c78d14b4382e77ac66908c12f743fc946b2ada78508fbb659ad558359032f98ff6ced607a36370

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\To_Do_List.emf.RYK
                              Filesize

                              26KB

                              MD5

                              415c981841ccf413981287f10dcc26c0

                              SHA1

                              1db6b3fda13b57e2e7798e595ecfbf0c617039d8

                              SHA256

                              32625a7c27ca28efca5fc5e87a17e7fe992dc5292b0c19eb0b63e7e6659133e3

                              SHA512

                              d81771fa899d4ba5f80e2243a64b509cde0e7d00145890aef5ccdaffa7c9c3c807814e912ff401d3cd83e0e308ca3b633f367be1bba3d165e4b9a735e71f6808

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\White_Chocolate.jpg.RYK
                              Filesize

                              3KB

                              MD5

                              6333414acd21acc2dcefc46f6471fca8

                              SHA1

                              bcb4bb0eedb83f21714d2708753dedece6884aa6

                              SHA256

                              057cd302a137a30f355cab337059e9332af134331419112c700b29c57a2f774d

                              SHA512

                              85f0e047d6afdd47b85ca22282f2e18083bfb21b6255863ab8e3f2b587debd37643cac1975166fc3d45cccac5a1065b2f06eb06038d9207ad07077b393bcbc6e

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Wrinkled_Paper.gif.RYK
                              Filesize

                              14KB

                              MD5

                              9b802f6ab0f0cdbfaf5f0d387d9fefbf

                              SHA1

                              171309e16a58190cc42465848ce174f4bd9424ee

                              SHA256

                              6d6e4ebf33419ef7f044557b96e6d0a3dbad4cfe241736564a07ebd36a4ae837

                              SHA512

                              493ff69e02630c7adccdbff1e1c068b4ef7128dc2da038d91190e9ba4d4f09e298784eb403256025296f322a8f93fa15536909bed396dd574386496103073c05

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\grid_(cm).wmf.RYK
                              Filesize

                              3KB

                              MD5

                              9cc4fb4c60e71d5fd559263cea30555f

                              SHA1

                              027113313c66b889dc31182a0b6c194c0df475f5

                              SHA256

                              7eb09cedbfc02c7815ca544b0167a3f9c36a632a46063589feb1fa9c2090040b

                              SHA512

                              624fcfbdfbeee608e1e7c8981b346be031376093a7bc23ca5e37132334c314052998310c5845db0b7ea624551cdf045d6f94d8f69c84c91f657942ad9bb90718

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\grid_(inch).wmf.RYK
                              Filesize

                              7KB

                              MD5

                              4939116b0cf479c66a8b50fbc2e4e62b

                              SHA1

                              0a0f70763ed71c7e44996e9974ad91b47c914cf5

                              SHA256

                              9d0740633d2d61b2190eebaedc7bf9f598db631ed04ca4536a54ce938f74369d

                              SHA512

                              e79f7f2f358aab677c294be6b3ce01bee10e4b686edb8c4283663cb58f9951af8b5ee92af6ab140f435b821f831d437476cc5334d687d219f0769076891f67cf

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.RYK
                              Filesize

                              2.0MB

                              MD5

                              64586778dca364e9d74828770b0ed3c0

                              SHA1

                              f7a7060fae06c2b7bb7682d4fb31313efaabcb51

                              SHA256

                              2c76d58ed2edcb3df829ff28d1d8abf18a9fec067d9771a1dd0bc86547d48942

                              SHA512

                              6e6a7a2f77069498817d5c6c7fc5af3d4c63b4d51f11357cb6bbb6204920be7ae74a13b45c22990adaad45d29e3b1c209028525576e96a8fa9cf32c09890f691

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat.RYK
                              Filesize

                              16KB

                              MD5

                              cfd267e9650e4f844a46e609f05cb3e7

                              SHA1

                              d2bfaa8c09fa487cf621a33d99f662097c63705b

                              SHA256

                              f9ca94b01aa61697b8944a8ed20a633df8eea6d3fe569998e870903f1ba74211

                              SHA512

                              e59daeffae738c1344470f4853daa01f7177404e5e36d6b4bf70a39f47c09dd00e6681dc40f6b5a342e19aaf9f9b990a39c4632fe6a1de288aad84e2f75d15fc

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{68D79A8A-6DB7-41DB-A8C6-3C4CFE270B55}.oeaccount.RYK
                              Filesize

                              1KB

                              MD5

                              24dd197dc97689503bbd86aa767a70e1

                              SHA1

                              397720e453d5eac6b53ef14bba6acf68b8cb1bc1

                              SHA256

                              d151310eaea469c8a840b3c8798c845e97f7649c0f9e63c35b598c3fcc80299b

                              SHA512

                              ea53a5232caf3953eb4de5ddc339614517c1a759bfaf1f5509f9b309ff4d36b11114b2b2eadc9ec2498c9c506791e46abe5eb59a4bcad2d4b4cb7841b42cfb5f

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{75C99DB9-A42E-4DBD-BCCB-3EE4DA87E34D}.oeaccount.RYK
                              Filesize

                              962B

                              MD5

                              8f00a555819915c97c5fdf7882fea187

                              SHA1

                              1779c87f5af2773354b4dab16abf261fcdcf7c5d

                              SHA256

                              dc09badf10b0bcb633ae54a2503d227cb8857a23870ccda7362b0b20d8ffc410

                              SHA512

                              78a867045b86b70f84e87e5af037d2aafa3138a48d496360dbd61abbca49c84a362e4f4a96ed1b751d3168c33e13256daeb463b626d11facf7362470cd364043

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{E6462187-D3BE-4BBA-8F71-23C62510BE9D}.oeaccount.RYK
                              Filesize

                              1KB

                              MD5

                              114890eb1cb162ed82d4f679b12a5466

                              SHA1

                              c6a2dda43f44ada7560956378de4c0754e237882

                              SHA256

                              6857d6e2782417e3caad63bec582444ec83b05c788fd350416619d204e03c406

                              SHA512

                              a37719196f6c6b559c27816fa0791a3bc4f8e21cd0689a2789805fba3f63d255a6a9459b9d2b50651237d75761a3637f19cebfd194a98f4d829a2d78c0b0194b

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb.chk.RYK
                              Filesize

                              8KB

                              MD5

                              72de23fde04e07338891c1c3eaf0b586

                              SHA1

                              3d5dc4514cc613a4ebae226f1e00015de918e4ef

                              SHA256

                              84089cd217c24a5e7b57c69837f67cb448b67531563d7b54a255c78759fd797f

                              SHA512

                              4e3d3ca6d5a7ed7fa6a3d17e70cb5f9db194d86ce5f95ca3f49ac088fd7634bdacaa5786b9ec1c9060c444e0b2ce9de6530b293699cd7e65ee4c455ed86bdaa6

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb.log.RYK
                              Filesize

                              2.0MB

                              MD5

                              137bb0059101acb7a24ee9e7477642d8

                              SHA1

                              62f9a2fd662640cbe30de21f61294bffc252d3a5

                              SHA256

                              e9f5fb94420a554a1f244abe339cab15b690c7a18b15c1639157476244ce6140

                              SHA512

                              16f35d3d4486ffc001ea5852fddd8de0fa5d9c7db1cc50767194fa8b73300e73d17a1f492239db2ec0a6907a17dba465b93e3cadd25f23d30e80061ba74be3d2

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb00001.log.RYK
                              Filesize

                              2.0MB

                              MD5

                              9c7ddce1ade914dd2e7569fda052300d

                              SHA1

                              f32ea18d1216b9f2c17e8374d71a40f026f4948d

                              SHA256

                              12a8f99a171f74cdc9736d3e2e911fada43eb38fbca2748af28205215f6b72e0

                              SHA512

                              f52a98ab91e36a40a3788c7872298be2bfe0808ccccb68a24406470d204387dc17884cdcd58cd8ba0a982d04b63bd2fbc970178214785e87805a946abc024f56

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.RYK
                              Filesize

                              2.0MB

                              MD5

                              d0c999ef63b879a977d4b74cc104efa2

                              SHA1

                              cc932b4faf3a639beaf94dc037817192f0795f23

                              SHA256

                              577efc1e08eee6afb6d5f238c079d0974cf4f92f4e332cd7bfb3a0d081810400

                              SHA512

                              47b4a09ad5e30d3b1da27e0f2e4e3ddfb684fdb7eebb1963dbbf5843dca778b962bd0e74b40f583b5cda58cc30e5810b31e998641ea3b39ffb077ab9400d7b94

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.RYK
                              Filesize

                              2.0MB

                              MD5

                              5c6c5a1a186cc4bb03c14a805e8dc6d3

                              SHA1

                              9dac65e6a6e25d2dc6c02b18aa3d769401157cd7

                              SHA256

                              0331ced0abc105e042f1dbf902bdd9a827087e05a03e04cffd36545220470120

                              SHA512

                              d0fbb81cf74958c9e17fc35a90a2bf741b0931c25230d1adaf3049713ab155711908a2d1327220138985c9fda1cb881eee8c668b839172f6ad679357adce3ad7

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\oeold.xml.RYK
                              Filesize

                              546B

                              MD5

                              1606f445090d5e0112d67167a839dea7

                              SHA1

                              59257c173b64992b69a72ca3fb7f5c8aac676ddc

                              SHA256

                              461c6f95e0b252a3ff609bf827e4f0ea92c9007c2e93e450a67b6f1f7fa77197

                              SHA512

                              7cb43cf4af50b968c507566c0caf8bff4ae2d5c42f0f3ce50d741569a8fff1ab3a77fd42cab94e86ca660d6adb7aa481a50c2470e9425869050ff730f16a2f9e

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.RYK
                              Filesize

                              786B

                              MD5

                              d456afae0bc375cec28025c00346fb23

                              SHA1

                              fa0c8aba8aac967897d7321d90d01dfe017427cf

                              SHA256

                              be239d882c1e0af25127480edb09bc93e7bf477ac3c1a1925b75e0f6737677dd

                              SHA512

                              637bc84135326d82de2a86bd9ccfc151227ad3254087e4f34b33bbc7e5ee05702203560b8f28050517c2aef0987b72e7f168d829555f7090221c9a7f00d35da0

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.RYK
                              Filesize

                              10KB

                              MD5

                              1d9789c71e5e9779f415f5ef85521135

                              SHA1

                              33eaa494716534469bb5a4d33cf3c3201990b361

                              SHA256

                              822741179d25c8f491c0ea093cdc85775a80ab20c80a685e54155cd8634b2757

                              SHA512

                              30070c7ec25e2c79075e5f6d2a076969f55c30950c642b065d6f969a87f2963e01867d1913a12cf348dac3e8ee8c1e442b996bfea65cf14540700422f07868a4

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JN2GDFP2\favicon[1].ico.RYK
                              Filesize

                              4KB

                              MD5

                              59298fe6bbd17da13c09ea24128bf5c1

                              SHA1

                              5d3bfb2ea254d61d2e82649be3ee974cb30f942f

                              SHA256

                              f173d629f94b4f3f91fa96a660a18e914626fab7099bb97ca16aaa8ecf2e6de0

                              SHA512

                              2c71755a5409a4316c786cbed5d4de7403a09a1dd0ce05266af5f468cbe69800dfdc4dc1d5484d2f75add4604c72293cb36bebd3453383b4704ab5a821d0632a

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TEOMB6VC\favicon[1].ico.RYK
                              Filesize

                              4KB

                              MD5

                              eda8311e317acb59c57ff338702e274a

                              SHA1

                              29edb632db15d37674fe0d3e25d7f305c331ed96

                              SHA256

                              06bda35cd495a29c3075bb0dc6562d8be5d3f0bf85904c1e83e59c698ed5a763

                              SHA512

                              bac36e6460f9278a6d872d1405e5e8ada7a1db9cfe2e78075f0dbc148864019d7c73eba70da8913b162ebabebc43d19a3b63a5d1806b5aaf019122a03e3e2e5d

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat.RYK
                              Filesize

                              32KB

                              MD5

                              e3fc45e22d305b974f6d698e40462b88

                              SHA1

                              140ab90f626dd2ec5d7d74599e8885ad9ed6936c

                              SHA256

                              96b7d673c8b79e0cfa3b9954cfc8d0e93fa6657e484f78f56f4cd56d427b5e85

                              SHA512

                              780b9117cb87dbd2bf53816f348c2a7b7268580867c2451bf052d8283d0de1ace20efb9dd13689907d6681aefcffaafb135611f5641e7f66c36e6609cfbde923

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat.RYK
                              Filesize

                              418B

                              MD5

                              0ce8a60d85e9eb9965994c2357664f03

                              SHA1

                              68553ddc636bfd40ae396dd5d4306a57b09811d5

                              SHA256

                              5fda58e0f9de05bb0631ba1731733d2c07d5304fd9e995ed8b6d309f2f65b37d

                              SHA512

                              96e7538b311aa6daab9272da2242ff86f8ff46f173a0dbb3a61f5a2afb19f16d94f6a489396fb3463697fb8edea15982e8b2829f50ed70cd5dd083850b2c6576

                            • C:\Users\Admin\AppData\Local\Temp\74eead20-8c7c-4c5a-a120-ac01ba4024b8.tmp.RYK
                              Filesize

                              242KB

                              MD5

                              a534127a76b26a8d860e2b3e32ce884b

                              SHA1

                              6b5d3890858d1211b2472a7ff2aa64a0cff34e8f

                              SHA256

                              8da25b77fc376abb73ec377075f94bdce8e10d74e336b56f7003ba9c0eb08957

                              SHA512

                              3e033bfed686f9984e1308c48e41ca3fa29fae466de8897491c251c4be67589a81611e17ffeb7487aed0865f46fedc0db5b1ad6b1171f97d554df21f27ccb698

                            • C:\Users\Admin\AppData\Local\Temp\ASPNETSetup_00000.log.RYK
                              Filesize

                              4KB

                              MD5

                              14284af7da3d229b4f883b565ce46740

                              SHA1

                              dbf63a995137935505c2ad8d5a85a62760a8c42a

                              SHA256

                              f9a4800147ee1ca06557f080c03133afc3bb4c35ebf55a14830507a203ca36a8

                              SHA512

                              f9466d9149509e4536be06536d05f34379a55984228ad19de7328f6870226586edb6324a2a47e732f94a565c8c9afa33437da1d7ed04b36652ec6777ffd47e2f

                            • C:\Users\Admin\AppData\Local\Temp\ASPNETSetup_00001.log.RYK
                              Filesize

                              3KB

                              MD5

                              738e749199d22b1e83d4ea8f939c322f

                              SHA1

                              21f2a80b0bbf6127380e11fef5275cded81a0454

                              SHA256

                              9a03b0969110bb1e3af078a454907e9892b403329628568f3400d18a093e93e5

                              SHA512

                              dfd54a1a550533caad4d2940f7bbb2ee3878ab4e0b458a5e6916792ecd64d806f24dfd41cad38115b3fe024930dd907f0c7849fd1de6954f7b76823568aaa7cd

                            • C:\Users\Admin\AppData\Local\Temp\Admin.bmp.RYK
                              Filesize

                              48KB

                              MD5

                              f38930722ef833560e6747675ff90d5c

                              SHA1

                              0caf86df361873a393e00ec37447039a69525f8e

                              SHA256

                              13306da0f9623b4f2913536ab3eacf76a5264f6a5ed2306dddb8ea0f84976248

                              SHA512

                              13768ea76440268237bb69b533820b22b631593977d6bef104779ea19f7d1eb60b682e170255623d1bede6b6ae9df89219d4d35d8d35bc3b49c86333e1e8d297

                            • C:\Users\Admin\AppData\Local\Temp\JavaDeployReg.log.RYK
                              Filesize

                              5KB

                              MD5

                              9a76ad813ff6c421576a70296c0da947

                              SHA1

                              dffc0676bfab8ad48b65eb13db077b0be6d03342

                              SHA256

                              470baa51a375aab00ca59e007aeca4b1c1f0397258782b749f322e7e61603a7e

                              SHA512

                              042c115276d59aa444f0daa6baab4324487683ae41b933795122bc1d45d9b605a403ca48636bf2799a057faeed96f8d1c33a7dc29bf0e07d2ac559ecba656183

                            • C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20230220_205230057-MSI_netfx_Full_x64.msi.txt.RYK
                              Filesize

                              12.7MB

                              MD5

                              3a117db75db3bc750f0b9e424971eb20

                              SHA1

                              e1640f848faabd1a91b7ba9f27f073519b9d967d

                              SHA256

                              791d1bdffc3a4a8619c4f686bc637de39670ffb0981ec36ba4f5f66b51830290

                              SHA512

                              0f6309ec49c53be0efb3b9fec3e1438f3f019f723a865d1310b5eaf45cca17a37736cf7645356e782912cc07bd5a3ac7989f49413b93d41f8712fd94f1af5ae8

                            • C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20230220_205230057.html.RYK
                              Filesize

                              1.1MB

                              MD5

                              1ecff7026c22135d69a37a1839a1235d

                              SHA1

                              ea33c710d04730838b290cfccd1fa61525d85639

                              SHA256

                              13083625fb2a029edae73f6c8baca4000571f341f63fee054388a3c78e726683

                              SHA512

                              b19470b67488728a86ef613d6c4715d80e3bd7c4ebd1b14b61091454a20dabaff49bf95dbfb1b7d5b87aa39d42d70f352ca88e297325e897ae74d4418929012a

                            • C:\Users\Admin\AppData\Local\Temp\RGI9C5F.tmp-tmp.RYK
                              Filesize

                              9KB

                              MD5

                              5a5dfc06db3e01a331719e17c607a836

                              SHA1

                              4ee997022ef4bf248a44dedb1ee7fdaf160bd257

                              SHA256

                              780a18b0a745cf9e732a6513b19ba77e59eaab17d918e71a7069e2019b83a968

                              SHA512

                              3dc1af08a397a6943e78ef189efdb7aab0ed026c8cf894fd2e7b69b83afbdc8b04ae93717b00049efd328a71bd0a1ef1b48eb7046db769c69aa980518f228f30

                            • C:\Users\Admin\AppData\Local\Temp\RGI9C5F.tmp.RYK
                              Filesize

                              10KB

                              MD5

                              53eae8cdb7ac9180d86d70f904f9dc4e

                              SHA1

                              a613bf47d57e0fed6a90413d1674cafdace1072b

                              SHA256

                              f5dfb0076018ad1531dccee3d57b7a0b38e2df1c5bc7a15834b3bc7ad040ec4c

                              SHA512

                              0360391ee8c7240aa1846cf05d8dac89729e011d7a9d93114695c8204e1d3c9f9bcc8629736fd391f6f6fe600a285e198e87a2833eeec43916227787e7c5d628

                            • C:\Users\Admin\AppData\Local\Temp\RyukReadMe.html
                              Filesize

                              627B

                              MD5

                              5c1543434c0c7e2b00f6709fcf8241fd

                              SHA1

                              5791c19f4c38eaaf573192c6c39f8a6cc2c43ffe

                              SHA256

                              4b59af349b6a429cb5599090fc74cd00dc435ce39f0dfcd3cdbefb116fcace23

                              SHA512

                              034f366ab29e06adebbff1db76093b14fdb174aba916f846472d8b9de3a711afbf208863d20d680f8282a3e31d7c494375e4eb5f14f50b1742ea0275af63dc5b

                            • C:\Users\Admin\AppData\Local\Temp\SetupExe(202302202058256C0).log.RYK
                              Filesize

                              203KB

                              MD5

                              deeec5ff137f5a4c6fab62a81c176a9d

                              SHA1

                              424db00f16bdb8f1dbb82be3ef5a625e0e50e499

                              SHA256

                              a7f0dd6977be208bde55b52dfddd2fd4764f966f7785d50b2696f9557e4c5469

                              SHA512

                              a5a5097293e17e49d171559b26cf1d5e17c81a93a8c2d23255accf8485beeba1afca51c5dd0f0f7d646f956d1aa842ec5895ee1d692e35c1e3a6d6d600919d69

                            • C:\Users\Admin\AppData\Local\Temp\b00cd4a4-ad26-4150-913b-604f5a6d4b1e.tmp.RYK
                              Filesize

                              87KB

                              MD5

                              2a7225a60f352445be56ebad74b9bdf9

                              SHA1

                              b506686d987b2188d430570f1362f93f9c8dc103

                              SHA256

                              b7d489c14cf10c1f42206c06614e238d445a9987b40638aa8c3e323e0497fe24

                              SHA512

                              425b05a8d22b9b593cf8eea21b8ff944020f384fc98547b6d76dc52c070e57dc6ad9c2df187eee817f1bf81be2eec3c56d0489d58140e8662e5408a8dafe88a1

                            • C:\Users\Admin\AppData\Local\Temp\chrome_installer.log.RYK
                              Filesize

                              4KB

                              MD5

                              932bbe8ae9998e47acb053d175fca43e

                              SHA1

                              3028ec032e00055323dd5dd0e8d25ad7a6764a8f

                              SHA256

                              0a236b58a01f3ea449aa83075a80ee097ad7f3a666308b43be8b200667f0c68b

                              SHA512

                              30cdabb7a55c80f1c51775b08d25bd6ba63db69d3531693549378f94d5beb4527b1d8938cfa4bb35216bf991bba57d215ed1a24aa80d226adefe09490fa53c5b

                            • C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.RYK
                              Filesize

                              1KB

                              MD5

                              5d5c3051783b1323e44bebd976a59e92

                              SHA1

                              ec48bfa147926a011fa1b0367211cc1a3c621853

                              SHA256

                              96844d0b3a7bdcc8268b0e0ee912635fed7c1837ce6f9f2dbdd9a559c32eea46

                              SHA512

                              604846c93b1f6f38def4686880429391e20b5095c562c49fb1265cd34fd68fb7ca9661128832dc7f23b2abf7639ba89ff9541092c5b255418b36f0e5450921b3

                            • C:\Users\Admin\AppData\Local\Temp\dd_SetupUtility.txt.RYK
                              Filesize

                              2KB

                              MD5

                              6e7cbd523106f9776a1b03d335ff87b5

                              SHA1

                              457d5e1a529018851bb7df98936d1f7d403432cf

                              SHA256

                              58bfce4c44866ef5a54c4a08d0f9cc170c3cbaf134d309dc9c5845915d78fc35

                              SHA512

                              2b2b576daa1bb946157a7ec7710e54ad6a6f0c4eaa6aeef7d4dc5088747880b539a4287a1f807c8f0676b6efe9fa0024bde70cde901717dc4a4c3aa1e821a266

                            • C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3215.txt.RYK
                              Filesize

                              425KB

                              MD5

                              8d8c0f0c3f5d7e6ce6e3e8f5ce6ac2c8

                              SHA1

                              fd6ce93f6d37acff14595a2a89edb482491eec66

                              SHA256

                              e99f3899090615efca5f83dab64a5ab966c20b9f5236cc01a6ff8a45b879ed06

                              SHA512

                              04ec5e044fdc6e6b352a0bab93edea9b2bd3b3968940391a6990d43bfb6cd501686f3cb26e61127ad6929952bc28e4752cb9bdaa9fbd6c06a55c165e7720dc18

                            • C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI326E.txt.RYK
                              Filesize

                              413KB

                              MD5

                              a4000d8089f23427db0d1925b00c5018

                              SHA1

                              4dd5b512458d8862e57789c7461dd0d8e33c468c

                              SHA256

                              550163d53609624f5d19598e1627f2f9f86ccadd8ab5f1ddc87d2dcf39642aa2

                              SHA512

                              cd2388b0081b2399e279c35bac9454e12a1e1b67122b8b9014ed25eba323dd35fb2120424aeba4be413fb77e569d78744a1532a0221b220c0a851e551bdee6d6

                            • C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3215.txt.RYK
                              Filesize

                              11KB

                              MD5

                              9b669644fb3ea925ebc0b94bedff94f4

                              SHA1

                              a248f0a4187a82b2f72231d5b33839a19a7bd974

                              SHA256

                              b0f6e594c530d104f12f7036669ab5f3b8a47f9586c2953c9a43cdb80e1e97ce

                              SHA512

                              8b6eedcb008ad1e35419ef69e8161d715abe3ae37196c1c22ef66315f4a842634e6ba3003c069ec5c833a8fa2a8bd53085065882ac4c9a4fc062d6b80e515d6e

                            • C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI326E.txt.RYK
                              Filesize

                              11KB

                              MD5

                              327f1dc689aaf0bba428437eb72b42ac

                              SHA1

                              210bf23f5cb7f4ea1080cfbe3b3ba1e2d94f3037

                              SHA256

                              1dea47e3c3224d58a6572c4469cecd6dbc22b19430c397b78a338291e90bc2d4

                              SHA512

                              c25adaeead8c506b9b762bb82b2320687cd7badebb36f2b245c15fc668f9343430c8c397a226239c064e62704ea2e344caf2384d15dce1f82bb1869435fe34b5

                            • C:\Users\Admin\AppData\Local\Temp\dd_wcf_CA_smci_20230220_205244_113.txt.RYK
                              Filesize

                              7KB

                              MD5

                              ec83a9147cc9fee617ad75e03fdc5088

                              SHA1

                              0fae4dfe4fa8261f34b96fae37d9739ed53714a4

                              SHA256

                              33104c8023bcc9533a96bd29f3d470f1f916598aea8d1fab53703b61911c0bef

                              SHA512

                              98e72e45004b6bce0e13471827ea5da7dc66744f0690d9448dd9cfb76bb3f0ca7ab12a5f8acfa1c0124d6f0308496c27ac5f3e0e261d0939d6592ecb4ac8569a

                            • C:\Users\Admin\AppData\Local\Temp\dd_wcf_CA_smci_20230220_205245_376.txt.RYK
                              Filesize

                              2KB

                              MD5

                              e218c2adec9842fb2ca4a4749ed59db9

                              SHA1

                              619e515380e8f2cd503a1e9a8dbbf17ef5852113

                              SHA256

                              bfc00b0a38629f5c7b265db66ebb325f2a19dbbb25eec52e72ce91a1735b480f

                              SHA512

                              7f93b18589983cab4b4639bb16e2481ba507e149b32fb082b72cd60acf4a8121aedaf5ce0223e53a05376432182a05b993b0e02a6be6107295fd289cd5796ac8

                            • C:\Users\Admin\AppData\Local\Temp\gEgLRIv.exe
                              Filesize

                              190KB

                              MD5

                              5661aec52fcc80ccd4c5d263e113c115

                              SHA1

                              b09fb5cfbfbadd6afdd536aa89ccab405ef8c5b2

                              SHA256

                              6cbc05acf871c106f7804069fffef908472a31ea1a782add45a100d14c8f5ea0

                              SHA512

                              15e2a11d1d0b614cc1181a787a3208d011447ce68f6be93df227bc1b1b95400151251cf0bf9013900876b1d8e9c93b05ab0af0f1112b2e50176879a94a19d30a

                            • C:\Users\Admin\AppData\Local\Temp\gEgLRIv.exe
                              Filesize

                              190KB

                              MD5

                              5661aec52fcc80ccd4c5d263e113c115

                              SHA1

                              b09fb5cfbfbadd6afdd536aa89ccab405ef8c5b2

                              SHA256

                              6cbc05acf871c106f7804069fffef908472a31ea1a782add45a100d14c8f5ea0

                              SHA512

                              15e2a11d1d0b614cc1181a787a3208d011447ce68f6be93df227bc1b1b95400151251cf0bf9013900876b1d8e9c93b05ab0af0f1112b2e50176879a94a19d30a

                            • C:\Users\Admin\AppData\Local\Temp\java_install.log.RYK
                              Filesize

                              170KB

                              MD5

                              f9d394b2d755722a87cb58038a662e40

                              SHA1

                              5371a8312b05ae7f5117813584a40f7269b9e8f2

                              SHA256

                              8ebb9ff119f373fca430441a8e67f7fd8e517bc2b9731daab0f271a605dec910

                              SHA512

                              da280f8a0aa20248bb9a7c369f2304cec4a21043cbc57b87d5509a89cee3ae3a76347a466275840dbf12cebaaa67aa228b7fb3016375ab33220b52573cd18379

                            • C:\Users\Admin\AppData\Local\Temp\java_install_reg.log.RYK
                              Filesize

                              4KB

                              MD5

                              5ce1d79091e7313595663cd9f10b03a0

                              SHA1

                              7affdbd19cf23cd23f8171c18634aa246ee0684c

                              SHA256

                              be37226b9baf430b393a440302cdeddf53e4962e4df53180700f3007d8544b99

                              SHA512

                              c28b61264e375e43655efb8b22087dcaf39f0ad0331eacaad8fc65512374c566cc153b911772ff56c6a0360973f170a40006e55b5a6d232380f5d897433143e2

                            • C:\Users\Admin\AppData\Local\Temp\jusched.log.RYK
                              Filesize

                              626B

                              MD5

                              33b56a134861abc33b3a5d59517e7416

                              SHA1

                              4cfdb498c15e9e50a1793906de25f88f8e5d6666

                              SHA256

                              d64c0cf5de65a8981948461ea5a2cd6f790916cdc8888b231e4921c1a5a08e7a

                              SHA512

                              e49e2a88651a40b947da83b9d6e56cfbc31ea6e09944598f0fc70b2bfeccbe53f0a0b0e53ff859bc840b2063ad8da6a84d957c6eb4bc25d3b0dc76f009054bc5

                            • C:\Users\Admin\AppData\Local\Temp\lpksetup-20230220-210439-0.log.RYK
                              Filesize

                              33KB

                              MD5

                              80a492ff825b31a3f24f3dfdc7e21ec8

                              SHA1

                              882fcc153cf8f47c327d6e3a7bcfbfbe21d750ba

                              SHA256

                              2c37741ce239c26c66f5e1adad0b35788dbfd15c66250b4c8ed596f04938c1b6

                              SHA512

                              77bedbef6213849c93e118d678d22bd538246f1f04856c13713ade73afe79c45c154274afe7ba63a303d6b4edecca7057376a141e2337f04b17980d2fde90eb3

                            • C:\Users\Admin\AppData\Local\Temp\lpksetup-20230220-210704-0.log.RYK
                              Filesize

                              34KB

                              MD5

                              2c35fcf8db20919e2fdf84907a389bf1

                              SHA1

                              bfacac980dbcfd39b455934ce895547f5a81ab1a

                              SHA256

                              3dd500e053288e62907624a229af7e6e8f43f192ae57e64201fa0d9736051431

                              SHA512

                              54c7ba43b718f9d92b6d6f0a381248e316e2694367592bb6cca5b1e4fd3c75c09d3a29f9c0469dd5d8d48505585263c34c63a59cb6687dfed8947da0b19c90f5

                            • C:\Users\Admin\AppData\Local\Temp\lpksetup-20230220-210936-0.log.RYK
                              Filesize

                              45KB

                              MD5

                              9a4f126714221054b21164bc1d372346

                              SHA1

                              2f34956d073f397085dd02bb775cf231c7f3376c

                              SHA256

                              82041ad7ee8102413e2dfeee12d2e670e16abe95a0c1818710bf72f13d342c34

                              SHA512

                              0128074fa0b1d69cd21d7b46d2938eb8b92380dbd5fb4bc3520921efa16c0dee2e67fefb0bfd89db40ea6b19cf07e4a48f938ea67284a70ac4c6fc9446e585ae

                            • C:\Users\Admin\AppData\Local\Temp\lpksetup-20230220-211236-0.log.RYK
                              Filesize

                              35KB

                              MD5

                              e317c776becb5bb96258401cd1afde07

                              SHA1

                              53a82d3393c1c0fd3be16c2cadc049d48edd8aeb

                              SHA256

                              edf86bcd6452f90e1803e65ee1e3905f2fbd275992f591a58ce40bf9089eaf8c

                              SHA512

                              653c2524fa4841622a2e9c6438fececde6523dd7ee0b348428ff6806ef1f389d15258918e622be47d3cc8854dfd3e987ed33e31fa1047eaffcf93455feffd8ed

                            • C:\Users\Admin\AppData\Local\Temp\lpksetup-20230220-211518-0.log.RYK
                              Filesize

                              36KB

                              MD5

                              d8585b0147949de3169bf340c3d12e67

                              SHA1

                              f6e8cbcbea8b015e89342cb0dcedc8d62a29d4ca

                              SHA256

                              bda7040e6ed0bf52c417e273d7137a6e94b31ef341121d0570fdf297c57eb7b0

                              SHA512

                              401813f6a4c35acd5a9c669d5740426e05535a7594666ad0e7e5c101bd6caf409538170c37c753881d8332e08197e08c24a2d23bec66d41b16b3c1320e7f6919

                            • C:\Users\Admin\AppData\Local\Temp\wmsetup.log.RYK
                              Filesize

                              1KB

                              MD5

                              564701b484f2c2e932d10f62fd980a33

                              SHA1

                              5ad221d3d73411240024a023b2158203c23189d5

                              SHA256

                              1e8c77d8a556768574e4ee43572bf6be6fbe127d5ccfe6c90f71bec58f5293aa

                              SHA512

                              2f008985a3c75565f27e7733f3db15905571fe8ca51e1447575c3b0e70a1d14c2b386f458bcd183b004e0a9f015c5a70229003472bc91127ffda3129c8d885ff

                            • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst.RYK
                              Filesize

                              1KB

                              MD5

                              7dea4aecee5670f61d483eb8d46ea38d

                              SHA1

                              53f72bfcc24472951bdd296ac0dde87ac0bece6c

                              SHA256

                              ead61567d231cb78dd63df2dce761a51d582a54ee4108526dcf8e54999c9809f

                              SHA512

                              dc98e4b0908bdc169e1570ba392116ef86844c62a3b59b660d1769663da0581b65233c644d81a63296b2e35c22750e323d44afd174c871a5b789f8c5deb4713d

                            • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\AdobeSysFnt09.lst.RYK
                              Filesize

                              80KB

                              MD5

                              7c172128db78362650e48016bff12937

                              SHA1

                              74258e1309ce727dd9df116cd425ca5adb0a37e3

                              SHA256

                              1dd3b3a4575f45b815352605d619ea258754c6fba0b89ebf38d20e3b959dcfc7

                              SHA512

                              0a38d2f5fcb997339981333de81d4a38bebbcac87f11ab8c90a0dec4c5eeab3a1c144c69604fed0e6116e588cfad18b4c0452c6a54e8ac334ec6ae0af990eb08

                            • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents.RYK
                              Filesize

                              3KB

                              MD5

                              f3a748789d42b5a91c0cd741a18480d5

                              SHA1

                              1fe9c965fb359b1731cdf2643fccf03f7128c30a

                              SHA256

                              499b8159645ff5fd3503388dbe6fbc5934d34546bb349c3e9ab6e65808b1900a

                              SHA512

                              872095eaec8dc2274b27481f413a0a302b3db8c5812dcb9ed3fd9c8ff1b9c2cfc93bb9fe32158a27ff486ade66c9e5d918812939143ca0df2ad23f9b1a59bb1a

                            • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\UserCache.bin.RYK
                              Filesize

                              41KB

                              MD5

                              91bbd6e9a37261461a296f1a71296d7f

                              SHA1

                              c48cd1e0d65d5e8dd77e0a06468c2abc44928c39

                              SHA256

                              8a655221b3edf5c3e93659dcb13add9a103064169f598958839855d9797a82bb

                              SHA512

                              9f647ef3020c30a5d04eb3b57fa6bc02eb6013701fd32cee7940ad3d1b6fdda13b96121ae9405341f88be9ba56e686d1c73e715ff5ceea75fc5bd2950f718021

                            • C:\Users\Admin\AppData\Roaming\BackupPush.xlsb.RYK
                              Filesize

                              160KB

                              MD5

                              482ebc08ed8ae2eb1a2d1319ffea396c

                              SHA1

                              7aa535f8f3252c421e36711a5760f79a2e013cea

                              SHA256

                              8e56d5c9d9734765bb56114e7d90fe694d78a513ad574d7909e75446518f2612

                              SHA512

                              62d5307cd4f2c8fea963fd43b4b6489516467746d25346538b4d9aa312abcb3af3b5ab66931e487b0e4cad0d1ad2fdb2aa1bd7904dfb2cd682940ee91165fd82

                            • C:\Users\Admin\AppData\Roaming\CompareFind.xlsb.RYK
                              Filesize

                              166KB

                              MD5

                              036684a116680cee9d4f0c4239896cf2

                              SHA1

                              207d6843817a10ed9dd4ce346c23ac607fe52c5c

                              SHA256

                              46caf36ca82866ad9613e407bfa687d4887b45ce4e38f90d10b17e936de0c4e5

                              SHA512

                              76732ec775c010929a35480dda81bb8b5de014f74a6687d16693e17389000609f1bdaf4cf7951c524e08a62c56c725a02601bc8c05de5bbd5500499fc5e013ee

                            • C:\Users\Admin\AppData\Roaming\ConvertFromInstall.dxf.RYK
                              Filesize

                              133KB

                              MD5

                              6b9481b328284616cae2432495bb9546

                              SHA1

                              0490bcf893dc2cba564f3073e39e11b554ff63cc

                              SHA256

                              aefc7bc629ec05c62696c8ea47bef9a8a9233746bbefd4781fb320fa0db0bfdc

                              SHA512

                              89849692549fe153d4f703cf52af82a0a093dad4eda4cb0f3c1689c150bfabfcc2f3e0addd3c3166560afc880833f67d170b5570ce545ecb95ea8ca5fbc5c783

                            • C:\Users\Admin\AppData\Roaming\ConvertRestore.txt.RYK
                              Filesize

                              177KB

                              MD5

                              cd0187c9ecc1ed3d4c2a0d03aa8dcac3

                              SHA1

                              d98451dd0d85204844ebacbdddeb3f2329b507ac

                              SHA256

                              3d3f1edbcb00dfd4bc51e9141f995f4ac983f59b12071766f23df58904ae4dae

                              SHA512

                              bf1c4df372dc6499087b8c90e95cbdf04c803d61a25ab942e5ae517700448c18255f181eb4bf7824ae946c66da46d636eaefafde9de1e60e53f971aeecdb5972

                            • C:\Users\Admin\AppData\Roaming\CopyExit.au.RYK
                              Filesize

                              216KB

                              MD5

                              6fd236dda698e8d92cda00a6ac37b5e5

                              SHA1

                              5a0b253b04e40c25cdfdbc55ca8bb4c794ecc9f2

                              SHA256

                              d883e0d6eaf2d86cf92f673819fb49edf4f737eb33da4cd4286e71f8cf375ed7

                              SHA512

                              538cd23df73c2533fbb5165cf91920d61615be34a9b2552cde2e006db27723eda1c8837f417699e8cf2e1e39503939d78732f0059828493bccc0a98d2e5aa06d

                            • C:\Users\Admin\AppData\Roaming\DebugStart.txt.RYK
                              Filesize

                              105KB

                              MD5

                              33fc88d84465e99f018a523fdd447d3b

                              SHA1

                              2745f154cdb0806de1668ebd2c5a387025dff384

                              SHA256

                              7808cf9d68d9ae77ae8875c400d87cbfc094de59c5db36115f9e8ce4ca1252b4

                              SHA512

                              666c8e9fdde2a7f48b7b83d69d81f6898e1c6c588da858700588a65a1f10ff9603bb4952bd5046e114cf7770271d4eec7927df919e3bdd2f853d188ec0b54ac9

                            • C:\Users\Admin\AppData\Roaming\DisableSkip.ps1xml.RYK
                              Filesize

                              171KB

                              MD5

                              7262192b41f12d0159bf4eba06d0a0f4

                              SHA1

                              8683f4e404f81c82f5f38b841fba46b72e85f918

                              SHA256

                              cf6a366925cf2263477389602c5b91f886cf5b42b12426555528127105bcda53

                              SHA512

                              e8b688a8a29b0d464ed03b6673475ace96a2d230c148b35b90ba3c28bc8dd7191eb2e73224a5c84198512ee2203e180a5db7f8a583fc5293c1ae9ba997d58757

                            • C:\Users\Admin\AppData\Roaming\DisableUninstall.midi.RYK
                              Filesize

                              110KB

                              MD5

                              137be3c38d37848a5381b7667cb457ba

                              SHA1

                              7facaf7044bb662a92ce2fd6a93c98f9015bba59

                              SHA256

                              df4eee36b004d8d7df1913fd8578752d1b4ccbc96ae8fa6b549c415023b44725

                              SHA512

                              8f9a463126aa8abfd551f994ba64df73c5fea4272f06a815e990750d5cfa146568ecd51e0c264ca8635c1b52230a7adc05e1c172d196bcbd475052a7af670798

                            • C:\Users\Admin\AppData\Roaming\EnterTest.bmp.RYK
                              Filesize

                              121KB

                              MD5

                              fc135103af099445dbf250e1d3553b87

                              SHA1

                              f0408ebed44a611f05e1f142a2fd2d227121aca7

                              SHA256

                              42d6f5613b8b442e2e8b285c7828c84f2610584bf433e8f8c6252b838894bee6

                              SHA512

                              60a5fa39a27c5615b0621eab4f3d37c7743458ed95557cb9aa606136f750f727f760a7003b265dd0df70c91f6f1ac85c89c8531e2cc353cb3a101e52d0d36ff8

                            • C:\Users\Admin\AppData\Roaming\FindLimit.wpl.RYK
                              Filesize

                              193KB

                              MD5

                              783d459f6132c2c65b93d2994defef22

                              SHA1

                              7bc255ea2e55866665fa7b1c04823a831b27f243

                              SHA256

                              82ea11487d7ee812fe112000b5c8b8e2092d678cdfaf76a0be20ddf22301632d

                              SHA512

                              efac286b262266b77d270959b60f8f07b03f22fdf811162e78b0ad63d7bfcd821578b31ff45b6481b0293285fef7f67cbef6e1409254c59fbf62982bd0bffb65

                            • C:\Users\Admin\AppData\Roaming\GetExpand.php.RYK
                              Filesize

                              232KB

                              MD5

                              96cdec7b5af78cbd457de4b841673285

                              SHA1

                              e11b6b34634a10f0b94b47df0f82f94ed420fc6a

                              SHA256

                              ef0c0df65ff436f46542934fa26d5ddd5a85b7264c98cf3795f5d01897159499

                              SHA512

                              3ff227cfc96a8a9c1830e13ec4e41a931c2324d562328791eb18d2b0d5053f3177a58632a06d5c1fa3168690a9dba29ed793429abafbbdb08b81ac3943f4d052

                            • C:\Users\Admin\AppData\Roaming\HidePop.zip.RYK
                              Filesize

                              116KB

                              MD5

                              5cea3d64d009cad3b9a8d7ea6184f034

                              SHA1

                              3adc59b81a34514d5cf011e466e7e6ec23329e4d

                              SHA256

                              20adb62c1025e76a88e89d8f5fed160841ec6436f707d34af5dd8386d4db0069

                              SHA512

                              d2548882916f78bfb4cecf5bf2de4d980fdfdc6d1f54629fa34404ee81c10e1a37266e55af4b9940d9b598020dfd7570a60b14a3e8b0e8a6477a82ca20cb5fe1

                            • C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2961826002-3968192592-354541192-1000\0f5007522459c86e95ffcc62f32308f1_d22ff74c-717c-4b4c-858a-21b1fcc6aad4.RYK
                              Filesize

                              322B

                              MD5

                              8d10c9d89b6ef286e6472c3233a55f0b

                              SHA1

                              1fa3ffd1ffdb1aef01213038e9e123fae3301dc6

                              SHA256

                              0dcd3da77dc5524c1a514d94ec5ab6b68a0f954be695bb470e1f25b8590ade00

                              SHA512

                              96fd7724a7ea65f3a4f0b853bbcea61fcde2a41d4119c05180af4d72851c7296f130973f76fdd28db096ef8f4f6592c7c06697758aaf8adae129378993493905

                            • C:\Users\Admin\AppData\Roaming\Microsoft\Protect\S-1-5-21-2961826002-3968192592-354541192-1000\07fd4307-7619-4733-97e6-012501984d1f.RYK
                              Filesize

                              754B

                              MD5

                              3abd21567c828e95e7221c2d412b73ba

                              SHA1

                              c09c0ffecf269da97d9c55868115e717357d2f09

                              SHA256

                              357996b195290c07453449012fab6946346dbe529798b2d70905bbb064fe427c

                              SHA512

                              8e45fdff55617f35bd2c5355115bb41b3e871484c57b1cc717999e4d921bc27e082044e0ba7940c7a298b9241c621b2aff22357b5b486a0a82e825d5e341e23a

                            • C:\Users\Admin\AppData\Roaming\MountInstall.css.RYK
                              Filesize

                              199KB

                              MD5

                              c986cc4d0a4be79ffa3bddb08c090f3c

                              SHA1

                              161e1b1f52766477182436675eb0456a27c30a95

                              SHA256

                              fe048557bf231cf94627ad7066434ee6433dc21a0a7d7d9f3a70a3de71058f65

                              SHA512

                              1372345bd4fde347b177e53da9bda680dc8c810558f86696ff2521a56d310bea898a616a507bedacac10a245540ad6c1ed2704f66cbbaeee382c8d002aac16e4

                            • C:\Users\Admin\AppData\Roaming\MoveUnlock.xht.RYK
                              Filesize

                              276KB

                              MD5

                              b0854680efeb257d85fd743b8ea13c56

                              SHA1

                              7dfb8931df73bbad731b7cbe843cdb31a44d8343

                              SHA256

                              dc6b1e8c4a0879ac6c476464654af670be17e791f537aad17597ce00228a11a0

                              SHA512

                              0ebec8d727eb56d6d982eaa04b883d93812003d6d82e4ec38da66da0e04ac575f4adf4079b983d8e5d9e369b8a2eae5b344d99148c7064d06b3f1533567670e4

                            • C:\Users\Admin\AppData\Roaming\PopCopy.reg.RYK
                              Filesize

                              144KB

                              MD5

                              a294f4ddfec2b8ce93f1f3ab838c5544

                              SHA1

                              580c544f298d6d4b6694387e5245947a046be802

                              SHA256

                              583e2156df4d012c16a30494b9869f6a9e423c21eba9d938c6feabde0c862e71

                              SHA512

                              f15c2879d8a5a70e34715f7983a50c7374e99b0a03d3ad372b16b2efcc69183a0372471fa1a83416b4088de2a42a2491d4a12e489d6da6e025863305da5d45e2

                            • C:\Users\Admin\AppData\Roaming\PushStep.wdp.RYK
                              Filesize

                              249KB

                              MD5

                              d92989d601bb742b6eab225a0992c4d3

                              SHA1

                              68b665b3a352c9c474a7f44f6f7c431bdf049e82

                              SHA256

                              5d1cd0802a84c44a466250f3c61287c49728f47eece2a94112fd9cfb66c1bcbc

                              SHA512

                              a523e1838da53e99473781fac48be5941af817a49720ad8a915131c93a51abf22c55ddca5f07ea26d4890644a7e5dd1f6fbff4f8fae51c9856d1c4b3f0b896d6

                            • C:\Users\Admin\AppData\Roaming\ReceiveStart.mpeg3.RYK
                              Filesize

                              392KB

                              MD5

                              b82ad96b866ea191ccdeb58d65d9b564

                              SHA1

                              2a04cb47638a3bbd70d5c73945a8061443547051

                              SHA256

                              34458e282bc7a4f640dd66cc5d1eafec24e6f84f15caeee53b469f4469825da1

                              SHA512

                              dbd374fa9d0be4bf040a7165c5d8af3d43050f75d8f745e3f832bc7caec9d3846d545e9831a6e9ba69a31b726cd9cd5fd29fa0efac67627d2aa2ec630b25afbd

                            • C:\Users\Admin\AppData\Roaming\RequestRemove.jpe.RYK
                              Filesize

                              265KB

                              MD5

                              31c5e93452a8547ad05d15a7efbb3a29

                              SHA1

                              8a45c2b92d716a251eec02ce365e4e44098f1402

                              SHA256

                              359e747452fa676e5f3a041e0e141e51cf3ac7839025e40177c47d611bed2f40

                              SHA512

                              5e6bd1f85ab0bd2b1214632690ea17894f30eea82ea461114ed79769d3a6e8cf68c89d228d8a28b2e5cd68912c429bf73ccc49f3f7c9dd559a5120a61e7427f6

                            • C:\Users\Admin\AppData\Roaming\ResetCheckpoint.docm.RYK
                              Filesize

                              254KB

                              MD5

                              46e2914e912e9e7bdd9b6abfad6c7025

                              SHA1

                              5f2dd5fa7e11bbc1bc10cbc5c11158817b0cecad

                              SHA256

                              01b7ba3e23527f988609101cc346e6a8af2be65fa346e65369cb8da1bf5ae8ec

                              SHA512

                              9ed9539beff78954fdd3364feb2e2c4286ec1d1133714ab2f835a802d5102e0186b930b20ba20daee825ab00f726525ded5016cef7b1272eb9d79adca0237048

                            • C:\Users\Admin\AppData\Roaming\ResolveUse.xla.RYK
                              Filesize

                              182KB

                              MD5

                              affd3a649b2e81f96b352f56e050d37e

                              SHA1

                              397e5cb039e53af5e48e22d0e3e8d2642e5efcb1

                              SHA256

                              f722316526d894ed05de9eddf261cd46d89ed05648ae940cea63b20eb869617d

                              SHA512

                              73fc0b55894a8ad71ae8cf89dd0c6b78bc6b207a76e8ba9c2bbd21cf3e9260bdc306cc3f51b3c8baeb56c1242a6794d2f2e64d17b6dd1633b4587064a18e676b

                            • C:\Users\Admin\AppData\Roaming\SelectRename.emf.RYK
                              Filesize

                              138KB

                              MD5

                              08914cf74ad8073a2449303cd6082577

                              SHA1

                              b95bda3a75e3935dedf8a62c532752809dd4fcd4

                              SHA256

                              c8bd80157dfcdb328264661b1c61d76ab224f56407e124bf95cd635cbe31ccf0

                              SHA512

                              2030fa655dc453c388874ecc475ca96c1e6ab7287a11ee84f4bb9f727aa1e1f3f9617417da8690cac095a84b891e3e08294ec1923e6d7a29609cb3d7d6637e02

                            • C:\Users\Admin\AppData\Roaming\SkipSelect.wmv.RYK
                              Filesize

                              282KB

                              MD5

                              065dfcd99bb6df4e3c32ea923cb45189

                              SHA1

                              078e96f4a97e5d16ad96e957acd53c0d761c56a8

                              SHA256

                              b4cec3fd81caceed708af72e23b6a42769ba4c09c05dd252188659a038bc8983

                              SHA512

                              342c456c290431ba18b8dca2249820ba6a533f1bbaacc1d846b0234a9251734161759ca20c2c0a265ab1ff90ae8e603765c4fab2227d942a953be1412f03c8ab

                            • C:\Users\Admin\AppData\Roaming\SplitUpdate.jpe.RYK
                              Filesize

                              155KB

                              MD5

                              fcd3d0911d18aced95bb6150b815ee95

                              SHA1

                              0689b5d016152d9f299b5453cd07def81f0730ea

                              SHA256

                              6ff20d37424b4f877836a755001bb87a6fd5ee8cda04b8b220a6e682b9b8898c

                              SHA512

                              c37f1cd11fc292de69bf88be7687737a410d79b28630c5c9d14796a16d127bc87368f79cf9a7cbfad77daaa067923ac13b5c6d0958c149d041c8b4e1d4c40355

                            • C:\Users\Admin\AppData\Roaming\SuspendAdd.tif.RYK
                              Filesize

                              210KB

                              MD5

                              50bd16fa304bc27400e89f82fd44d0d1

                              SHA1

                              ead6e27ec0150be7db59afa8cc31f03797c961fb

                              SHA256

                              bbd6e0312d5c7ac0743f4cc4a307b098f7f762ddb48ccd26a02dbe0abdf1ce68

                              SHA512

                              e63521971c4ccefed4214c8369be21b0c84e4b4cc95ed6ae4a9ec0b4cdb2cf0f9159999be87f38703cfbcf60122bd2538c0d7065ebeeaa8271db5a3fa71b937d

                            • C:\Users\Admin\AppData\Roaming\SuspendResolve.wmv.RYK
                              Filesize

                              243KB

                              MD5

                              a74b40f1df917b1d8c7e6b04e29fa73a

                              SHA1

                              0a303fe38960be107c35c8c9667613df4c570e2e

                              SHA256

                              79c166cb0b75b262d6fff51fc03d7de8bd0f19835855a8d08ce0a46f9320205b

                              SHA512

                              beef5b92d80488d00dc4c52a1bb5d7a405e8041b5b627e958b1b845377617f4c100bc8c62fca6b3fe93c85e3b52830d714dcfe69138058f3f6e49cd7391d68b2

                            • C:\Users\Admin\AppData\Roaming\SuspendUnpublish.wmx.RYK
                              Filesize

                              287KB

                              MD5

                              446f4d2140eda6f188c3a0248af5788b

                              SHA1

                              6671579f0391e43f6684ae87d5be8e5cc9b614d5

                              SHA256

                              e64f2683f9350ba1768d17633857f0ede6eee7c5803c1500a4fbd294312a2b77

                              SHA512

                              a6e65dbb1467c89dd28bfb0ce67fd3a20e31f74e71e77172879bd4ffb4bbb2142fd423fa83aea0b0e783ab793ebcd91241403869525d45f22fb3ecdb179d05f4

                            • C:\Users\Admin\AppData\Roaming\SwitchConfirm.gif.RYK
                              Filesize

                              204KB

                              MD5

                              239d81f36268af6b7b2429c821d3ad04

                              SHA1

                              b6908fa94134c82558afeec15829df81a8d9c7b6

                              SHA256

                              43853b74b01ada544e54a114b3ade72ae5e24cf94a58a300caece7da0a8e27d8

                              SHA512

                              2c314fdf99f79c642da0d530bc8e0b874f3a37ac0dafb2daae053a2a9f7771cdda774ceaf49e54a20638c4b7ad1143aacab39c15b519c1fc1d27f8221e2e9ea6

                            • C:\Users\Admin\AppData\Roaming\UnpublishRestart.7z.RYK
                              Filesize

                              271KB

                              MD5

                              24b14aa96427aa272edc820220992b47

                              SHA1

                              f9865ffd826a0b150c8a9d38d1718ea4ca675634

                              SHA256

                              b833bbb5cdb1df1205a99d0e00793b755d0a4a422dfe7b04033d6d4d344f20a5

                              SHA512

                              eed48075835c28bcb913685d3889959f2cf884e97eba7daba9228191cbeb3edd8a64e7c55df65601793b5ad502c15dce1e421d829814286fa1791265d67db745

                            • C:\Users\Admin\AppData\Roaming\UnregisterShow.cab.RYK
                              Filesize

                              149KB

                              MD5

                              8eea3ca6f50487ff1eb2829963a46185

                              SHA1

                              17c6f533eb1c41c92f12ae339129ff4333ce156e

                              SHA256

                              9fd874b14137010e76b258252ffc6676c12ef8eb2fb99d50b5013c818009e4f2

                              SHA512

                              17eb062d3aaebd4accb0dafbc7d57d53ef0b5bc09754c358305c51b3ff5076198326c1ba9587d32cf06c53d05720895b537cbff8bb2848e47514d3f58a7f3ae9

                            • C:\Users\Admin\AppData\Roaming\UpdateMerge.dotx.RYK
                              Filesize

                              238KB

                              MD5

                              4014f693855a54af177ead2d023a6789

                              SHA1

                              65b148db865387d00c49f633f8ecc08d4ed7d39a

                              SHA256

                              653b39f939fe60ede2826e0e9dc4cf66bd12eee142f625436ecafef20ed9d05d

                              SHA512

                              355806a5892cf005190155cbf00669b97baf8208b53371567fed2b0dea4942f4ad0fa1a679d75a00fa296b68faa1b9d2c5db92e53a636c78fd14be1ff4e78471

                            • C:\Users\Admin\AppData\Roaming\UsePublish.odt.RYK
                              Filesize

                              99KB

                              MD5

                              5d24bb3c9930a2e8654a6470b64bc6d8

                              SHA1

                              905adaa5d2f43beee6e56acd806f71cef499ebe9

                              SHA256

                              6814baa8869ee43e218a09723e3aa19679a8cb02b0593b45ad1097a23b823b9c

                              SHA512

                              2912a80f00f28866697b504cca50c825b5c00419cee447f170fd4774782b3aa3d56bb20b04dee12919975f3f0c444bca1443edd464faa29b010b9c9ce4928237

                            • C:\Users\Admin\AppData\Roaming\WatchWrite.mht.RYK
                              Filesize

                              221KB

                              MD5

                              12cadfdc18c93ffe3d6ad32c75815ccc

                              SHA1

                              0f474771d4084b8aa0b88fa51f2057a5a58d4d61

                              SHA256

                              322519173df4dae01a8a91673a9080af17b086c636d60bc2f3d71ee1582610b6

                              SHA512

                              17f40c107826d5ea2e8b9bf7642e23a8cfd94af245943827f2f070c43c48be76116d5f949d0cdeb50c55cfaeeeaf7f6c88d6e1b3e190cbf312bf4f3c575813aa

                            • C:\Users\Admin\AppData\Roaming\WriteMeasure.tif.RYK
                              Filesize

                              188KB

                              MD5

                              2ef6c40866c99fcfe97f15c0b8748aa6

                              SHA1

                              df68ec3841ad5d5455262d407ff2e3e7ffbb7d68

                              SHA256

                              78d5c67b68e2cab4d77b602a4b9afc7a50312d7651ae5b08f90c2197f1322bf9

                              SHA512

                              11dae6828e0d256d62bb0e4be60e7d67aaf867d2f0e7bf1f2be662526c384954379b3e5c468b51f387e0b9f7d7c7ede5dab1b9916f58a5168aca5d65318c6a1c

                            • C:\Users\Admin\AppData\Roaming\WriteRestart.vssm.RYK
                              Filesize

                              127KB

                              MD5

                              55a630038fad8c45385538b80ab5ab20

                              SHA1

                              89ee20f985304c0215e660df79193928d04d5778

                              SHA256

                              9115bc766d4db698f5f20ce732f0e07124c01f6c47449045fedf052c1ae38200

                              SHA512

                              407d6c94fd1962034fa660344574b6edd6983b643dc9a68c2de4b3baf09e061c0131304622899c3a1d15b2ac59b9a1f02cbc7afe3c898bdd039c7662ea756f01

                            • C:\Users\Admin\AppData\RyukReadMe.html
                              Filesize

                              627B

                              MD5

                              5c1543434c0c7e2b00f6709fcf8241fd

                              SHA1

                              5791c19f4c38eaaf573192c6c39f8a6cc2c43ffe

                              SHA256

                              4b59af349b6a429cb5599090fc74cd00dc435ce39f0dfcd3cdbefb116fcace23

                              SHA512

                              034f366ab29e06adebbff1db76093b14fdb174aba916f846472d8b9de3a711afbf208863d20d680f8282a3e31d7c494375e4eb5f14f50b1742ea0275af63dc5b

                            • C:\Users\Admin\Documents\Are.docx.RYK
                              Filesize

                              11KB

                              MD5

                              e03b2fc946708d7e9a7abb67f980f229

                              SHA1

                              b510760d12fd0a6ea0662467c21632253c45a491

                              SHA256

                              e94460f71f975bc3e7a4b9431896c6f107b924cf185c550114160559eb0299b5

                              SHA512

                              5eb0f18c021f6c8cfd9ca9eb8665345f317e5007b5081abba625edabe88d884951ff36a2b4718d3e92392393816a9a02f648293eaab5b60526ac7be577019f3f

                            • C:\Users\Admin\Documents\BackupResolve.mpp.RYK
                              Filesize

                              1.2MB

                              MD5

                              c28e716022b6b86775769ba2956418f1

                              SHA1

                              f8588d1e12db27e45c749a996da99bbfb7e3ad6f

                              SHA256

                              b9f23fc660f67e463310200943c319e048de40cd7bfb7ec2dea1fb4e1b04ba25

                              SHA512

                              7719f149813a65d29ed3c426d78f7132e8280aaa8a86650b091200a7e258f667f0ae9f943439da1f627ae13778cf86b86d956fb09678fe0584fe581ad312cab5

                            • C:\Users\Admin\Documents\CompareUnregister.mpp.RYK
                              Filesize

                              727KB

                              MD5

                              7678a0000b838719fd9327d08e9d0b76

                              SHA1

                              5095cef37055173de3c27984a1e33f4193589e33

                              SHA256

                              e9387aafe94cc731587b6321791f8c1aa54162d60e28b49c99ecaeba42ab0f71

                              SHA512

                              19c01a6fae6aacd2b69ec9f1c2dbdb52abfbec43f1276462acd080246453c8300d3d6792c274b280957f4e1f585e4037ec6bee7fc59ad2b1e572a6fa0002c3d0

                            • C:\Users\Admin\Documents\CompressDeny.doc.RYK
                              Filesize

                              1.1MB

                              MD5

                              0cb78ed8171f21f1ca7c970a38254b42

                              SHA1

                              9b494e55fc7734126374ac183bbd2de5c750df5d

                              SHA256

                              921dbf2c34b40cd55261f6fc3a6c95f51007f2f054b02df091438da7c9cf9446

                              SHA512

                              8ddd3e85394d8e168160f4fd36224f00eca0af6709cb180f81b39336b57789caa426ae3dfc6cd063b12013614a9a76d5fc1283a0d6d966044e2250e8460313eb

                            • C:\Users\Admin\Documents\ConnectSplit.vsx.RYK
                              Filesize

                              688KB

                              MD5

                              a165c4b4d16194e08834cfa794febb83

                              SHA1

                              271fb1837a91f2fc49c2d9b867d64fb0eefddd01

                              SHA256

                              df9198a0b74629ce7395a7520023619f53f89cf640cc11e44dff84399a376847

                              SHA512

                              f245ff5999659dbf5d09f3a740bdfe837ad6927846d7153f5c8f131abfbae4bc2f2f137a49b4f61ba0aa28e39405a4c983264e1d1df93749d1f9cb0ca78c03cd

                            • C:\Users\Admin\Documents\DisconnectUndo.pot.RYK
                              Filesize

                              1.1MB

                              MD5

                              36dc16264bbbb11865d399a7df0ca2f6

                              SHA1

                              830abc8fe4a618283d7533221298a5c1ccdf2d7f

                              SHA256

                              a734a86f6fea9ff8e2168a608bd266a57902e88a64aea9f994aaa0941723bfb4

                              SHA512

                              59ccc60dafe1ea39b307fe9eaa67c900221215a7f2892943ac66844f37be66946b4b2bd0d1518d740da688d6b2e8e8f41639076c0548d496f6cc7f8b9a5df957

                            • C:\Users\Admin\Documents\EnterDismount.docm.RYK
                              Filesize

                              885KB

                              MD5

                              dfb3df91245e1211666f0754c32e7181

                              SHA1

                              6cbb5403a7c8e55366994eada085f838209fcee5

                              SHA256

                              2693ced5b763505cea851a868dc02667ad3ff553e6dbb553c21f5792f8e1e356

                              SHA512

                              0be2064d91668241d3b931f4a7b163b812a1df0b6688af7d6f3e5b5a6db6f78cd33e068d2e6c96d318a354c89bd07e7ad73ded8ff60e6a5cd3cc7a8de361c777

                            • C:\Users\Admin\Documents\EnterReceive.mhtml.RYK
                              Filesize

                              531KB

                              MD5

                              ad29d3dc72e4ed2297408324b663ee15

                              SHA1

                              9bf0446449ecad26f36331bee2086e7be03120fd

                              SHA256

                              aad7237bdf660fa346b4a517e7f2015ba2853b7d962bedbfc846e4f0ac6749d1

                              SHA512

                              fba09b8cac0269baf74059fb79a6bf11faf8e48b9cb71e12497cefa27ca3bb40033efac45ee65d9fc0d4a792f5c115aaea3b47771a68cf0518518908ae60abf7

                            • C:\Users\Admin\Documents\Files.docx.RYK
                              Filesize

                              11KB

                              MD5

                              d3122cd617457b8bf1adfd6a2588e736

                              SHA1

                              3c9a0dc65449bee030bae60f34534110bdaf571a

                              SHA256

                              4eb646460d99133f1520ff3203563b54b7c3bbc1d66d92e33aa133a09cfacb5c

                              SHA512

                              e0c0e9702b89a739846985edad79e940a9f3610cf9b57b332be9a9955734a1dc0fe25f55ad640a2b90cff8091202b2f6378b5ab239f6ea33e4b93a6f50d25954

                            • C:\Users\Admin\Documents\GrantSwitch.ods.RYK
                              Filesize

                              1.2MB

                              MD5

                              50e9077a764b6ac0621578a7df021134

                              SHA1

                              9fe8284e18081e747825f1777afd5d0866539a29

                              SHA256

                              a57acad1f50b12241568c3fdbd25da155de3939f400d483ba097976eb9e90755

                              SHA512

                              7067f9bdb464c07c9511c55642836ead26826a4f6ad1f2bf39263167112f9a02cf2adc1d4377e538857f5518f55fdf555c09c96816b84827dd9b68aa49d69698

                            • C:\Users\Admin\Documents\HideFormat.vst.RYK
                              Filesize

                              570KB

                              MD5

                              e24c3ca5773453df0ceda1230d9fc4fd

                              SHA1

                              dbffc2f31c56df13eb48e843f0117f5e5d4e10d6

                              SHA256

                              7510b394d503b781641efe32069ada2a72d67d4b280d0634429a82b9561830e1

                              SHA512

                              b955601b94ccfa75e618f57f17a767ce81b0abd94801c6116e81d8b39a60fe4680a7110c78c07afc454229b9966e07b4dbd592c9cc188261f33b72e9c8079765

                            • C:\Users\Admin\Documents\HideRemove.pps.RYK
                              Filesize

                              1.2MB

                              MD5

                              b44a2700a5f672e188c7a4c8c3a806a5

                              SHA1

                              b194ab6662721ece1f114a730df3c92aad2b45bd

                              SHA256

                              36a0cdf1d043af5c72636d8575c0e101cdcdc66a7ed7b028db31db6ca0f8756a

                              SHA512

                              a90d78b7ac407d2a8aab6da73114a5aac1e7de3c9cfb04d56ece0938cdd0dffa0dd07cc925e93b65cc72023db431609f0512da670b0e00c827100a11a885b2a1

                            • C:\Users\Admin\Documents\Opened.docx.RYK
                              Filesize

                              11KB

                              MD5

                              90e19a7bf612b501b5cb8e6474550b5f

                              SHA1

                              687502524e44468b38d317038a477f7337db87fd

                              SHA256

                              4ed6c698cd44976604a0219413cad5e7f769cb2225d75f000924ea0d79cc3b32

                              SHA512

                              b34ba50d5be9b6d512930845f65eca036731936d00effbe083bddbf187593c8a0df6afc121186e46ddd1f4b87181addd9d42405a102c0c16d93ded18996553ea

                            • C:\Users\Admin\Documents\OutResume.pps.RYK
                              Filesize

                              963KB

                              MD5

                              ac9b6c9f47e7890542b2f6ae65b65c9c

                              SHA1

                              59c8c748554a4072a7f202f63d19fa8e9c4b400a

                              SHA256

                              ca3b464e7d77bfb3b2c6c8cb2d7419ecb6a2e9a56ed4898163f21efb0712e7b7

                              SHA512

                              b962da365d43bf0e399185fc4549a0728006c7728331171bb57d9c557a73ba0f1228785a6b6a381d3b5f066ebe5436236d408db32675a88607e3415e06f1a33f

                            • C:\Users\Admin\Documents\OutSubmit.doc.RYK
                              Filesize

                              1.3MB

                              MD5

                              de799d0277a6efb072d42ebbfe49a081

                              SHA1

                              e6ea504a201e4bc02431a028dc38fc9a9bbc644a

                              SHA256

                              666f0c8a5313639049b2d2eba9c5c6f4d2825c4dff125fae95a8f1081b28e81e

                              SHA512

                              b166733e633a07dbc9fe3270cf0e725e53832d9dff2e54edd9465f637a919aef61d9a7220e35e6b2b1bffb17a03f073347f156ca7dc1d03ea13fedc090c9b978

                            • C:\Users\Admin\Documents\Recently.docx.RYK
                              Filesize

                              11KB

                              MD5

                              c1ded4e1f41a3d4cd85d44342ef6c85b

                              SHA1

                              e8005eb662f65d3496ad9d3e5f55875723a2b992

                              SHA256

                              b2f7e7320ac6b472693b773e7b542b7a9551826004c380751be6c0c88fe079cb

                              SHA512

                              f239b42874816d243a17eaae86089b8ee453aca5d6776f4e6675845d6b673a56cbb004a60fb07438b53902a411ab552f264042198e77828f7325e409d17f1db7

                            • C:\Users\Admin\Documents\RepairDeny.vsdx.RYK
                              Filesize

                              2.0MB

                              MD5

                              3543572abdb1312c1613a8bd83b1f5a0

                              SHA1

                              6543c17989adbb844412f9c80ac065ac8c7ad3ca

                              SHA256

                              3b09c75624618c1994da43be123679542fb37791021e2d8fc5e26c0d18e1cb40

                              SHA512

                              8459bedd798db17d99ce81456d53f062a3fa955fcd40f42327956e7fdf3d5547bbd26a017b1eb6868f02b70c6a291a002b0fa31b660bb2a99516e661deea02b4

                            • C:\Users\Admin\Documents\RepairSave.potm.RYK
                              Filesize

                              1.3MB

                              MD5

                              fa15b66f519fb82f312c4cf0352e3aa5

                              SHA1

                              f5acaee3bd5aca61c244c6f1f8c1040763c035ac

                              SHA256

                              506e6d9e30999643cf96375a90f22ea1b52287d3a16e12d5aabc4623448ec862

                              SHA512

                              f669d250779c9c9ec042b789c4aab18ea90c42438cde2d2f084c70e6624979daf82da9550acbb1f907c8f99cf3a3c5ca3fc5cec985597c8dbfeca3712702c147

                            • C:\Users\Admin\Documents\ResolveSuspend.vssx.RYK
                              Filesize

                              1.5MB

                              MD5

                              144192144f4509b57ee0ca184d355660

                              SHA1

                              e14fc476150f8fa7aa355a6e34004d589e86cfe8

                              SHA256

                              b20b6bffac6a7ababc47d7bc4a178729fb5265e8a88be85141141b3e9a80933a

                              SHA512

                              a856f0e333c51d8237a53a1594e01d7553886174dbcdad201e3c2e1656494ab339332fba57929aacfcd32c03e3aae3775f950c6af9a66e23ba26ef4dd6d40f22

                            • C:\Users\Admin\Documents\RestartRevoke.ods.RYK
                              Filesize

                              1.1MB

                              MD5

                              0b18e96b660ec7b3b63dec9a15ab712c

                              SHA1

                              6fdd522d7e98726571090c6773db0c1cd6f83df0

                              SHA256

                              f6e57c8cd4553b985adad0f6d0f037cd9753be5079d26526fa84a6b6f3a3c85b

                              SHA512

                              5bb07078fd6344a2b5d9d3e99d9fa9192e7181e81fcd70ae507e51981f18504002c5bd71bc6578255b348950a6fb77d6c81c8b16498d46c2fa35560b81bc853b

                            • C:\Users\Admin\Documents\ResumeRequest.pps.RYK
                              Filesize

                              649KB

                              MD5

                              b45fd42589f12fb4879774dac0eb71de

                              SHA1

                              da0912fa5b44cfd749b4fbc9aab6ec91505c98b1

                              SHA256

                              95c9698f4ba1e44013aac44c19f13889e12e6fc98884f7350413bd6544bce130

                              SHA512

                              aa572084c25ac6c68aa66da09b5b8a8a959f6ba6a0ac656fbc9b21a7f3ea0aa50ba5efd84bb7189056ce443d6754bac5a6a963b1dfed28834f0d687713ea9e3b

                            • C:\Users\Admin\Documents\RevokeInstall.rtf.RYK
                              Filesize

                              767KB

                              MD5

                              c5b4851692c5363746a44f79bda2a893

                              SHA1

                              d6b3556a6b35f8c16b4445fdb1127f261ac21407

                              SHA256

                              2c67b099fc8d201e23635b295b561fbee6e516d0a4889f05af35445970367669

                              SHA512

                              310aa194620a70888f41355e66cd90798a8c2573a7beadd0a29c6351307b3276ed505f8dc21a43515079b4550c8d3776bdaa28b2e8e53cc9399c48422a69df0b

                            • C:\Users\Admin\Documents\SearchDisconnect.pub.RYK
                              Filesize

                              1.0MB

                              MD5

                              33de6e7a049ef0430880d27bfbf387fe

                              SHA1

                              1662be29749df6a245e3d45f962e84825f1d818c

                              SHA256

                              85ff5fccda5ea61459363e65b8c2f4964b497528373bf8ce129c4aaf3b0fa396

                              SHA512

                              af5d81ef90ffa66df6aabc16581ca4619735a84f7be81e8e615bdd41b862f592a0fda571cb8e7598b8d6251fd19a3f88d516276dc4ef8a10d2a1420f7759c59f

                            • C:\Users\Admin\Documents\SendTrace.ppsx.RYK
                              Filesize

                              924KB

                              MD5

                              fcf46d95b2f7d632cf22a61010b5e840

                              SHA1

                              8ee6dc20bfe98c0da52ef5088eda45ad569a8ce4

                              SHA256

                              faabca7d50240311fe52ab7e5c5b6decb79bda6c1c29fcdc18473856cf0c5d02

                              SHA512

                              160a0398f6761a63d0feb545b92fed1c822b8552d53b61de520511ed62a7be0a258c8355d6cc88c34059fe5401ee980e26282bdfe88c382643f3476b752bf781

                            • C:\Users\Admin\Documents\ShowLimit.htm.RYK
                              Filesize

                              1003KB

                              MD5

                              d490a9a1661e5ba51d3ee86a8d38d849

                              SHA1

                              0ade280e1611771d3cb2a1a44058ede542f29cea

                              SHA256

                              7bd820c9c24e6d5dcb24f5aa905b5ca9de7aca15eab9433ac1c87b775803208a

                              SHA512

                              9428b986630fbd46d794956f76944669f8ffc84737e30c4681d329008f8ff12dc122fe4a7f95c170ad014960f07da99b2bf0855ba084dc58c84a723c5c8cc526

                            • C:\Users\Admin\Documents\ShowUse.pps.RYK
                              Filesize

                              1.4MB

                              MD5

                              6dccfda86df7a67bb69553f4a8dc0196

                              SHA1

                              1e397f156c37b14f2c2e8856e0d3ea4296a2a2bf

                              SHA256

                              09198f730b326ded363d69d8a13c10f0694eb111453ee133add63e127f6b7657

                              SHA512

                              9bc14c16ca660515b80ba380b5eb16b782868280ed9db72f1e633355aa08410d4ab2d435402c956db35ccf7348b0afa02609624357d0f4542d03cb8fa6b7dd32

                            • C:\Users\Admin\Documents\SkipOut.pub.RYK
                              Filesize

                              609KB

                              MD5

                              d83e72d14939ad8a548b2ed9a8837897

                              SHA1

                              17053a3dae2c56f2847e5ca0ed7fa53830d953c8

                              SHA256

                              13f097cb089d935764ab0e7fa61ae66c6898a0d70cf15a63cb3b498252f961f5

                              SHA512

                              7440f217461cfd8b3e97f60308752fec6e07434c5cff7d33c2eaccfa7c325ca5abe15ba870c33f00ee5168a270a97a84c4f9aa7958262085374aa851041b4547

                            • C:\Users\Admin\Documents\SuspendShow.xls.RYK
                              Filesize

                              1.4MB

                              MD5

                              35661a761b924c3f5cf98ba2d0a5065b

                              SHA1

                              fea0aa847c89951433828362570ed14a18586a43

                              SHA256

                              e4b3e03fc2135e5d090c2c851b05009ecff1034d7a2cb05e636184e722546f45

                              SHA512

                              0f07a165736d09cfb9ecad1c3c1cec920935c9069434e03842b3c56862525620a36287a42dc779279d4d5cd3f5b46aa4a2a8b23daddebcb25efa099740c45e96

                            • C:\Users\Admin\Documents\These.docx.RYK
                              Filesize

                              11KB

                              MD5

                              4c87e10166bb34709762d4ff598263bc

                              SHA1

                              d8f3556cee102c79c3862f6a1a2bde12bbbee1a8

                              SHA256

                              9e7ba4199ba42ba3ced0259ef9bd7f7f5f99effb2889a12b26fdb9d24ccdf446

                              SHA512

                              b6a5daee0fb2ef98ba7becb1923829d9c5585128ae06890402223a99bf82daf3be6062c627aab779d3fdd79b7b4b5ae5e7bc7254ae67380e43e80121288c3f67

                            • C:\Users\Admin\Documents\UnblockConnect.vsd.RYK
                              Filesize

                              806KB

                              MD5

                              6031d8b0dbf1ab674dc7ae8bd90f1cb8

                              SHA1

                              0ef5dab0a58c3c54e4e940228cd2c97f34dbea75

                              SHA256

                              703934581812561e826c3f6cbf6c2b23e748cd161b29649a5bdeaa1074b2ec6a

                              SHA512

                              d881e10fce14ecc9aac8fd62f1232187df3d106baf4d99acd7183670c67bd74eaf0d7ee04bc9a9562e6b1f57dc39d173eb3bea891c9f71056a2b6c22f4783b41

                            • C:\Users\Admin\Documents\UseJoin.vstm.RYK
                              Filesize

                              845KB

                              MD5

                              713a73a2bd4272ea4c816155405b0f6c

                              SHA1

                              4178bd0d13de8b24ae0c7ef8dea67a877587f98d

                              SHA256

                              94c4a5af6f2a5a64a3cbb04c44e7974eb8907ddf372820f0de44ec5b6a129c22

                              SHA512

                              ab29a5d6afa5bd35adea28a3bcc048972a1649548cdbc84a34e9914f6534898eae844d9c3d1a86f9ba383ae8302db228cf40e8fa9b8a3a97d74c7751a336d399

                            • C:\Users\Admin\Documents\WatchCopy.mht.RYK
                              Filesize

                              1.4MB

                              MD5

                              32ae2d35007d3902b525181d7cbb2ded

                              SHA1

                              d27b368d355151c86fdcf2288cccab0d85017f47

                              SHA256

                              e2d79d2ae84c99865b871cafd3eaa361b62e31703e1dee3bae73720b94d66c94

                              SHA512

                              25c4d7dc6df4632532efb0f778b94451be24e7aaf9bacd6ab7439c544b64f7873c61d847906b47367d11e767e4c4af2aa85d107157a05c65d6e5da31dfe6cd9f

                            • C:\Users\Admin\Music\AddUnprotect.eprtx.RYK
                              Filesize

                              832KB

                              MD5

                              c524ee822f8ced65af4c51b1b439ef20

                              SHA1

                              42c9dce16ee19d74c3a6c4d3a5909b494f66c129

                              SHA256

                              ca0cf4b6570d9f9a6dbe5ebda00d3e95c057c02acdf3b924fa3b16c1a9f45b7a

                              SHA512

                              c0861ceb17fe1b6320244210551fd5133c723b3116165d2c44057fec8188410fd21582f5b4213285dc14f655b35f36dc7f8d5622dc4ad823d3f0a743a739e241

                            • C:\Users\Admin\Music\AssertConvert.html.RYK
                              Filesize

                              768KB

                              MD5

                              973a1a117a48468c1f6b00a7b3c9afbb

                              SHA1

                              2f1420193dccffaf4352887a60290ed31144fb61

                              SHA256

                              ae6ffb553d17997ae240e4254a42a87feef84e5d5c240ff5deb199b844061e2c

                              SHA512

                              14e273b0e08c7f4f7d46407407213992094d24f83cb1165d0ba3e442d73d0237ebf647a79bf2bb59f4d4418d9d46da97a5d47464983ca35de90c08c888d87089

                            • C:\Users\Admin\Music\CompleteSelect.xla.RYK
                              Filesize

                              1.9MB

                              MD5

                              2806de7a1093e115aa9b379a2de48f5b

                              SHA1

                              ddd83a9a2e1dca58fa7d5a10ff5d4867a7c716c4

                              SHA256

                              f6f994363658f73042ef78ad82c22cca68397f87d95131f429f22e43ecba617b

                              SHA512

                              611e9c2effc2e9d17f2206eacd6e75f5234496d23023a33849879a9250003a9a8b4621bbb60ae7e1a4d77c0bffd005db597db11e899cc56c6fd51ad213150ef3

                            • C:\Users\Admin\Music\ConfirmUninstall.gif.RYK
                              Filesize

                              1.3MB

                              MD5

                              d8543f2fd29736b0856e89d53ca04bac

                              SHA1

                              f827bd91586fd14106e056a14471e3a0f50a01e4

                              SHA256

                              3e977945f6690fae7eb51821ad67e417ae56a71c68fce2bd919ad7b2b6292dfd

                              SHA512

                              aef38ff868c5fb4e2b20943dc2bb978a8cd83e254e19ee22473ac2361465ffca2df0d35f7b5ed85ba803f011da187529c631bc6ca30a8702b9f7088e43d4d976

                            • C:\Users\Admin\Music\ExitUninstall.mpa.RYK
                              Filesize

                              1.0MB

                              MD5

                              f5f962b074699e6f5570ea228ca065b8

                              SHA1

                              5f86191737a1798840f2ea361263dc8b2d369723

                              SHA256

                              684efb644e5fb47f7b3005c883e81d4cfa65446942cacc43ecf4284a56a1894a

                              SHA512

                              206237fe9c62c928a0d42459398e70016d69010974517cc06581a9f9dd64c9e5dd21f9ec6de016b6635f4d87311c138ba9445b26cc96abab2c18e2ab0d4321ba

                            • C:\Users\Admin\Music\FindGet.vbe.RYK
                              Filesize

                              1.4MB

                              MD5

                              c7c99fa250bd294aebf86a13950f169c

                              SHA1

                              5c4032a4755df28e19d9a850a146876473a71bd7

                              SHA256

                              55b88967d630f78f0b3447008932a2a1ff3ac054969d9a9221674cd0d5c5ccff

                              SHA512

                              e83259657d57611e27d3889cac02c2036b86d7d5d1b63a2782d017f0c7d504e6f425eaf5f8a29f5f70dcd387da99cbf4264935a1add4e4cbbb78054d22e98ba6

                            • C:\Users\Admin\Music\FindResolve.txt.RYK
                              Filesize

                              576KB

                              MD5

                              afc1fe2d2797aa70905b2cfe17911e4c

                              SHA1

                              aaead9eb0e029f6620f59649f39aecad06bf4b04

                              SHA256

                              5b5eb52815a0aa21f5163bd0e72a4cb5b9051d10912a935fe7218794c219c8a3

                              SHA512

                              91baf114236d4bb6d99e6a77bbe764db1806e4538625c83150182b4b3dcc3cc8004776f04ef9b235fb01f782fc85a89361707797d895eb345216f43738692a2a

                            • C:\Users\Admin\Music\GroupSet.xps.RYK
                              Filesize

                              1.3MB

                              MD5

                              5d8a05221621f19c77f28542702c5853

                              SHA1

                              c68c51a8cc53d99ecd0a91bebfb89160339879e1

                              SHA256

                              84ff2b1bd91dbb7f5bb97940890bdbbe3b5e1641c9a75128bf007bc2545fb1d7

                              SHA512

                              f99aec53143595f462a440140b649540a55ddb4b2cca2ed197a3430f8a5cd73cbb8bac22772b4afbe21c87fa04c76f8f79eebdbd71f9e587351976913937fe9e

                            • C:\Users\Admin\Music\HideProtect.cmd.RYK
                              Filesize

                              960KB

                              MD5

                              9bce20f9888c7fc383de2e626b1875f3

                              SHA1

                              94e0dde820424e52ff8cb8fd7fa788d676c70642

                              SHA256

                              e600cb2bd0be1d4eb345e6c70902cd926a32a37cc6f480d80c2d740be9213f90

                              SHA512

                              1fff6717d8a2a6585c648d638ef6597ef2f07a67a5355e474ee7f5b74e98c92292635453e357446be28fbeec48d36a18656750a8469c9371473e99ee48cd549a

                            • C:\Users\Admin\Music\ImportStart.dotm.RYK
                              Filesize

                              640KB

                              MD5

                              9dd505511cd2ea75215adea0978faad2

                              SHA1

                              345ff506cd11dba2bcdd0912559102aa38e46dcd

                              SHA256

                              86d1002a3ad57dcb3c9f714f1488e65df99cd008841999a55e5dc9ed3528d7d9

                              SHA512

                              b306750b28ef82c84c0dff5d516d51ce0c0267cfb615fa5801e5f9266656cfb704ed5ba5b790eece6decb95789fa0d5e3020a8805dcb56c5788433d05e53935f

                            • C:\Users\Admin\Music\PopJoin.odt.RYK
                              Filesize

                              1.2MB

                              MD5

                              f215eb0c78620ae3682d5f965fa3dbd3

                              SHA1

                              c13d46a1f7d5ed9d82944688ddecc5e6da8985b3

                              SHA256

                              36235aecb154947340e59355d30bbc92a1b201202567ab4f1dde293d4fe03155

                              SHA512

                              c344ec7956ddf430b6adbea9c0889aecbd2a850ad9a7a4f257553c4714f6e7f4f1e10bab3e65e06ec84ac1f359fcca0fc3015cbea58e367506c6f04e28c6527e

                            • C:\Users\Admin\Music\ShowHide.M2T.RYK
                              Filesize

                              896KB

                              MD5

                              5302275ff6683b9d7764c5cd558660e2

                              SHA1

                              47683cfdb7040ef95c9532ea39d73ef5554e2417

                              SHA256

                              8299e3731eb9982aedb2a9e9fbe0c9f7d1705217e6e1270af45cfd0f5d1b1df8

                              SHA512

                              0e4b08e73927aa3bb0afaa72e15d7c72c0933940f583af1eb154b2ef11972710551f21c94960d282c2d63ecfc0495811430ffebb010aa8a2af1017e570856cdb

                            • C:\Users\Admin\Music\StepStop.m4a.RYK
                              Filesize

                              512KB

                              MD5

                              8e8d5a443140825538e3ce1baba996fc

                              SHA1

                              4ad6d0295a5ec06222634c36e3d093ef8d8761af

                              SHA256

                              a11b3ecf5be3759bf11fe40c77130cbd9644f669d32c3a865bfafac06243c5da

                              SHA512

                              537590fe6b654dfd02b407a201e2fa2f271be3f1128ee05dd649655885184f1fa398c66309cb5b9596c97eb5f03ced5227591c56cc3e333e54750106866d8242

                            • C:\Users\Admin\Music\SwitchExit.mpeg3.RYK
                              Filesize

                              1.1MB

                              MD5

                              c5feeaae92159d9a951d9042209ab7ad

                              SHA1

                              595cb3a7318f70b1b0e370b1509a713bb414458f

                              SHA256

                              535bf22a0f2468716978ae6a38ec30195c0fd5a723ec22673e6c3cfe2b3fc9ea

                              SHA512

                              a2053d92219ef34b7368993104ccbb7e0065fae1a0d540606a7713cf010fa0e7172c7a957f1bb5961436783b512f41b11987c86fc6933424ca99583057463a33

                            • C:\Users\Admin\Music\UnlockRename.htm.RYK
                              Filesize

                              1.1MB

                              MD5

                              46556c65967c034c0314af0528944221

                              SHA1

                              6494ace865cd2e7ca38e07db6e514a04c59919b6

                              SHA256

                              2e12364a48f671f11780f8331a127466ff099add4908f6dad4d8d70b4800a92a

                              SHA512

                              06cad6c0552d8513d2452b9647cc915e149a7f14a4ca8009950b1ab7729215f3770a768c30f96ada01d97164d78cfeacaefc47f8f5d9876892470c3c301fddda

                            • C:\Users\Admin\Music\WaitSave.contact.RYK
                              Filesize

                              704KB

                              MD5

                              a398d61c4b35e60cd633b55258891b62

                              SHA1

                              1c2b8c095ec202307ddac9cd6f50d372647501fd

                              SHA256

                              ac1db6a9c5991f55120b515277badb624a2bd647dbcb1318d0e51b965d36ce1d

                              SHA512

                              9b0937e88583dc578cc700fdce28df3fdc0dc4c4cd41cb120bbbe10748ddcca66f800eee3b0864a8be13ca7ab1a3667b9da62be9704b056dfbcabe87ce34de12

                            • C:\Users\Admin\Pictures\BackupOpen.tiff.RYK
                              Filesize

                              362KB

                              MD5

                              2a8d22f3343355e7699f6babe607ac75

                              SHA1

                              a978d6ba137ed2affdd6217d361f1b9cf2a5c1f4

                              SHA256

                              bd27a8eaa3d82f28d0686ad35054356716877bef289aef4e7b4c169dd3f02576

                              SHA512

                              b55731139bcfb47896f496217af543733690dfc481985f3b35f3ee4a640be990c4be0fb47d008bfac1c50d030e274d023f5952f79805d9334ef10e2ea1551a35

                            • C:\Users\Admin\Pictures\CheckpointRead.png.RYK
                              Filesize

                              597KB

                              MD5

                              2f9dbebe92e75c22873ae44f3316ef81

                              SHA1

                              f53929a4fe8260ebcfe9190cc328a76cefe3fb50

                              SHA256

                              ea367f2149e9fc54c8cb0494526cdf7ac64b94b123a4c04c3cb884c7be6e2c9d

                              SHA512

                              46273db0baa962aab2851cea774fa803c5b8341e6a7050faef03ca86b0cee648ca66278d330ac6426b9721d5cc2f554350ae97025598d75699069ff754dd362a

                            • C:\Users\Admin\Pictures\CheckpointShow.png.RYK
                              Filesize

                              256KB

                              MD5

                              bba6fe63dfd8aac838742ebe2f2b9bcc

                              SHA1

                              269aa9321ce5f6cd3a4734655ba2704b62712155

                              SHA256

                              6fa67ae1e0de04666d673bdbb380c9f09bab59bd6b3ccdd9aaea698f8042f26a

                              SHA512

                              4ea3d2472506c37734dd9791e2252fc80c6736f72bd2a50f4d8ac5f7ead763547c8b5d3628f1104c18e9036459c07a027d8f19fb84357c5da64ae9019080e700

                            • C:\Users\Admin\Pictures\ClearRequest.raw.RYK
                              Filesize

                              512KB

                              MD5

                              99b154afacdefb6b9df76083fbbd6c88

                              SHA1

                              3d6218be24c777730c4551d767f6516e9cf3a013

                              SHA256

                              41d61d52f2bc2b696b1b82b2c254877949da14cdad043d9726a6e3b79da25ef2

                              SHA512

                              86001220efb8d112b2bf3d0a3e392106bad852fb2d1b888ed4a2a36b042bee6dd39d95f523500665935dc069930c7c76b75391ebfdc2a6fd60451d9b72bfc93d

                            • C:\Users\Admin\Pictures\CompareRedo.emf.RYK
                              Filesize

                              277KB

                              MD5

                              d0bbbb764f966b41380b5d0512ce8185

                              SHA1

                              b8cf900bba06e489ea2116c4f1228a049cd6dbdb

                              SHA256

                              903c6a133af7902d21d1330442ffb4bb256c95a80bbdfbb1e6cbf69c37d850d0

                              SHA512

                              dcf582dceba5e0fb28ff55f253a37014df2584a04f24c9dc4c9e6a2ce3b8f71f7b6b916d0fccce08747a607b9f937a2137676dac0fd9a9b00c6be3bd6d039d68

                            • C:\Users\Admin\Pictures\ConvertFromUnprotect.cr2.RYK
                              Filesize

                              618KB

                              MD5

                              025ca7b33aef1baef40100bba2ddfb20

                              SHA1

                              e68b5e8f6521480b9fc0020d6a336f4354bd39f0

                              SHA256

                              7cd7144b1380aa7b41e1092e88b0a1bb82df557d91474812cda6f4ad4247c6c8

                              SHA512

                              83846924c183ad2890aa3e0112af24d4a87b7f992f9a2392260280a345ae5f99217c9622a65f6ccefb90bb36df74b14b0a3702abd94172ac6ded6a55e86ca101

                            • C:\Users\Admin\Pictures\ConvertStart.gif.RYK
                              Filesize

                              682KB

                              MD5

                              0f5361ae67b6651db95dc5bf10764631

                              SHA1

                              96f1b10739587b958a9a67afd592a5d816577208

                              SHA256

                              b747c8053013185f3a5904611d49a27d29928dbfe0f68a78ce674e01637f3602

                              SHA512

                              6a20de956d882f5f3ffe5fbb9e21400f3a5c7fbf2de0a3827142b0d02d704ecda8de462b6907757ff78c854dc775089d15349172542f9e669b6d3b4bd66ed9b3

                            • C:\Users\Admin\Pictures\DisableRegister.crw.RYK
                              Filesize

                              661KB

                              MD5

                              2b7255b1d166fdc18e998be114b919dc

                              SHA1

                              bc36c238f8a210f25ff73fe945890a16f620337e

                              SHA256

                              17be764e2d5f993498be0f05d04d023bdddfbf040c9a3e9a67a952e3e364a059

                              SHA512

                              01efd861f6bb60527606a3eeef035cc9d5204acfb53ee2d94085b152a97e7dac1ed652c7e8908c5055dd92c340bb35b6112d608ef7f9c2d732d67cb28c6e1a5d

                            • C:\Users\Admin\Pictures\ExitImport.crw.RYK
                              Filesize

                              384KB

                              MD5

                              b51057480c0d129d4f496532e65e41a4

                              SHA1

                              0f67c9a33f6842140bfde37a534b31a09aa2809c

                              SHA256

                              db94e4a5a141132afb6bd9c6bdeb01144584ba6fcbf62c5fec8e5035c8cc656f

                              SHA512

                              b762b162ee85962f9db9aba11a7bd9ab99ba43e0c91243ee53eeb4a360291a2ae724eb34b81fb15ed6e89523b842e6436e0ab60fc0def2caa503595f9d3e9ed8

                            • C:\Users\Admin\Pictures\GrantSkip.bmp.RYK
                              Filesize

                              725KB

                              MD5

                              ac290c9bb56ea85bdca62e310b78c750

                              SHA1

                              7afba0892c20e18d59c6a738ccc1a3e841144d16

                              SHA256

                              8431417667ae547388d2f2531d8031e876677ebf5ff513d2129d71d7b30a90b4

                              SHA512

                              bdc3e014c2c056de0ec07b9849115acc52d7fd9a0d425f82a2b47a1ce42b052f1a0f0c8538649de684127098fd33a4668d765320b68e63d1518b3e87712fa495

                            • C:\Users\Admin\Pictures\InvokeClear.jpeg.RYK
                              Filesize

                              1003KB

                              MD5

                              ec841d142306bd3f9a61022657d87468

                              SHA1

                              5509bd6077f9fa7be8c3cb176e97792304bb7551

                              SHA256

                              b2f721f353a52ac95749ff0af40856067985269f3d4b8ef8c03141183e618b00

                              SHA512

                              ca5b4b8eaa5ae36e876cdfef3bcf4236c998684180ed037966d074b136595d2adefc2f6a765b3fa8bcef97079cdef1a0da332131fc8abad5e0832d02c36a2cd2

                            • C:\Users\Admin\Pictures\MeasureSkip.emz.RYK
                              Filesize

                              320KB

                              MD5

                              9c9a0dfdfd48103df6074c4ecdeb8d0b

                              SHA1

                              ff03a34407baed4b85b68c4ffa47f6c85851a432

                              SHA256

                              23de07caf609096578cc9ee7138de273873fa9b801aa748f4e62fb465d5b0c07

                              SHA512

                              79e0472c4368e7031abc08025f337e98fe4da4a5fe40d9b74e1fee168817f913ea4bed26a242ca0f37b3c80e252bff0f6b9b041fbd47c0e9af84e74ce6517377

                            • C:\Users\Admin\Pictures\MountDisconnect.gif.RYK
                              Filesize

                              405KB

                              MD5

                              2d6e20b5b5476381be12b00559f55ada

                              SHA1

                              e6c189de38296c64bbc86d2d9a5c76ed56ee08ba

                              SHA256

                              69360ed3b3e0d7e0cead58db7deacddc80d8c3d1c66e23aae081834c31b8290f

                              SHA512

                              9dab39ad74e80580bbdf1ed09676b896168331b2376d1e6c2bb2f842b1deba9ad46966f1111e0baa2d8e1bf43ccf78ab91a71226d8faaab21e1ba864715bb3cf

                            • C:\Users\Admin\Pictures\My Wallpaper.jpg.RYK
                              Filesize

                              24KB

                              MD5

                              7ca93ffe022dcb8f5f03cb76cf1dcec2

                              SHA1

                              529ee8501a046f5504b9ef724dc66c23a37ec491

                              SHA256

                              c4b1785e2894e3c22a04e6f5594731d5904c1072d3d0cd9eab895be6ea615679

                              SHA512

                              55d252f84abf4cb68b259e6d60312a33e4a1950a87f598f27bcbdc4dd9fae4a884c77d3aba1cea965511461a9ecb81a2a326a6e23ee43ea46bf0cd66266a1263

                            • C:\Users\Admin\Pictures\OpenRead.bmp.RYK
                              Filesize

                              490KB

                              MD5

                              b2f48073b69ffb8bd6573ad24c6894ad

                              SHA1

                              2a8b324cda0db61cebfdfddccdd11c401e4b4637

                              SHA256

                              aba5fb95e7b141f884db1c9b52f946d4ae2c0ef808279147c744e122d13577b4

                              SHA512

                              4b59365124f870f20454d89097e79c1a00c481225fcda994e69a46a16f14d4e8662d1bd96c6783a589c58c31301d9b0d69e50363d95426f25b2e9d8e743a9be6

                            • C:\Users\Admin\Pictures\PopClose.emf.RYK
                              Filesize

                              298KB

                              MD5

                              ffe8a79e8b5e38889325620af20770a3

                              SHA1

                              63003685769e94bd90928cc3823dd8f9329e4a1f

                              SHA256

                              f8ed6144dcca99d795790a9ba8324bf925220bcacdb74f26cfcff56883f723e8

                              SHA512

                              bf703eec9a85de0b3f5572be2d19bb833304d3b5032200ec5d5920942d6ad8eb46558b74dddd2b55c6db356cf28d7ad38c36902022cddfcbb3cf63a0ffed5478

                            • C:\Users\Admin\Pictures\ProtectPing.svg.RYK
                              Filesize

                              469KB

                              MD5

                              c62a39f9328ad399d9d9fac0f18c00ea

                              SHA1

                              0242e2749ae18b5128f635081091d4a2e4a70aed

                              SHA256

                              d8a63f3879ce3293308a3bac7c91abcfb48550befbcdd11685dcb0d72b22022c

                              SHA512

                              84959c8e417b5dcf7109517c475617f53477b38c0fa3c4c0d3cba8ff6fa471949e3a1d08b682a17ee78a056afdf03a81cb53f82e8903577bbe316b8bcbe28a8a

                            • C:\Users\Admin\Pictures\RegisterApprove.wmf.RYK
                              Filesize

                              426KB

                              MD5

                              7eee2a7e49a288e2b2eed1f7666e7064

                              SHA1

                              eab21f6e14642e11313445897a427400cc4ae175

                              SHA256

                              ae94ce77823cd2aa39b7ede58fcde93fd46ade5a0584b4f24b6bc59d5f03d594

                              SHA512

                              3296de589a6e2c4fbfe5cbc033a0419d29c1674db3922b904726b09c79f6a4886ec0da4774b1fc097fcbab4964028c386bc959417a618b4fddf62b9eaba2b749

                            • C:\Users\Admin\Pictures\SelectSearch.png.RYK
                              Filesize

                              576KB

                              MD5

                              866e627da6e8968c94bb0e96882abff7

                              SHA1

                              5e186115ec0837a30c5d35d037cc6644d6f8454b

                              SHA256

                              8388a671e793beb38c53fa0e38008981ad1a8284798bd1f354fa7c6d311601a9

                              SHA512

                              5de75572f497dafb9ec2fd6c4590fcbfb3b69d7aeaa31c91430808dd0cf6720fda5167147f3bd5e63bc0f5c6d82299c60b53abfbc8c6f29897a4364001041dfa

                            • C:\Users\Admin\Pictures\StepWait.gif.RYK
                              Filesize

                              341KB

                              MD5

                              6aa0d1eead4700d56c26b580dde0d4b9

                              SHA1

                              14eb062b8530912f952c374ec3d3848bdf511ca7

                              SHA256

                              948250272cbe6c5ce7d1d36c9d57bdd5c12767df67154c0e9c7ae29c22b3716d

                              SHA512

                              85602a933068ab1d488c967ad8a23c25790d7e1dc5d5406323fd1b76b475a87e31e15661568f9b0267fba2303353f8e2825c8ac53546dcfb21e78a92a2abaea3

                            • C:\Users\Admin\Pictures\SyncUpdate.cr2.RYK
                              Filesize

                              704KB

                              MD5

                              14953e39c944caf391b13aeaef069536

                              SHA1

                              f0f95cccf8a37f0e6e4117de8521e6b65ba93cb4

                              SHA256

                              237d08b1bbd233493f5e21cc00ed8d6720e020e232ef849652e04ff9b08b486e

                              SHA512

                              b34cf281e9d738013c3d6b3df9a479c9ccc7109f38f21c2845ba8c325a361acaed4aec00a339f75e620d0c0e954aacd52e407b469aaf1071b1f5758217dd808c

                            • C:\Users\Admin\Pictures\TestExit.gif.RYK
                              Filesize

                              448KB

                              MD5

                              f5390d681e60069a8322cdfd71036e14

                              SHA1

                              076550afec524298cab39ede3d182fda85d49bf8

                              SHA256

                              6b2ad9e0e7c01123c515414c4b519518977735e63d5565a4749e668996d75d41

                              SHA512

                              081790aef910badb15451c4a268c628e4efa3d346e8c8174b3c9c64a56fc2fb5647a3060d0a42848a2c8ecd085ae047aa45baef3e7a54be8981a3e147ae51b20

                            • C:\Users\Admin\Pictures\TraceConvert.svg.RYK
                              Filesize

                              640KB

                              MD5

                              2dd908f023ceb4315648e8e4904b162a

                              SHA1

                              55c8a042bfa1701344abfaf9523919c259f1a6ca

                              SHA256

                              7b1d53dda24730d1e0e443736177b5c957a628584714a6ab49fc2204190a309e

                              SHA512

                              1d06a68f8cbc8b263378e8bff9010bdf2a3d6f29816b4c77b34d967584f5f83b5d7c9f8feaa15745cc2873a628c034c03a5528bba7b853a721c667003392954b

                            • C:\Users\Admin\Pictures\UnlockCompare.emf.RYK
                              Filesize

                              533KB

                              MD5

                              0dab8730d41f56fbd9b2bb6badd4647a

                              SHA1

                              23f8d2bb3f8ebd65c9971cf0aa4e2dab223df434

                              SHA256

                              a1cda78842d978e121ec458e766d8e08908828ce4d5781e17428b07e2488c208

                              SHA512

                              74b2185f03e74f9003ff1980dba48f5b5e83a2cc918b7678e12a41b83793affabd92c79f673d904c0f238635b241e98c14ab39065e81d1f00c6c381298077981

                            • C:\Users\Admin\Pictures\WatchRename.tiff.RYK
                              Filesize

                              554KB

                              MD5

                              47fe470de046794a31328f3d88bd9aef

                              SHA1

                              937ec758b4b14ffc7f5063a92d8f3d1b5d652193

                              SHA256

                              9644cbf5adb84ede9ca0920bda6bf5de7d607fa6dcb032d5bb92d85bc2697efe

                              SHA512

                              56e4e25b1d8612638229ab2df042a1943fb72b7d3f26583f60bf16dbba5e380e5c94b753d3468aadb1a1fe19ecd34f88ed214e4b79a21c8773b201b5632b4493

                            • C:\Users\Default\NTUSER.DAT.LOG.RYK
                              Filesize

                              1KB

                              MD5

                              5acf558fd62eb073c2e240c7e49039a1

                              SHA1

                              f2aba62bac4da9d0d0f90e922c91dcb9e95d30ed

                              SHA256

                              eab4aaacc4e930103b6181d26dc9d78aac6e7a73dcdc606d602d6a87ff30ffd5

                              SHA512

                              97471f502fe2b383ef2efbb4ae38dd42221928da382dc9697f97a3f1d79ae6b329784f9d72ccf9cd521c4790554850c3f582909385eb1a0a6bf8b0f452ce2c1f

                            • C:\Users\Default\NTUSER.DAT.LOG1.RYK
                              Filesize

                              185KB

                              MD5

                              690f5ce542777adbfaa4f3b43d1a5f70

                              SHA1

                              31646639723b57607e868ccac78bde3b836c1647

                              SHA256

                              e9702b31c00dfb5862f9721fe0d6da97068ccff487a2aec9eeca2906e3b5aaf1

                              SHA512

                              a72fbd07f5b48774e67f6c0de0a0a395b9365693236df622dec6981ee3b7cf06cc993444238182b0cf1c8231ca30a70e666d77b86278e97415a2e5a36472fc36

                            • C:\Users\Default\NTUSER.DAT.RYK
                              Filesize

                              256KB

                              MD5

                              9157b7a9253c09b6e7b6f35a7789831e

                              SHA1

                              c341d235e1fcb819c3d4de04fd64912175091257

                              SHA256

                              21ce66a3bccf432e3ee85fd4635d94cd418efa54c87a98dc8749ac18bb337ed1

                              SHA512

                              4684d1d5692d529eae1dcc8ee8f533962ab7c4d77b79c6ac3610a378031e88374fb5c0f340a335cfe698268fb104c2e29463642b54d76ecf529958ec71284a1a

                            • C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.RYK
                              Filesize

                              64KB

                              MD5

                              375b4b474562e9cbb76ebc19d0cfa797

                              SHA1

                              64a0413d77d75c74481c7498a275abba58a4c5fa

                              SHA256

                              42eec5b0bf2065a05bbdb0e61047e7eaa4f73aa79a10354690b280ee5f106c2b

                              SHA512

                              3ebd4ce471ea8c2737e2ce7916616e51e29b5fc0945b23d0f4d69aaf36f85276f6a1fb101615f35b1f5890dec237d0464b81769ff3623f344248afd827242acf

                            • C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.RYK
                              Filesize

                              512KB

                              MD5

                              ec6094ae52ea0745c9c2e7841030d234

                              SHA1

                              5dffc8d85a3283a5959072a34eab4a392eff000a

                              SHA256

                              b5e6a3be1b0677137dd271c7bf1e49e62c11ac0761b0bd965872b0563a305c9a

                              SHA512

                              97b32a407d31c370115fecc14f3d01ba2c1468b76e043bbb5659baee47aca01306d383473b5ed497f51db64bf2ec6f28c56969af5771103737957d0e615b708b

                            • C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.RYK
                              Filesize

                              512KB

                              MD5

                              b72d38a78ccfcc0f8170d3f3b4d4a74e

                              SHA1

                              686bd856318fd38c869b3455e82e1f8ef6266e4a

                              SHA256

                              86693a254ae3a163dc466e1a9fcf7c2672e90c6e13b92ecf99500344ad4b9bc5

                              SHA512

                              2dcfef6282cf78d40e2b406e08e75a145d47ea0f1d9705531e22a4f09eefbf472970d4d572eafc43c0adfb2d6b6def69083980d2034d9daf3202c254c182e61d

                            • C:\Users\Public\Music\Sample Music\Kalimba.mp3.RYK
                              Filesize

                              8.0MB

                              MD5

                              962552e91748007859b06464d0dd484f

                              SHA1

                              c676ff967661ded08d648271fbf147fe1aadef0b

                              SHA256

                              f66ce2b3afd54aeb8ef6d692a8173663266113bd39c2af5459ec1e30752995bb

                              SHA512

                              cf3d9a6f8c6b3b7ff0e5033015ed2dd6b4380d668b7cc36834d9a260c17bf163657ba36e251b117d4a9d3bcd1fa293fc3ec24b207e540d7a23b2c2632f9beb4f

                            • C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.RYK
                              Filesize

                              3.9MB

                              MD5

                              f1cd1b1c0a85e8ccae0f2db6ec80d85c

                              SHA1

                              3f03caada027a928720e308028a174ad71c04a6f

                              SHA256

                              afac07de632000613fe9e407e33ebc6864f45c55f97753151a20f68cb2054ce0

                              SHA512

                              783ef5d903f1917df6c61b8ad284f26e5ec1c9f24026374f2fa09edfc72a1e7b3603a66f79c6aa1f7fd24f58df65cddfd15eaa3d1a5db064d35ca5a76a89c326

                            • C:\Users\Public\Music\Sample Music\Sleep Away.mp3.RYK
                              Filesize

                              4.6MB

                              MD5

                              ede76a7621a46c3c7a3a947b68fc17b0

                              SHA1

                              c2200655f6361d4d14b49ddec4c195fe587c1686

                              SHA256

                              322e214afaf1e231d241d54bd8b0a290e3a0584c1d7a46eb34da7093d1061abe

                              SHA512

                              96b933d4c8baa1b16537d38707fa246f71eb1fa01a2632f6f8916c78cf030683f41ffa69a2ea07493a2e5a7aebc3cf19a12a74f420f365f8ca1d6a9a96c5e058

                            • C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.RYK
                              Filesize

                              859KB

                              MD5

                              3d54568ef45fb3a5ef2400f66e1fd37e

                              SHA1

                              99c22a5968ae246b1b9a176547e02e3bebf56171

                              SHA256

                              f7edf968de1163cab3c9dcd8cb8ae60337740168297a7c246a0511d74eb8edba

                              SHA512

                              35d66c6c120ff52d04e3ecac98fb8698022b296f40d233e4c1e5199f8cc292017301d8240b0284e86c44d10c4ed4510e26f40b39cc4e86c730f65556cd9c1ca6

                            • C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.RYK
                              Filesize

                              826KB

                              MD5

                              8504467c4112cd743114ee871914c178

                              SHA1

                              3297820867e341a84a21e79e151362c0d933c2bf

                              SHA256

                              9007d789db5f8423d6bf51bd8971b35d1302603ab3b019f92b6a283c047d2990

                              SHA512

                              8926b7dfb3d98eb7c888753b9f11531c0510a5b182635129680846213eecbaa9d601078870c282a01e888cb79825eba113fafb89ec26ecc40e3472a3d1d3c369

                            • C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.RYK
                              Filesize

                              581KB

                              MD5

                              7c9104ef3d7ad1c35d9bc525167ffd27

                              SHA1

                              e373b726ee976f1599092401a35dbe69b97bf7cd

                              SHA256

                              1eb0b651501135dbe19ee611f5ccd1ea69e7330ab213401527b2c8ca16367ad3

                              SHA512

                              5db5c639be67eddf6312e539240432f16a5402937584918cff37260c4efe29f8b30f8c696d6dbe266b93d5e6b1d315eb82b7b3d571fb21b5051698163025f185

                            • C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.RYK
                              Filesize

                              757KB

                              MD5

                              6c9afe5cc8423eab97e9854a16a698cc

                              SHA1

                              844e8241b0313a9fb0022993b362c5adc543c3fd

                              SHA256

                              dfdb6f4451d3fb1f98897465d6370933d9dbffa8890eb5cadff6d56cf0942b4a

                              SHA512

                              188c70fba165b676222f7468c7c0f87c30486d9c5ca4ed1d57e908ffd22383b5489018ff6df07f62968a6039fc254666da8c5ccff387bea2254ac9a4e86f8a9d

                            • C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.RYK
                              Filesize

                              762KB

                              MD5

                              b64f699965a127015fcf065ed638431d

                              SHA1

                              308fcc8566c351a985577c5898b3015ed52e4e10

                              SHA256

                              3e50b2ae988e348f45875c62e485b517fb0b6dcfce3f9af1098e2c59329a2322

                              SHA512

                              57fa56adf9b770111334d46e4b72b0140bec08c3273ab8641db94536f28745ca66656f326fad7995939fecb2393a5e6052d55bd3f6010ca980d76e69d518c2c9

                            • C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.RYK
                              Filesize

                              548KB

                              MD5

                              3b4ea7f8acf1b2069037da7ddcf5122d

                              SHA1

                              b0b23dc025c4a9a080526e83b7d5278d99029a7b

                              SHA256

                              b0f4c7d34e4060caa45e25400fca02fb2ea08664928e5f04026cab7eb99ab66a

                              SHA512

                              ad5383a6a0864f408c0454b7d1ebb221a40aa567811483926818ba4b63eaadf7f8867e988ffb285fe5bd3d6a709a3c069493822f39f08ee043ba86c07fd4259b

                            • C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.RYK
                              Filesize

                              759KB

                              MD5

                              a38933c84bd028bd9628c8c219489202

                              SHA1

                              e026a77c4ffb8c5734ca3cd44ce12852e088485d

                              SHA256

                              c44a6e9adecb053b62c1e39729b427dbef90abdda036e54e852b13ffc3b00473

                              SHA512

                              4343c428670b7c70ca77cef03841fb81c5e28736339a80cfeb38f0588a92c956d75f6998c12498e1caf26255304b62ac3a93a77750d3c3ca9b1d85bde45bcfd8

                            • C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.RYK
                              Filesize

                              606KB

                              MD5

                              c00a885e8bc06e0641f966f0256019e1

                              SHA1

                              9c2cc80e05a81339c1ebfdf7bde1532dbb01fd23

                              SHA256

                              743ac4568b1b151163511f71a0349ee2e4b32301d5ae4fdd469d5a4d54d94c4c

                              SHA512

                              ed41c2cb8959d0b354d206fe391ed84c2d469a441e290bf1968e8963b081b46bc25ef3b6652476e59cf849542708d363a8265376c7814ccc4a44c519079bae28

                            • C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.RYK
                              Filesize

                              25.0MB

                              MD5

                              493e247e3555be5e29f9bd9ecb21c848

                              SHA1

                              41c672e7886891aec404afccf6fa8c2908769fe2

                              SHA256

                              88cd48aee77001c1e4f39823d37938820abb1559c44e8a2989c00d8a24f9e19c

                              SHA512

                              5789611750eca3d3ecad208f7088b0ebf6742c148aeac9f1e221583a23eaa333969da794bff1dfa590997c4643dd41ce29652c86c76e111147534fbd3582d8e7

                            • \Users\Admin\AppData\Local\Temp\gEgLRIv.exe
                              Filesize

                              190KB

                              MD5

                              5661aec52fcc80ccd4c5d263e113c115

                              SHA1

                              b09fb5cfbfbadd6afdd536aa89ccab405ef8c5b2

                              SHA256

                              6cbc05acf871c106f7804069fffef908472a31ea1a782add45a100d14c8f5ea0

                              SHA512

                              15e2a11d1d0b614cc1181a787a3208d011447ce68f6be93df227bc1b1b95400151251cf0bf9013900876b1d8e9c93b05ab0af0f1112b2e50176879a94a19d30a

                            • \Users\Admin\AppData\Local\Temp\gEgLRIv.exe
                              Filesize

                              190KB

                              MD5

                              5661aec52fcc80ccd4c5d263e113c115

                              SHA1

                              b09fb5cfbfbadd6afdd536aa89ccab405ef8c5b2

                              SHA256

                              6cbc05acf871c106f7804069fffef908472a31ea1a782add45a100d14c8f5ea0

                              SHA512

                              15e2a11d1d0b614cc1181a787a3208d011447ce68f6be93df227bc1b1b95400151251cf0bf9013900876b1d8e9c93b05ab0af0f1112b2e50176879a94a19d30a