Malware Analysis Report

2025-01-03 08:25

Sample ID 240617-gk27daxckc
Target 2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber
SHA256 66b8e293e759e973ef46c07996f80d7ad3607e66868d138ad165d93561f07d49
Tags
discovery ransomware
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

66b8e293e759e973ef46c07996f80d7ad3607e66868d138ad165d93561f07d49

Threat Level: Likely malicious

The file 2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber was found to be: Likely malicious.

Malicious Activity Summary

discovery ransomware

Renames multiple (52) files with added filename extension

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Checks installed software on the system

Drops file in Windows directory

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Checks SCSI registry key(s)

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-17 05:52

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-17 05:52

Reported

2024-06-17 05:55

Platform

win7-20240611-en

Max time kernel

117s

Max time network

118s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe"

Signatures

Renames multiple (52) files with added filename extension

ransomware

Checks installed software on the system

discovery

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\SC_Reader.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
File opened for modification \??\c:\windows\twunk_16.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
File opened for modification C:\Windows\twunk_16.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2452 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe
PID 2452 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe
PID 2452 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe
PID 2452 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe
PID 2808 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
PID 2808 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
PID 2808 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
PID 2808 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
PID 2808 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
PID 2808 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
PID 2808 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
PID 2808 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe

Processes

C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe

"C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe"

C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe

"C:\Users\Admin\AppData\Local\Temp\oct15A4.tmp.exe" /S

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe

ServiceStartMenuIndexer.exe /PRELOAD

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe

"C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe" /LOGON

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.pokki.com udp
US 104.17.73.79:80 api.pokki.com tcp
US 8.8.8.8:53 cdn.pokki.com udp
US 104.17.73.79:443 cdn.pokki.com tcp
US 8.8.8.8:53 analytics.pokki.com udp
US 104.17.72.79:443 analytics.pokki.com tcp

Files

\Users\Admin\AppData\Local\Temp\nsi2AB9.tmp\System.dll

MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

\Users\Admin\AppData\Local\Temp\nsi2AB9.tmp\___ocnsis.dll

MD5 bea3bdb7df888a7914181994af62baaa
SHA1 a7e3a6ba00f3a29bfcb052435b380300b9c2cc2e
SHA256 ef603dc803845bec994a01008800dc27b1c7764779957756ea758d7abf4d16c1
SHA512 9ecfcee5e56ea07c50adbdd68587030cfc249a2743d7f188d6c345ac5401e1c18377ac212b0e1161d8dd0207c02484e0b962dfc5397ac89182684413aeb9dcce

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 2f73e8c70162e4cb5a3f89b00e5105f6
SHA1 d547e5f3fa00b39f4078d3565428b913317d4450
SHA256 1be4c5b2aa9082a5aea1b2fc74bfec25268b1b50ad3438fb870c7305738fada0
SHA512 a1ffc17f6b3eb8ef902df6488aea9a34541a210761c07ea8f42d05aad5412bfdb9b397dafa23bb843b33906a648f3e361b209e231c198691fe478b7d8bab0075

\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe

MD5 da1032987448c5271e1d90e39ee991f5
SHA1 df9b8780c10de47f8c829f419ac107c7d0677682
SHA256 d8cae77dccaf4c3eb1e943f257204bd09084d810c90ad90ac20c318e4261e80b
SHA512 78152652ada500216f755ea8323a630f8c92b3894e21bfc298915df31eaab5f88723a3d2276f81635477bdc217306812220b5f5385a4075816c9992c45a63c2b

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 c937fb3cd3de62fc87823f7eb99d2a29
SHA1 dd9f83db39d6ece2c5849202c41bd22344d09680
SHA256 4490f563e61460383cbef653fa315f08599ae4cae264cb322fc9f8074ba32e90
SHA512 7e5c193bdf3f2948e5e90f7b9e0d29d995d3da9bcbccc799c1a27f54d369643c3e48325178f9ef596d78c334769a2498967dd994224460d7eae368865bd769c7

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949442c6d11ef820efe0070c7cb2b.png.compare

MD5 efb8703aee1509a38af87d1df077943d
SHA1 38880fbd2cdbcf6454c3e71f95faa7f7df3cf6e4
SHA256 5c2015d8818807ff8522959cd3eeac18a59fce0e6f255c24461a2be5f380e225
SHA512 ab1a07d433a75772c43f62a5d5962f4dec76590adcc9fd6f5d853625750fddb96dc0afcb7aefdbad39bd307eb9a68ca49871c8cd226955a02c62bf1190c9ee7f

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949482c6d11ef820efe0070c7cb2b.png.compare

MD5 80647ac5852c04e3687ce27830506098
SHA1 f2cc6bb61e1d905fb438efdb227018dd9b8a5bd9
SHA256 7cd2fa75d403b3d64ae6b06a2110d71e2cc9f4ca60460987c4aa5078cddd065e
SHA512 303083059e3a983210258ad678968e0a719bfbbb50a695a938f8e6e3b270b8556d97c63c7fc5242ff8d691346023b6c49514280f4c7cd079aa7dea8477cb7793

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949142c6d11ef820efe0070c7cb2b.png.compare

MD5 3f0d9ab3a3e8b17fc23ac7fc7cfbcb65
SHA1 9f93fda60514f8795622a13c98bf33d5a0c227ed
SHA256 bb92e53a38c703b40c847cf8dac24da73c1f801d6b0685b4ac592e936d727a09
SHA512 14aa1296d4ee21897a06ffbb2064921f0fbfb326d8fe4e99e14835fb2090482c3ae62546f627cd91f6b555c92779cc83ef70386184f01b3f4f1ad5bc7b34ea8c

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949202c6d11ef820efe0070c7cb2b.png.compare

MD5 826a73d6f0dea96394fd5bd268ac62c0
SHA1 eb13602c042370b8b0ff7dd267c23287d0cef417
SHA256 1db31221a50863d687b072cba2e883b7d50aa2abc2b26b4d39d73064eff23d45
SHA512 c18c5871c7d106659df58947ce67151163d3ac10d6293982cca852f53f4ac7d536bb34f4670756d135dbca37dfd258b64e1657bfabc36dcff9d9182a6fc81964

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949d32c6d11ef820efe0070c7cb2b.png

MD5 be79cf3367a8e4981cebf89afd21b8fd
SHA1 922622b173c68d69a48d856e8b71ffb22ce14cef
SHA256 4e0630d842961a0a8b1095f80a4167f5672ea5566f54ae841170e46b9e6403e1
SHA512 f070f187ed5061a8566e3485c01de6a11e31628713c6aa5b0c3ac67e4488a8e2586d62f85d89853ce12775cb912bca142bd78a0fa1425b98d50c96c1110174a1

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949ea2c6d11ef820efe0070c7cb2b.png

MD5 c8465cba0313a8292feea3642f804bad
SHA1 950200f44e9710509e61cd664a6313fe48c8cf40
SHA256 333da8c47ae306566a41f7cfc13da79a86c5b332c537771479c140c4f8654fff
SHA512 6ff474ac901fc9c1e78992f33a782259c0d4ef58bc38e87955aab60df39eff895c6bc1a5646feae782f6fd8905dd3b75b3adf3528b798055e4f3e93066aa7636

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094a1d2c6d11ef820efe0070c7cb2b.png.compare

MD5 8ce4d1bc1eab60e9eac2a95a715e86e1
SHA1 95ff9bc306da58a6476b012142c0d171e0b1ec33
SHA256 23ee068427f097886449d7cc8becd16808b4d73efd4f4051cc94d55b7f7f4acc
SHA512 9a8686fd4c9027681fc1b41e499349b7057898cb48093e824f5f62b36c2332bec7131e4d01d7ba66af20887e5ad3c0230538f1d33aef085e70a3ce16cba40375

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947582c6d11ef820efe0070c7cb2b.png.compare

MD5 215237e908928adac02b1db1820049c0
SHA1 9a875706a763920b50180b10b518bc7093505b35
SHA256 b3e65809a567f4ebb06eeeddc041cdded3ef6f3e43c9efdc030c5edf0f61164e
SHA512 a61bba7592be55c0962dc39b7e6388f93f5b3415c7a432525f0a83cc67666b02df87766607dbf39a8a4cd2aaf577173b286f09419f9a4d963b1df1a5ed4e3efb

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947542c6d11ef820efe0070c7cb2b.png.compare

MD5 3a2e10b239d598c2986acf77654f7fc8
SHA1 1f61b498791550307fe5de1c3ff496564677fdb0
SHA256 69b69950ddabd51756217f4922db5054efd0a73a901d7489eff69bdfd6c40e32
SHA512 6967e67c3848e8531a6cdd2cf79f4d1dee1b8a94df10cbe29ed9f7fbc05da78a67667db20e8c73022d87b40dee48bdcc37e69424cde25845ad70e9da9565f273

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947d02c6d11ef820efe0070c7cb2b.png.compare

MD5 3b20a57507e63838a2659b74c0bddc1b
SHA1 da8de7e7a4484d6e8cdfbb269abd3e6ae7041898
SHA256 88b84e826c251e100de58618b4d6e54d5980a75d7c89af79d8eff669c981d252
SHA512 7e1cde9576d26dd10cb0532c653065f3ca16984c1cf6d4453d08055fed5a8d8a689b9966a2ea6c8f07ac7b783598613635f5e3b00ae2a3c13f2877eeed6dfcf5

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947ec2c6d11ef820efe0070c7cb2b.png

MD5 e167f54e12462548e9134434c085b2a1
SHA1 58ace4ba5a71d15db04f2eb62cb7d41f039ba4f6
SHA256 e02536a4279072c13539a00f6378fc44e021a055485520f8c988a0699962dfab
SHA512 05d7e0ca0082a8ca6ac642d4878f8d8288ce648f334b16b4eca8d1ba605dce3a396b66118b942a4d429a723e151cdd9efdd1eae53a120e04cd66586c9b35a399

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947b82c6d11ef820efe0070c7cb2b.png

MD5 60b77cafd89a4587863cbc0d90c253d3
SHA1 ec13661c15277d8891e9449dac33751c23e077d4
SHA256 35260d0e84b86bcf16f8b6848253476d5c5376619f195141bfbaa740ed6f0afd
SHA512 2c6c2fb7c52ac2fc334da19e2b7aee8caa17d829ba777520a3e61ddcab09aa5e89a0733e281ceb56db6d845c8243b5ec05fb3bd96e3107b8aafcfe6763b43e46

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947f82c6d11ef820efe0070c7cb2b.png.compare

MD5 b0e099d59b68278a221d5ad0e0358d72
SHA1 927d01d9488f49166c7c628d7496e8f0671fa69a
SHA256 ecb6e8c5def4c27b09533b7f3bd140b1eb928da0a905df676589ace2fdd7f8a2
SHA512 61c4047ca8bbf7936035fa097b80091b78cc733c299836102698558da855a5dfc454d53bcf4ee1a4c950f911613190455f52281eeef27a2a79b7c141ec814aaf

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947a42c6d11ef820efe0070c7cb2b.png.compare

MD5 c53f457bd16e2f80dcfa4a33445459b2
SHA1 9647eaf54c65f8d7195f403a1ddc27ecacdf9ef8
SHA256 65d6465c75096c24e7b2233490589d01faa72b61f56a90f1699ce98a37abefd0
SHA512 9aeebd1792c4771e70a0ee90b3b74a29cf0f2e1eeb39564ae4cf2bbd08ca282cccf5fd7ec0c0691ee8bd625438cfba6c2c759cf2deed76653bc40403aaa42bea

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947802c6d11ef820efe0070c7cb2b.png.compare

MD5 57659d81293e851d6211392ced456e7a
SHA1 4556b8958edc41aba8f64ebb3b0d9674c6348db5
SHA256 83d8869e2ea0de994d785bd482a522bfbb23bb3caac44916f0697aac2b4653cb
SHA512 74ef58fd0c405318ae570ac73bb82706c520627ef1aa9782645001ff57145118f27b73a3480b6bc5e4c5cc13413fdf99ce004f03880e8c74129160878645d7d4

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947d42c6d11ef820efe0070c7cb2b.png.compare

MD5 cf0fa1fea2792c7d8608899ce0460f3c
SHA1 3851b015b4a940737663208bf12cb3d4b63ebecd
SHA256 a2f21cb65f86a002b9aa424d257eb0babb5d1c7dc644a61dcbcffb780f1e7bbe
SHA512 09168abe741d52f47bc0168b9e23ce7238c8c17bcbfa23bcb6954ce0af0554b958f72d11fbe10e0b1d92463790046d8575a7310e3d80a6f03592c57e0edcee24

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c02c6d11ef820efe0070c7cb2b.png.compare

MD5 ef19dd8f73bea37d9e28e8cd85ee4e95
SHA1 4ef634e974a59fe976f2c2ec2e092f5b55bda9bd
SHA256 93b3a0f4e4b3da6e8af72d93df7785d634f0d0d2613fe000e84d422b85230987
SHA512 e9dd565c2c400f0136fe6978c9afecaf00a309263b94eb23fbacaf9c46cbc8fdd65c798653a8e4266668c287bef5144cf8cb62c1db146de73c6d27512897d141

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d409478c2c6d11ef820efe0070c7cb2b.png.compare

MD5 af5d7cfe5d7e4b1ba4300c8da123223c
SHA1 37b8ffc585211154f45b25c9c808a4d6abb7aa21
SHA256 06ea05dbe18e82bf32d87160c1c49252e9ca259fee69db6dc7c10c557efb5a4a
SHA512 11478441ce314472627eb38cbce87e176cc31d6ec3d7a323efb6b565a230ed92eaecceeee612d5e2586a5c16a4de9cbff96e64023869909ba48e7e38652c7768

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40948042c6d11ef820efe0070c7cb2b.png.compare

MD5 260bd07fb0a92af098c3e90a94b70005
SHA1 5f684de692e66a6396b048214de9715ed2406690
SHA256 def33c76a9f2794bd44e1ab9149e0b3bde4fc811f5c5da1287c5ed07d9e94da4
SHA512 1f3b288a086067c5503f0490b16369e516d6c54a6edd5780b38c366498e03003d9852ec5b4034c8437d926197a7b3916eea7b2e3024e935a26b4ffee59a14878

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947ac2c6d11ef820efe0070c7cb2b.png.compare

MD5 0c47baec3f396891e4e2e8c29ebf666d
SHA1 2e4d55e5dcfd5cedac7b6ab6c0ae65b4649863dc
SHA256 a3832962dc8ec8ce5b14e0318b5f023c77b23909f21f931f5b4caa13b0f20675
SHA512 07abad8641f73a0b188eef06cddec23f173035e68b60b96552bbff9060d8e6130b4c8a0ae8366109d3346987ea5298222be59b4d10e9f7ce1ad01fb956fc450b

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c42c6d11ef820efe0070c7cb2b.png.compare

MD5 693faf2293da633640b84c9c312f3218
SHA1 51e3bceaaee2ba0899d61915ef8be2f2a8279e56
SHA256 365153cff3b68adb415db38ad788318cec804a1af6d08a00774c25f95f95c28f
SHA512 1a42ebaa7dc3e0e2b352e4ab42543a33f015f8835fd833371cb188c342ab558c83e78c4fb4d298fd73a7b381f476c5408576478d1ae593c6de1127f11ac94c62

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947e02c6d11ef820efe0070c7cb2b.png.compare

MD5 a4d10a8b9dbce7598400bbbd96a11248
SHA1 c552286ca4ccb618856f107d738c471810f55118
SHA256 ee60b8267fabde8ba2118580b3935d56e5a4e713d3be115421a8909f666cc68d
SHA512 2d32aecfefae82d0c412dee11c66f7c3f23d4bc06bc88174ef84257728db4beeace4aab05b201c26ed514d64204524a234d0b8a921264727b3055e609692fe33

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947a02c6d11ef820efe0070c7cb2b.png.compare

MD5 8679aeeeb62fa5568383812e0ac272b1
SHA1 01a1f347695ab2798d55320778547f0b7b9ca202
SHA256 ef300066c5766a9b49f2cd05e28ae652c9878e1631eb4237517d16e0248b4ab7
SHA512 c8ed0b5c879aba7ea1f2b4aedef60e26d9c7280cbb405f3d087139f5cc24b49090cdb7b5f09f1d38e75e7f5dbb0959cb90adcc45014abc8fba135d731b377dd3

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947e42c6d11ef820efe0070c7cb2b.png

MD5 7aaf407ffb766e053c9b28f709a3f3e7
SHA1 c50b07c572eebae290fa468f9a8a08f527a20ba3
SHA256 9de1f826a03b6ffff317732179c0eb43f46a92d57841d8f0a2935399b6d45a56
SHA512 931926ab007fb5ba1dd09f10648e3305899e0cd737f04e704ac072ebe742de3f36a149d74f2de372961a67843c331f1b858f8fc299724d2dd40d4be2bf28653a

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947502c6d11ef820efe0070c7cb2b.png.compare

MD5 d495e09bd9899c0410c4d67aca1192ff
SHA1 22e0eb07a794c1fb2fa7127f2d6e30685f9b5f10
SHA256 f90e336bb5f46bdbd6144e81daa57af8eab0f752620c0cbd151b45fed1bc34b9
SHA512 02e188ff6c076f550d4b676dfa77a6da31a412c27f9fb09766f88fa56a7652fada23a7692e708f26202ab5110a12ad78eb6bad958354fe65e0a9691c1c4f0c75

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947682c6d11ef820efe0070c7cb2b.png

MD5 94fba1b8e6eefe15e24c056faf8e1374
SHA1 09034caefa7c1b636ebaf2c348b650a4b69b1e5d
SHA256 2d5188c272e8baf3116d1d0658e3658b24d451ad8f5828994bd41f3575d0e633
SHA512 ad634fba03fea5881b159109f547aebae81a3243e73a109e8bb60d12cb289bc49170a6d6bd01b86c32f1a9f4894cbd626fc390ff26c491402b5ce63d878fb028

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947e82c6d11ef820efe0070c7cb2b.png.compare

MD5 8d28624f2bbef4c8baaf6a5bd12f2df6
SHA1 c602903c238c976f5efc87d23b61c64dc4fc47b8
SHA256 6ee7344c3237c997088e7670a59b33a5e83ef6295aecfbf5d5f78743e62d0de2
SHA512 1727125c5b7997bec6038f2c1fdb25bd6d8d8626fdee96e5d0857f766336a1575fd0aa81d9db27a507fae957ba56b0b6076733148a5ec9a5df8cfe20cc320cf0

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947842c6d11ef820efe0070c7cb2b.png.compare

MD5 9ed2d40485665742942ada37e2cb21d9
SHA1 381c13c4d652b7ec66acfec57c5dbf232ac619d9
SHA256 eab18ed73cf49f5d87f62f4e7e6a9b921aff5eeeadf78002ba3e90ff225fc743
SHA512 958e6228743554fe55fe476305bbe27c3964bcae4099af9575695c1c29e674994030c5a5cb5e01767da90983b3f84ab36d7f9ef645e939d8d9af81415cfc87e9

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947702c6d11ef820efe0070c7cb2b.png

MD5 24fbc352a44321963d09c74fb30e9f08
SHA1 71fbbd923882741a17f35656231f836c59b03da4
SHA256 d848fbf20333fb1f097e7402a27e281e6109f8c1aba3f598b66e5c83dfedf30b
SHA512 1edc6a5ca9e4d1227b8ebfc79a6551c7f87dcce13b9981f57100ab482b4bee375dd653ac4245f3fdd83d13236819f62ed21ade3cd503c9ca35e9a6cedc4b4240

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40948002c6d11ef820efe0070c7cb2b.png.compare

MD5 5b742798ab1fc8c049519cb4dd18b921
SHA1 5b5f485527c249c3e25b2b464350a274731b3fcb
SHA256 d0123a03669748fe92585127ca0a22169fc2f5c7d470325750cd8eba74647513
SHA512 97d19e5e7d946ee03abcc9c73a615c3f8f36539c3e0408bdd13fe0881c51f60c7fe3fd6229e0afcd06f6fbd4dee904a6d7380b69eadf480fb50469bea63f8798

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947fc2c6d11ef820efe0070c7cb2b.png.compare

MD5 e79e37d440b2f15041f42fb8d170ad2e
SHA1 9d4aac7a641976229865fe66a3e834f8e6523b00
SHA256 c103953fc92d0f83f3112b753dea96bb7f4657f12edc7f44a613fb68cc436b2b
SHA512 cad8857e9152e1a0139708723f19a7d91d5d5152558281be6d6e09b52897c42f7e2f2853aebacdeab0b5fae362017f800e919e85c1420f127c3749f474ce7196

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947942c6d11ef820efe0070c7cb2b.png.compare

MD5 fbe1d79df53870ebf6112088300e58f0
SHA1 b5d31152645f03f65d7486908ea075987482fe1f
SHA256 57425b38f489e3d23fad976bd5ea15f07e84a2cc61ebac762e3e7be8e104cee4
SHA512 dbe6b96a35e73b1706d34698d0edb633e7eb573e8f4e66c7f4224aea0789ca427f9cfccdd1b3359796f0ba993d59e6d177adbcf14bf67c3a9a41b16a1a4a4924

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947742c6d11ef820efe0070c7cb2b.png.compare

MD5 09179b2a273b7d279068f570027a43bf
SHA1 0f7d5c0fc142df7819d9bbd17fabc5edbbc61b1d
SHA256 0af2b0f377e2f51306f6f8762d606944bd73aee140798c9454ad30cf9658a5aa
SHA512 eef7c4cac7990e22619bc7aa883f686cb8e832177749c3e7cf63b678f37b4bd67b77077639826fe115651622deacda80407f68e9a52853434be24103c375acff

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947b02c6d11ef820efe0070c7cb2b.png.compare

MD5 b9628e59ab7651c03511622b96a85b7d
SHA1 a4bf34ff1dda15b7eacdb591e79a30dec18d8a35
SHA256 90786c89923154d0666731c4218928854510fcc7668418209e7e6f703ad6b44d
SHA512 9461d5174028ab2c66e40e141d430189f7d947bb6c60735cd9d8f24ced44622707b6724b4a1b978828021c875aed3c6f3154f41403b9dc7cc9782077c07c4326

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947902c6d11ef820efe0070c7cb2b.png.compare

MD5 7897a6e775b8a7df7e1497ca0a55725c
SHA1 f669068631f969bbeccec324d15d8496de123d1e
SHA256 c0552f347d8bd5f691695d0daac5c15df33c965b6332948c4a5d37fb5d9fc3bc
SHA512 c6c39c5ea776a4066c708b8027a9cd1d9753b3f453e604cd07430c6a479b8533901218bda0ed23fbb8b915b815919c9e87c04c73535319ad3997bb7a1a9b210d

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947dc2c6d11ef820efe0070c7cb2b.png

MD5 733ba1e068c54b515de84138eb8d1bc7
SHA1 c8c490e701938a40845841d1a9555396f87bed15
SHA256 1946dcfb5ce19326a1cdaaa999dcc7ceb644cc476c929781c7ae82463aebdff3
SHA512 ce13a0ef21368c4aef79b86b1a297f4ab7a106b409ead0d6228e2ad2327185c6ac6d513630772509bf4cdabf484c1432e9702e9f3f6f98d26f30005f4805d586

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d409476c2c6d11ef820efe0070c7cb2b.png

MD5 10a1bb383ede50079e3cfd59265cda13
SHA1 5423ae3c1fe024e16dd6d294e8bc3a99b274f54c
SHA256 c92e7046dc063a313aa898f74c52cbbc878a9f1dcd2f61a526277aaf7bcdb58c
SHA512 ac0ca7f331625df995302bb6a2e39aba2ffe1fc087e300f7dbe5ac31f8d137c7ce42c227dd92a7976fc4d02e198c78655d9f684dd610a3d1aab4cdd0ffd9fbf9

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947b42c6d11ef820efe0070c7cb2b.png.compare

MD5 46f8418c8fff05fdfaf6e1dc11c6df14
SHA1 de93b619e6838789e14e7b243b6c9eb4028b5209
SHA256 29dc4d1956e5874ecd46aee57fbd5fc9156e6fe921c9029d7d32534ebcc15757
SHA512 08731185412cf5ce26c34f387db85337a0a233b67f63cbab3081f050225c82d85921a31f2b520fffea0d2c562b88bfb09d8d1489f1e36573e41f1c0cf9d298bd

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d409475c2c6d11ef820efe0070c7cb2b.png.compare

MD5 27666a793fa11760547454944f089546
SHA1 a3166a4a1a04891d2a30d7988f6ae2be5b5608db
SHA256 b14f658cd0f545e53148b65dfcf3b9630ef2af84cbafd6bfa48f8c165a2500bb
SHA512 b56ebb454a360ee4bc65e655adef136a1950a015f136b756b8059c5bc13e8df7914045582a5741651ac6a80f3ba35c6801b92a106fd2020caf1f444104b64a25

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947882c6d11ef820efe0070c7cb2b.png.compare

MD5 4cfd972eafa570bf413ffeda38a2998a
SHA1 d201de25fa1fd9cb5fbe00d20d9aa1a133112af0
SHA256 f631813b8fc8f1a924506c6c47013c54de6b9449ed49410a6d7140e8d13d374e
SHA512 35a19ce52280dc98fb256d92f4b4296a7e1bfa0ed1863110c9d63ccbe6f330cf856bbe306b8ee4e2ee32e2facf30f321554ae9b0f10d635179182567f401e691

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c82c6d11ef820efe0070c7cb2b.png.compare

MD5 e418610d2901a954c45ca7d8d14def94
SHA1 50add435db112f4633f05aa82e6f8dfa6b89c09f
SHA256 2500e33d8ac3ab15e60e7b98b91da9b298a777c41e2def355e7a173f910d4765
SHA512 54ee32888a7021deb59d5294c9eae8f0a44b7fbf7b1456783688ae65cb30febf2d7c87918864a418b609139c73e4fac054ec4b291b4e55ec3f5241104422b450

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947d82c6d11ef820efe0070c7cb2b.png.compare

MD5 3a670beb62b4747b3849eff8c9f4c70f
SHA1 df6478e621b48caf30b4bf2e2b368a16a9db6a34
SHA256 031deb36bec54d383b1477b97cd0996cecac8694097815f43f1ef82197dfad05
SHA512 e5f59e499928f36e4b88c64b9b5d4f1e79eba2d4d3b2220722f34cb416ff460e4c3379f7b32a512b1db870d3ed3fbee460f9fc7f6f20f73d4941c8c259c67c1d

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947f42c6d11ef820efe0070c7cb2b.png.compare

MD5 3146166ed1fd8057e2219d03b8371493
SHA1 5c48ea6d05b84d7d606749fd407b6b32ee1e3946
SHA256 dc29d54b597088a3807b862f3eee3c0694093e18bf41b5dc0167781ee49db8aa
SHA512 5467d58fca53f1b4dad65e97ca81adbaeeb8333623d64376d636784a0494688e3b7b51e7e638ad1299719feb33e83050c35c4e4cda50dcb4fdde8604676e65d0

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947602c6d11ef820efe0070c7cb2b.png

MD5 b4a97d53477cf158ef942c8f5b789f4e
SHA1 2c42fc964095f50fa4bed1fd3603186fd668f4aa
SHA256 a3b566310c8b0278a64ee6b3081b86f17b18d0ea4e5e6eb4d321c5f7150575f6
SHA512 d40036623e753948ae37db2f0a0896ecec84d449e876e4d7fb78f57eebf23fb75df9eb66e01d6100781ebe5fb16dea497839e56d6ab4a89b9cafd9ad17f6cb82

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947642c6d11ef820efe0070c7cb2b.png.compare

MD5 df7a4fa395ad23842a01a678994b50d1
SHA1 aa88706aff04026caca74dc352c568cf4c92fcf9
SHA256 ccc44bdcea482f2f2fd89c6d350071ed0e5879fe46693a0dc5792192c14a9178
SHA512 e5dc4c54821990825a6eb9c415519a38f4c5a214a7a55540a4c6bef7aecb86137e4bbbc70026707dbdde4a3e30f5c4ed825b2a0b5c594c5f5e15e632351aaaa5

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947982c6d11ef820efe0070c7cb2b.png.compare

MD5 11e417a7c7e8e521a08e89b16a32d72f
SHA1 a95dbea84abd120d8dd1c165b492b5177a68091f
SHA256 62382b0838d765fb679176f1ac17e7367dbc27469aef0a98e468ef4f853aa1bd
SHA512 68f17b04936d662fb8fecdac9faaa60cf078a29c5927915c13762b3a605eb64198789301baf093eb2d4035cfa5855b86f96bab9a8751371f8b42275923677935

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d409477c2c6d11ef820efe0070c7cb2b.png

MD5 409f205360f9aeadb925f46f4f2a5ac7
SHA1 118b94885125d199ca27b32ae5d30e51f867d26c
SHA256 03799be4d9b5c71541905081ce2313ead4bad19b92a2d2424bbbb1439ed5d04a
SHA512 6a476ef92278c1d996f0b604947581faa1ec43d11e2945f7dbaa73f7d76ef621238fd9bce56c16718767f236de9a281838a7206e304b0efaba487604bc0815c6

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947f02c6d11ef820efe0070c7cb2b.png.compare

MD5 2579f652f6b72b8ecd0827a1cb5aabe3
SHA1 28ff9845c552ed8a7795a5874d605f9f9226bc8a
SHA256 1a48255e4215c3f8d6c1d6cba030a20cbdf0b1ae2a20e63867289a43fec3634c
SHA512 292988f44e620069257f292cdc6fd9f0159ff43549968387c35b71889d6ee14f566f2ab6ae091cbcff9b36ce8c9f92965a4b1c64216b6acadb81aa661b73c577

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d409479c2c6d11ef820efe0070c7cb2b.png.compare

MD5 0229372d29657ac6d0135ac08397accb
SHA1 78122e76f3c49bf24e8e5c6f633b7dd9d7ec560a
SHA256 c86840c87e1568230fd548e92f79ddb25e43de4f23673abf2223e857370e2830
SHA512 dd89b26fb158f5266d57f52f2c836109b7966e9d7369d5737f949ba33863b1a8b510df7f3e3d7c6a49a243f772b49f7ae4c3af7fcc8d5088e965adabff3334de

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c12c6d11ef820efe0070c7cb2b.png

MD5 6000ddfdf3fce7835f5015967c59873b
SHA1 ea23105290a9ab15ca6da5e776b074d88eea6c27
SHA256 9bd53095f90c0fb8036827a6600889df8c285226db165064c604a0863ef962f6
SHA512 7b451511352b21bc348e2650eeedb05470dec87fa014fb145c6a446687662b15d24a714a66aacdb565c9c624878a9697e66a2ae9aaad20f544fe583a73937fdd

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c22c6d11ef820efe0070c7cb2b.png

MD5 2308ad5bb0358ddf407646485bb5085a
SHA1 4eaf154e5d6c4bfb1ed745a2756944142a020275
SHA256 4a410f995920f74800f3a2522a68d556496ea458a2b4ae18731ff087abd00a7f
SHA512 e728d794a6ca684fb788b78ce9d34f25ef2e108b73b32e55c230ed0fed32955dbde395bb98d5d970f70139e9160656d255bedb1dc64f2cc8c879dff4a3298f8a

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947bc2c6d11ef820efe0070c7cb2b.png

MD5 1dc6fdc4e1b4a16f34c7976d6b61beed
SHA1 08fa47f443b90af06af262ad17af939c299d20f8
SHA256 06da4b271dc75933392edc91ced6897d36c752228f8e739b7ad3423d15b1599e
SHA512 366695b3550cdf1a2b639b15b71504aa8dcd7294d5def992caef550b8e4d44bda4166b24d98768bb1bcd0d6739f20093445a3cd639cbbed55f9ac498c63ab2c1

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947cc2c6d11ef820efe0070c7cb2b.png

MD5 f08ceae28618ba55cef1ebcbf954a628
SHA1 d8524df8efdacddfa8d9f96c1086655b7657d39c
SHA256 e6bc98021145873772bac0fc4aca7a2a63dc5c535f93185d6ef8497ad748b18a
SHA512 0dc758ee4e28aa74e13a768117e5f5067232fe4569fa8877a4644c9d6fea7023ad059e3239f68715a963232712136b3284b8b65a72b026a602d76719620f4037

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947c32c6d11ef820efe0070c7cb2b.png

MD5 544e64ae7b6e476faba0e0ed17dc9955
SHA1 7200869d7b9c66de1906176114e4961d167b1c99
SHA256 6d39ed16ad4dfc9bbb3611f171067356ed1f9fca99141c87e93a1e0120e16afe
SHA512 8af74dec30bbb5615128a5be02f803cf665e9fa6cf892907889b3f8af61dc2008850fa5e74ea124ad39e45bc4b4c5624c5fc48114da533877e0a2c5b65cf5eef

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40947a82c6d11ef820efe0070c7cb2b.png.compare

MD5 34502e147705e3e2fddb6297236816e8
SHA1 74ee02c9f7aeb5c49cbde7bb324c4b458e72904b
SHA256 24a3a9042e1ee7719307850ed29a4359cd7d9a0ca08d76af047282967bd06bd6
SHA512 76e053593fe9b11efdcd41ef8e87ee5e44d79a12dec5f8f0a8df8afb9dad4c594c4e8dc4455d8b92e1d6f6593833aa7824464f14b79cdb13d9d3a0538f0fa20c

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094b932c6d11ef820efe0070c7cb2b.png

MD5 96ef7072c28709b2029fda569a02e570
SHA1 03ca5bdefc36b82f11f5531e8a51cadf67b714b8
SHA256 c6bddd602ed9360ba5a735357627c13c114be90eea479410a61ddab0c3b9f139
SHA512 dfba33992c69432ef538eacfeb081a1ba89cd2ca3f609be247f1fc48a4d7a4d385b15b99f46f7b1f57d9cc298ed37a1dbf333f68238b1ad67aab82de20153801

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094bdb2c6d11ef820efe0070c7cb2b.png

MD5 7c322ae182958e0c56ee4f9a3ba27242
SHA1 cb834da77e3cdd93702cb0f347c9cdef46f31012
SHA256 cf2ae9611873c7ef74d845cae182744f2f60f36bbea1920c12de15dd66378ecc
SHA512 bd428ed2f7961dcdc802d2aed4c839a51180cfad75955c9c57baf9443b1f23f9168e8da7c8bbf95719e71401eff7be2e3a00dde6043f2a7eda034a94232f3fbe

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094bdc2c6d11ef820efe0070c7cb2b.png

MD5 296ee8ffae6cbc228c11a3db3a06af3b
SHA1 747e7c5b13125efc0aa5c13094a9839d93687e75
SHA256 e25f156afd51ba86ce6d9ed33d3f0900f7efeddfe6ed940d1a87feef882e011f
SHA512 0ae82bf3b19e5514756a985a2f714bc4424a9ba867c568d9861978fe4637a0559f1f69d0b7cb58c2f1ea987d548006f8ce399e6de8e4e8807efb5e9205a03b10

memory/1964-2610-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094bdd2c6d11ef820efe0070c7cb2b.png

MD5 d455e4495c4799ef97680d9cfa98cb85
SHA1 7434384288466acd44cb2453da269d09e65e3cc7
SHA256 ca427dd51c70e5e7bc0d5dcf2b2a29fd63529e4b7d9a08cde4ecc41e889badc1
SHA512 d80fd5632c613b9e8363362fb3eca7d9357eae4e54becc881565731cbec726d59262345fb63fe6a953134b4370b79e86b1eb7c9291b3a22d2f38ab0b3c0f007e

memory/1964-2618-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2622-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2624-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2625-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2623-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2621-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-2626-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094c3c2c6d11ef820efe0070c7cb2b.png

MD5 bd6d22ca1617d4d6594bc59ebd577ff4
SHA1 520e595492f8214b8a2e20aa76de323220429055
SHA256 65f2a673da464095878dfe1d94043ad242acd151ed7cd3641c96875c098d3522
SHA512 b4d69579b8b28dada58d14b5d082a7b203a290324727fd2f309a9c2e2c4ea1a1b3a98876d74dfee2963f7006ed9319ed93131628f4862e0f82d073247cd6c471

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094c3d2c6d11ef820efe0070c7cb2b.png

MD5 a1fb16fb73739d9f0bf9b1123fd3a734
SHA1 149af19c3296bf9993d4e0ded7617582c2501006
SHA256 b5371325df11f175bb21fc9f9d827a4314ff28ecf7846df976d26d8046ed0041
SHA512 4146400e8cab0319107c5f96a1edfc3968492c9b7aab2170ea65f27efbf9a9565b6134df0fc05d8cfe2ee641f2df3d25d2c49df269954186e1b5fada0fbea57b

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094c3b2c6d11ef820efe0070c7cb2b.png

MD5 8fd601909484c953bb7987b888c61691
SHA1 3989a87d56c92d09a17b5befdec1ccf07143ad94
SHA256 f5fa1535df7c76244faef920b6a6b84cdbad37affb3fd855e17759a00da0f814
SHA512 51845af88d9f4bc6bea9107f4953e7744c8a936c644ba16eaa6a0e535bf7842a1fc847f7bfff1f24192c4737c6a11a93b43a4075a993f2d4d4ce6bf4485141a1

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094e3f2c6d11ef820efe0070c7cb2b.png

MD5 1e93c63b27175215d330f71df243ed36
SHA1 bcb8444e0aae425978b6e7b75559255f9fc6b6bb
SHA256 41bc2267ce6c52bd380781177601275f4f4baf85d15416c8b22c5710ed201e66
SHA512 cb1e8ccc6305cafa023743aa9c94ac294ba19d0ae10f8dbbb572829ae53e0307c7e70e1096128d7ed5cbc577d298c8cb1238e4e9aa47771443f9091e4bd141ee

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094e402c6d11ef820efe0070c7cb2b.png

MD5 d92e99ab213ee4c655ed0d6618ff288e
SHA1 354037d41bbaa9a21d4386f381a0f75e8480ad19
SHA256 90edc17ff5ca4d6a2e265f4473563334a7e799da4f45f07b6188c8f4f418350a
SHA512 c269799d949b37e35bd0afa76d6985f4e43a3b331a6667922fe06518a499eb4b4b523dfea6caefee0c4a17fe428c1f565d35e1163aa8db831038cc6d7450c530

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d4094e412c6d11ef820efe0070c7cb2b.png

MD5 c7eebfbe0f0be67844c202809a96a2c1
SHA1 373211a4fee1f30f52a13a45a786bbb91180d121
SHA256 6b85ddb9cd429c8f189246cb1287b8cab6e8a56dd33f89a51264061eb3b4f14d
SHA512 7217f46dd7b2cf36173b74aace179e3a3dd9c00e96464658a5710e2b0cbb9d7018a937afb1a02cd01c5401ca92d8947a160206fb8d67359ff7b814f3a79c2c17

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40949282c6d11ef820efe0070c7cb2b.png

MD5 a03c8a0cbe3afafd0c7df0fe7fb2c158
SHA1 effd24683b92339866c9f1ad61ec1d20cc36e214
SHA256 65c6cd4decacf068b7b3e3f3f2de0e469e6c9b4a32919be06390b149ae3edbd7
SHA512 2dbc68526bb06fa5cdd1cf0c7a1e39b6bcef426ca13ecd57ef660cb4a3f8350200c93ddae0d3c958a54673fa2d79d8c22769253260db02a418d72e1c60999b42

memory/1964-3501-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3502-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3500-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3505-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3507-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3506-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3504-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/1964-3503-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40950ab2c6d11ef820efe0070c7cb2b.png

MD5 05e51550403e756769c58d9c1036ecf0
SHA1 63d4a86ae899d30f890fc84ea2ffc8a8370f05e4
SHA256 be24a4cb43d7f97cf562595c98d045ca1a3d5457034a83b3c456cda8d3211278
SHA512 bea21e997fc4682ef733d1707cb6f4a1117c62b4adac2879d90d1c0e668efbb874b60758032200a528180b53868c054f2b2a527e8b5dc99d1a468e05720088c5

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40950ac2c6d11ef820efe0070c7cb2b.png

MD5 d0d6b10dfcd25b6f18491e78d2094f2d
SHA1 b7502b9d6b55803993545ca61ed744ab2fd7a286
SHA256 066fd4358a2cf5b38c56c7566724d26b3c3466854d9c7b826eff8a36f7ac9e7b
SHA512 338690476866f5f9190846831cb7b6b48fe636916e24a999846f56044a0ba7daad940f2916a841229dc2b5e2902569d25a014e823fc89c0d5ead180477ac1004

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40950ad2c6d11ef820efe0070c7cb2b.png

MD5 9de7dab6f1c9afdccb98f7f431bed522
SHA1 4224b8bc686430b6700838448a6ad2d0275bc252
SHA256 666fdc82535277111ba66043d1b666fcb8b050c9623d0400182755df7d5dcdb9
SHA512 a55aa8cd53d4c9a8be31d7aaf518b88f8f1e8df47e39d70a8edf97f1c8759f0bff3f97d973db9ed83de14e1a486e178f7c6b501a18307e274a634eb9b0e7656a

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40951232c6d11ef820efe0070c7cb2b.png

MD5 a9271bc5204a7b2c9b013510624807e5
SHA1 2a337424bd6b5a1c71526b4286e08f3237b7b194
SHA256 83b2ffea7ce890626ef8db5a8e087cd4dd6f0680d090aad6b6fb0bcd54aee94c
SHA512 c313d97a23bd404b5ba2e312e76fab3dc6a7a998638ce38d82c87983dc0eb0714a84a6836fe0bab31266deb3f9b6fb29bfc1f003e7c6c3e73f29b7e8efe69c32

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40951242c6d11ef820efe0070c7cb2b.png

MD5 5225f9217c4745edbe95af119c9e0ee1
SHA1 529fbc3fb4ca4d0cf2a244b573f57ab3a1a22e37
SHA256 0e3712fdff533422e544576e5beddf8855d043808e5d94ec3cd976a915e120d0
SHA512 a21a71fcaa43629881445c9b0621d606c57f4e1c4fa3ec1366991bd8a29f5d7ecd4a7b68fdc2c6f4f5dac6a76bf07cfde6725a4daabfb613b8bc4b32b3cffb5a

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d40951252c6d11ef820efe0070c7cb2b.png

MD5 887b642b2242d057299d47c0df28c7f3
SHA1 0f28ff38538bc6b007418aef2a4a96f820fdbb81
SHA256 af5a4b556490cc6cfd12bdda60ee48cf0bc097d3651c14846f1aa212f02f714c
SHA512 184d4e90e15c4bbda781f90ed1dc4f705088210aa45833cc9728284364d8680cfd167804b71ceb4de23dd84faa430fdc64d24b1409a4717c5f2b929996ae1887

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 c6d1d5dc47f798485b581cc1c1e3436b
SHA1 6cf85f0ac9852d19e0df421ca61b2ea8ed2d4d12
SHA256 67537296604fbec1f920957d4ad4b208619be10477d21fa69e74147295a87d60
SHA512 7d7aab69248ee37fa5b6040278a94c3e9925d0e4a4012c1a3c090f1e7494ef7d0b6afb76c0ae115a2361f9624c6a7a8f921105ecb04eab90ccf1bc75e639ee41

\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe

MD5 503884d4edea4642bde9bb7dc438ac4d
SHA1 00c92b474b309a5643542cdf9a761a3fb7b4ce46
SHA256 5cc15907ebed8e7a1afa47693d5181fa8fecf79d81c99f8b5c298a8416bf2aec
SHA512 e6d6223c72fd8da54e86e741854d1c428d584b9e21561ae01345e1bcbf8f8212dd21b831fc0fc37855815aeea03a1141a1f1b48ef7495e427b8ebf890f2a8e7c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk

MD5 1babec6543a6dd9b078a3527328c8e18
SHA1 9d518b84df6db1c8a05c1e6db809375cd3528f98
SHA256 3957da1ed1876e594528a639111310b6a9f1ca28b2f1acc96bcb03cdf17cea44
SHA512 0418fe2f24504ce6ecd340ad6c0d5c8040e24e6366c3b677cfd6a5d1fa68de1fdf223df5430cea6edf7bb8a3a58bb6fb00cfe3c322e6bcdaf2ced562f4bc2baa

\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe

MD5 975e50a6a7987c4daedb504fe99a92fb
SHA1 5373cad041a4f508315aec0aa1ad9cc2e095dfc2
SHA256 4b7b6fef62293e81f274b496068bc83dd06b7cf9a21cbf3be6efff6029b44872
SHA512 c351a77d06bafce1adc4226fb283cce9ac28bf6de2bdc41c5835a2eedc30c72e3f2c360746f501991d05b8fd7b05f61f3c5d7206881929fc0dc49db514823817

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 7947a794292449bbe0f25fed9fcd39a3
SHA1 281b3930d3e0e399bb0a05c9d31332bab2595e8a
SHA256 5e1167613cf8ef6f89a0af8d077c44d17ea7a7e8ef4929239341f65c890e1f84
SHA512 412b59944b1363f663155855f7b462f4f02c0649a8f0a6f7052672c72ecfd69d6d6853b6e43661d814340059c0cb59f6d99f8849d8e2db7d060b3b107a60a2dd

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-17 05:52

Reported

2024-06-17 05:55

Platform

win10v2004-20240611-en

Max time kernel

93s

Max time network

96s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe"

Signatures

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe N/A

Checks installed software on the system

discovery

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-10#immutable1 = "Choose which programs you want Windows to use for activities like web browsing, editing photos, sending e-mail, and playing music." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-3#immutable1 = "Region" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-2#immutable1 = "Change user account settings and passwords for people who share this computer." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-159#immutable1 = "Programs and Features" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4312#immutable1 = "Internet Options" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12122#immutable1 = "Windows Defender Firewall" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-2#immutable1 = "Customize settings for the display of languages, numbers, times, and dates." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-101#immutable1 = "Customize your mouse settings, such as the button configuration, double-click speed, mouse pointers, and motion speed." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\devmgr.dll,-5#immutable1 = "View and update your device hardware settings and driver software." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-2#immutable1 = "Recovery" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-51#immutable1 = "Date and Time" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\RADCUI.dll,-15300#immutable1 = "RemoteApp and Desktop Connections" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-2#immutable1 = "Check network status, change network settings and set preferences for sharing files and printers." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\systemcpl.dll,-1#immutable1 = "System" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-1#immutable1 = "Troubleshooting" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\accessibilitycpl.dll,-45#immutable1 = "Make your computer easier to use." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-1#immutable1 = "Phone and Modem" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sdcpl.dll,-101#immutable1 = "Backup and Restore (Windows 7)" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\mmsys.cpl,-301#immutable1 = "Configure your audio devices or change the sound scheme for your computer." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fhcpl.dll,-2#immutable1 = "Keep a history of your files" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-1#immutable1 = "Default Programs" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-101#immutable1 = "Recovery" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-7#immutable1 = "Change advanced color management settings for displays, scanners, and printers." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-15#immutable1 = "Troubleshoot and fix common computer problems." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fhcpl.dll,-52#immutable1 = "File History" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-2#immutable1 = "Configure how speech recognition works on your computer." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-601#immutable1 = "Indexing Options" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\Vault.dll,-1#immutable1 = "Credential Manager" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-1000#immutable1 = "Devices and Printers" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\systemcpl.dll,-2#immutable1 = "View information about your computer, and change settings for hardware, performance, and remote connections." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-100#immutable1 = "Mouse" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-2000#immutable1 = "View and manage devices, printers, and print jobs" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-1#immutable1 = "Power Options" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-2#immutable1 = "Configure your telephone dialing rules and modem settings." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-602#immutable1 = "Change how Windows indexes to search faster" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4313#immutable1 = "Configure your Internet display and connection settings." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3001#immutable1 = "Sync files between your computer and network folders" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-52#immutable1 = "Set the date, time, and time zone for your computer." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\RADCUI.dll,-15301#immutable1 = "Manage your RemoteApp and Desktop Connections" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-1#immutable1 = "Speech Recognition" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-1#immutable1 = "User Accounts" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-102#immutable1 = "Keyboard" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-160#immutable1 = "Uninstall or change programs on your computer." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3000#immutable1 = "Sync Center" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sdcpl.dll,-100#immutable1 = "Recover copies of your files backed up in Windows 7" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fvecpl.dll,-2#immutable1 = "Protect your PC using BitLocker Drive Encryption." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\mmsys.cpl,-300#immutable1 = "Sound" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12123#immutable1 = "Set firewall security options to help protect your computer from hackers and malicious software." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-103#immutable1 = "Customize your keyboard settings, such as the cursor blink rate and the character repeat rate." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-1#immutable1 = "AutoPlay" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fvecpl.dll,-1#immutable1 = "BitLocker Drive Encryption" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-2#immutable1 = "Change default settings for CDs, DVDs, and devices so that you can automatically play music, view pictures, install software, and play games." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\Vault.dll,-2#immutable1 = "Manage your Windows credentials." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\accessibilitycpl.dll,-10#immutable1 = "Ease of Access Center" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-2#immutable1 = "Conserve energy or maximize performance by choosing how your computer manages power." C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\devmgr.dll,-4#immutable1 = "Device Manager" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-1#immutable1 = "Network and Sharing Center" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-6#immutable1 = "Color Management" C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe

"C:\Users\Admin\AppData\Local\Temp\2024-06-17_dd068a3f36ce57c80e9338013bd05d2c_mafia_magniber.exe"

C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe

"C:\Users\Admin\AppData\Local\Temp\oct36C0.tmp.exe" /S

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe

ServiceStartMenuIndexer.exe /PRELOAD

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe

"C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe" /LOGON

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.pokki.com udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 104.17.72.79:80 api.pokki.com tcp
US 8.8.8.8:53 203.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 79.72.17.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.pokki.com udp
US 104.17.72.79:443 cdn.pokki.com tcp
BE 2.17.107.104:443 www.bing.com tcp
US 8.8.8.8:53 104.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 analytics.pokki.com udp
US 104.17.73.79:443 analytics.pokki.com tcp
US 8.8.8.8:53 79.73.17.104.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 144.107.17.2.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\nsy4F1B.tmp\System.dll

MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

C:\Users\Admin\AppData\Local\Temp\nsy4F1B.tmp\___ocnsis.dll

MD5 bea3bdb7df888a7914181994af62baaa
SHA1 a7e3a6ba00f3a29bfcb052435b380300b9c2cc2e
SHA256 ef603dc803845bec994a01008800dc27b1c7764779957756ea758d7abf4d16c1
SHA512 9ecfcee5e56ea07c50adbdd68587030cfc249a2743d7f188d6c345ac5401e1c18377ac212b0e1161d8dd0207c02484e0b962dfc5397ac89182684413aeb9dcce

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 3caefb63c5e8b2141ddbafb2bea5ebcc
SHA1 c8b6757f6ac007264d73de3532addef9b591057a
SHA256 abc356cedeb7f1519daa3e9295b007bf1672b043f8dda0d2cdff37f2e9fa1da6
SHA512 4a51250ce82cd4365817c608599b35d5e096ca39c68e4ae18ca5112e7650afc38fcd5c77f8a8787e1ac80eae0b3550974582127b1adbeabb095a68fdb2aeb343

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe

MD5 da1032987448c5271e1d90e39ee991f5
SHA1 df9b8780c10de47f8c829f419ac107c7d0677682
SHA256 d8cae77dccaf4c3eb1e943f257204bd09084d810c90ad90ac20c318e4261e80b
SHA512 78152652ada500216f755ea8323a630f8c92b3894e21bfc298915df31eaab5f88723a3d2276f81635477bdc217306812220b5f5385a4075816c9992c45a63c2b

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 1a861ae5cda464c0ad588eeea8804cda
SHA1 4629f6a4f535ea423b5be08c6876366e0e0498c2
SHA256 8e0108abf73b71079649fa86adee626bdbbe5638854ef110f336200f4a13b53e
SHA512 69ab87ca2e6d167236edf41afb9c2897056776282086392b49c1300a1d80db984a45e9ce50060d62e70388af82090143b0a715fa5b38f1efcc5cc84933132fec

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019342c6d11ef9d11cacdd8b22a4f.png.compare

MD5 62d26a02c8f82b63f409dd9b03770272
SHA1 50d2c50caa398744334a3a597636204695fdbb10
SHA256 3ec4a260dbe807de12b4a78b8cd7145b5c110d53b6fb23222232c396c4c30307
SHA512 364b6ee92720280d4672be436795d20819b7868199c27300350a9afc89d41559f251bc31651f91b54569fcd0c8d2ef70ffd97424b7852bfd7e43be1ffa17bfee

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019702c6d11ef9d11cacdd8b22a4f.png

MD5 be79cf3367a8e4981cebf89afd21b8fd
SHA1 922622b173c68d69a48d856e8b71ffb22ce14cef
SHA256 4e0630d842961a0a8b1095f80a4167f5672ea5566f54ae841170e46b9e6403e1
SHA512 f070f187ed5061a8566e3485c01de6a11e31628713c6aa5b0c3ac67e4488a8e2586d62f85d89853ce12775cb912bca142bd78a0fa1425b98d50c96c1110174a1

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019822c6d11ef9d11cacdd8b22a4f.png

MD5 1e93c63b27175215d330f71df243ed36
SHA1 bcb8444e0aae425978b6e7b75559255f9fc6b6bb
SHA256 41bc2267ce6c52bd380781177601275f4f4baf85d15416c8b22c5710ed201e66
SHA512 cb1e8ccc6305cafa023743aa9c94ac294ba19d0ae10f8dbbb572829ae53e0307c7e70e1096128d7ed5cbc577d298c8cb1238e4e9aa47771443f9091e4bd141ee

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019832c6d11ef9d11cacdd8b22a4f.png

MD5 d92e99ab213ee4c655ed0d6618ff288e
SHA1 354037d41bbaa9a21d4386f381a0f75e8480ad19
SHA256 90edc17ff5ca4d6a2e265f4473563334a7e799da4f45f07b6188c8f4f418350a
SHA512 c269799d949b37e35bd0afa76d6985f4e43a3b331a6667922fe06518a499eb4b4b523dfea6caefee0c4a17fe428c1f565d35e1163aa8db831038cc6d7450c530

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019842c6d11ef9d11cacdd8b22a4f.png

MD5 ff322d763ec1f410fe65de234d587909
SHA1 08e3fe6409f344890a3a75eb3b36e1dd5a59f75d
SHA256 03e0db119333cbda7c2a692d414ac7e2770e97eb373998cfc9e6ea9bfeb22104
SHA512 26a08d792f856fd12bc11897c7f86c8dd2b134ff990e854fa83ad59b8b4a471b922754b8d57c1c1f5bd25822dd2c49fa5733e50627d79ff6a8a46bfee93ec457

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b019b82c6d11ef9d11cacdd8b22a4f.png.compare

MD5 52073ca1be30dc0807acf7459e3a3d8e
SHA1 fe56a698e0478f30d19058394735dca75efd9ec8
SHA256 7fb86e8afbe25ce25b07524e84eed5f7f6c656afd3103ddad4a80533974acaf0
SHA512 0b973ec70be9968d298ae2cce622200d248695459c00c46dd70f8f1814fb62826539cf99b744ed7660f5b5c4b81f350b5afbb335312739b651354eb2705f3c3d

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017f12c6d11ef9d11cacdd8b22a4f.png.compare

MD5 0c618eb7fc772cd238017e84a21a88a8
SHA1 d7ed0c390500bc6869a507cc6dbf3f729aac887e
SHA256 1e3a4cf80be3b203f1c2037b9dd940731d6a2b8f1709ab04834fea1e53220812
SHA512 49bd1921746a7ca9b83c9ce191e602387d2d93a798fcbd9342ab315dda7eda7b3cf9a7698fd7ba1e56c87d51289a5b3a18d0820f4b5ab104dd76a90e062818f6

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018092c6d11ef9d11cacdd8b22a4f.png.compare

MD5 851d2c4d0119dbfc5e2da4b05e6e3f48
SHA1 610100221bc7fb32230983b48e3f11b8c72554df
SHA256 f2793b70e8ed1c7ffdc02bd4e5e83a94dda0ee9d30995396b729d74315c2d1a7
SHA512 e2e509ed5a37734cd36473a6996056e420bf0ba687cff6ed8ad429f1152436a2802c0933752b55c445452f9319faa8aa677feb207c0896184ef5a17e22aea628

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018212c6d11ef9d11cacdd8b22a4f.png.compare

MD5 b0e099d59b68278a221d5ad0e0358d72
SHA1 927d01d9488f49166c7c628d7496e8f0671fa69a
SHA256 ecb6e8c5def4c27b09533b7f3bd140b1eb928da0a905df676589ace2fdd7f8a2
SHA512 61c4047ca8bbf7936035fa097b80091b78cc733c299836102698558da855a5dfc454d53bcf4ee1a4c950f911613190455f52281eeef27a2a79b7c141ec814aaf

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018192c6d11ef9d11cacdd8b22a4f.png.compare

MD5 e167f54e12462548e9134434c085b2a1
SHA1 58ace4ba5a71d15db04f2eb62cb7d41f039ba4f6
SHA256 e02536a4279072c13539a00f6378fc44e021a055485520f8c988a0699962dfab
SHA512 05d7e0ca0082a8ca6ac642d4878f8d8288ce648f334b16b4eca8d1ba605dce3a396b66118b942a4d429a723e151cdd9efdd1eae53a120e04cd66586c9b35a399

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017e12c6d11ef9d11cacdd8b22a4f.png.compare

MD5 5f916bfe3d914b43934342c8481d227f
SHA1 6d17ed159fbb62f768da8cb5d6c123527e95090b
SHA256 640170ca50156b97a584baddbb81374e3b56f37c5db32605351b8886de56eaa6
SHA512 5415fcb1ea840320b4bd2dc108e9ad2ea8903ce5cfe1deeb6f0360cc323efd6abebde188eb541ec84e6ab2c1524a274a0754199af2ffe47eb61f12a6cda19932

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017a92c6d11ef9d11cacdd8b22a4f.png.compare

MD5 9d3a7815aebefca02c1fafb0b7fa87cf
SHA1 3052ad2feef0b2d211b51c8180e8f77782aeccfc
SHA256 601333277a511e3e079cb71acf743419496a5e430f89cdd8b0cc93cde9e8f8b0
SHA512 955f651b805fe7db0cec8a6970f3dbc466e711c8ff0150b9d744f53ee905d8c85b8f811dbf99b1d60b1dec32d09723229b0d6611d9ee377743a4fdcb2638cd2f

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017fd2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 a8320db85f8650a85953d8f375f31d7f
SHA1 5051406133fb903094334d2a44ff3ad35d89f240
SHA256 7c4c73eab72c234b1220bac99a4b62d5ae23455be5740d4d6e0a07ee8617e1dd
SHA512 23b7f7fb767d597b189aa819ab54377122704467d0b725ca18208c57e0de31fa9254ecb0fa094e95d764d5a78aa1ca7a960a4268fa7de469bdd7e302bf26d750

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017c92c6d11ef9d11cacdd8b22a4f.png.compare

MD5 57659d81293e851d6211392ced456e7a
SHA1 4556b8958edc41aba8f64ebb3b0d9674c6348db5
SHA256 83d8869e2ea0de994d785bd482a522bfbb23bb3caac44916f0697aac2b4653cb
SHA512 74ef58fd0c405318ae570ac73bb82706c520627ef1aa9782645001ff57145118f27b73a3480b6bc5e4c5cc13413fdf99ce004f03880e8c74129160878645d7d4

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018292c6d11ef9d11cacdd8b22a4f.png.compare

MD5 a5b89d38f7b57e3d8c54a9d47b5e313e
SHA1 cd99946c765ec449064af3cc1cff7c704776383f
SHA256 8f962f7440af38981fc3e152f35ba1eb71826b6c3c615c15539de33c5f563db4
SHA512 e431b569b73b49577ee24e69a7ccea1ace281472a5683fd71ff9ffa86577af767b839a2df03f8618f36fae9002f7687195390a90a90f3c6c50f18d041ed2d116

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017d12c6d11ef9d11cacdd8b22a4f.png.compare

MD5 a63c60af2e9a1ea35a80e93d95a25bf1
SHA1 76fd06bccce4fdda8b3a088b7d22d2a8017ad53c
SHA256 60f1134cb1b26e89894a127eeff8579dca3a25dd86af5ca7bd03dc9602c6fd70
SHA512 a91558a60260c19e35ef76619b13214ae017995c14c4ecf3144717ee05e0a3bed2b0f66a9d192260fd88563931f83cd5de72e531f35e1d6f41599f1162d741fd

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017f92c6d11ef9d11cacdd8b22a4f.png.compare

MD5 ef19dd8f73bea37d9e28e8cd85ee4e95
SHA1 4ef634e974a59fe976f2c2ec2e092f5b55bda9bd
SHA256 93b3a0f4e4b3da6e8af72d93df7785d634f0d0d2613fe000e84d422b85230987
SHA512 e9dd565c2c400f0136fe6978c9afecaf00a309263b94eb23fbacaf9c46cbc8fdd65c798653a8e4266668c287bef5144cf8cb62c1db146de73c6d27512897d141

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018112c6d11ef9d11cacdd8b22a4f.png.compare

MD5 a4d10a8b9dbce7598400bbbd96a11248
SHA1 c552286ca4ccb618856f107d738c471810f55118
SHA256 ee60b8267fabde8ba2118580b3935d56e5a4e713d3be115421a8909f666cc68d
SHA512 2d32aecfefae82d0c412dee11c66f7c3f23d4bc06bc88174ef84257728db4beeace4aab05b201c26ed514d64204524a234d0b8a921264727b3055e609692fe33

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017e92c6d11ef9d11cacdd8b22a4f.png.compare

MD5 0c47baec3f396891e4e2e8c29ebf666d
SHA1 2e4d55e5dcfd5cedac7b6ab6c0ae65b4649863dc
SHA256 a3832962dc8ec8ce5b14e0318b5f023c77b23909f21f931f5b4caa13b0f20675
SHA512 07abad8641f73a0b188eef06cddec23f173035e68b60b96552bbff9060d8e6130b4c8a0ae8366109d3346987ea5298222be59b4d10e9f7ce1ad01fb956fc450b

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017ad2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 27666a793fa11760547454944f089546
SHA1 a3166a4a1a04891d2a30d7988f6ae2be5b5608db
SHA256 b14f658cd0f545e53148b65dfcf3b9630ef2af84cbafd6bfa48f8c165a2500bb
SHA512 b56ebb454a360ee4bc65e655adef136a1950a015f136b756b8059c5bc13e8df7914045582a5741651ac6a80f3ba35c6801b92a106fd2020caf1f444104b64a25

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017cd2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 b20e9c46a6c3f312c67194f6f3665d0e
SHA1 c3050b3226a28aa90433a6a2ac524b22d8a03458
SHA256 8a74bd7bc15a20012e176233f407789e036cd979017e42bc0d3db93a7706cf1a
SHA512 e6ee5ff1a86a809c0b57543325e6a6157f9458e391db17dc4b5482556b9206194f30658a572db9e0535c7063e3cfc55523af9b00307f3c52deb35e6bd02de0fd

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018312c6d11ef9d11cacdd8b22a4f.png.compare

MD5 f3cf25df56c59a6ac274f840b0e6b0f7
SHA1 e14e5524635298cc84df281e4c3451c127d1da83
SHA256 12ba1332a26b7c74aeda5dbd45cab9b7ede2f3dc6672ca07eab9b76a5b4c88d2
SHA512 007200b4d4050d2c384d253ab42af407111846dbdf6da8bf3a663548fb85eb87d67ae01fe3ab9d2dc3590dee554a09ffbdc32204a3665d16972bd26b87699d8c

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017b92c6d11ef9d11cacdd8b22a4f.png

MD5 24fbc352a44321963d09c74fb30e9f08
SHA1 71fbbd923882741a17f35656231f836c59b03da4
SHA256 d848fbf20333fb1f097e7402a27e281e6109f8c1aba3f598b66e5c83dfedf30b
SHA512 1edc6a5ca9e4d1227b8ebfc79a6551c7f87dcce13b9981f57100ab482b4bee375dd653ac4245f3fdd83d13236819f62ed21ade3cd503c9ca35e9a6cedc4b4240

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017a52c6d11ef9d11cacdd8b22a4f.png.compare

MD5 d495e09bd9899c0410c4d67aca1192ff
SHA1 22e0eb07a794c1fb2fa7127f2d6e30685f9b5f10
SHA256 f90e336bb5f46bdbd6144e81daa57af8eab0f752620c0cbd151b45fed1bc34b9
SHA512 02e188ff6c076f550d4b676dfa77a6da31a412c27f9fb09766f88fa56a7652fada23a7692e708f26202ab5110a12ad78eb6bad958354fe65e0a9691c1c4f0c75

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017d92c6d11ef9d11cacdd8b22a4f.png.compare

MD5 ded7c6e8b9868e660d490859e69efef2
SHA1 cc045e91f0ffc9f182c8ead8ecae069680fed42e
SHA256 f0376d903299f9a81a5d002870630f94d0bd90866a201c01c0ff79d6f6cf94c0
SHA512 f231e17b1c8edf764fd23160bf0f87288e5fe476d361e57fdaa697bf844f2bf781eb5fb50c8b0b4d2f7e37649b0a532aed0c9829c6c3372a0f38a6df80747663

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017bd2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 09179b2a273b7d279068f570027a43bf
SHA1 0f7d5c0fc142df7819d9bbd17fabc5edbbc61b1d
SHA256 0af2b0f377e2f51306f6f8762d606944bd73aee140798c9454ad30cf9658a5aa
SHA512 eef7c4cac7990e22619bc7aa883f686cb8e832177749c3e7cf63b678f37b4bd67b77077639826fe115651622deacda80407f68e9a52853434be24103c375acff

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018252c6d11ef9d11cacdd8b22a4f.png.compare

MD5 bafdc1384f760cb24225d8f469b4c850
SHA1 045382a11bb7cd98ee45d854fb710b487dd6499f
SHA256 ffbb91bbee6d387da490a211e82c9dca169670331c1387d28951b2eb0823581c
SHA512 46f9df83deaaf63cfb1508b9021f2a50ab4ec20a266777c1488b4dad994854dada5abffeea71bb30d0162de518c50c87339569f6d6640a2ff884f6a9b696a7a9

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018152c6d11ef9d11cacdd8b22a4f.png

MD5 23d34cfd73e18438d7a352fc58008a67
SHA1 38c6158ed085dcfa9144a3f8ff3fcb801a10ba1f
SHA256 e8178172cb8280545c3e115b09e14cd42b04910018758f7d46959469f11c2ade
SHA512 b73d7de71189ea0fedc014b5ab53317237d4f7becb29af6d9b26e1a76b8297b9d0ffb6dde52a39410d057ed750345b2da1fd19cfc4c67890e55a529124ab4190

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017ed2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 46f8418c8fff05fdfaf6e1dc11c6df14
SHA1 de93b619e6838789e14e7b243b6c9eb4028b5209
SHA256 29dc4d1956e5874ecd46aee57fbd5fc9156e6fe921c9029d7d32534ebcc15757
SHA512 08731185412cf5ce26c34f387db85337a0a233b67f63cbab3081f050225c82d85921a31f2b520fffea0d2c562b88bfb09d8d1489f1e36573e41f1c0cf9d298bd

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017d52c6d11ef9d11cacdd8b22a4f.png.compare

MD5 37e050bfb1f28142eb03a3f8b5790925
SHA1 8d59237279dcdcc706c1fc040043fc39aa10e21b
SHA256 4d2e1151e591ede48d31ccdf4c982abb5424733325a91c3190e87752d4363282
SHA512 eee941ece7fadb2f1371bd7a3f85869e21b2231d8691270f922b9cf7732903bd2531b31b9054066f1e595d96836f04b198d977f599eefbb66c5cec51172f2206

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018012c6d11ef9d11cacdd8b22a4f.png.compare

MD5 e418610d2901a954c45ca7d8d14def94
SHA1 50add435db112f4633f05aa82e6f8dfa6b89c09f
SHA256 2500e33d8ac3ab15e60e7b98b91da9b298a777c41e2def355e7a173f910d4765
SHA512 54ee32888a7021deb59d5294c9eae8f0a44b7fbf7b1456783688ae65cb30febf2d7c87918864a418b609139c73e4fac054ec4b291b4e55ec3f5241104422b450

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b0180d2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 ff966ae89b1366ae6e07e66ce3ab3ba1
SHA1 51d570794235e4bbf5f0a4a3093abb9b855c3d9f
SHA256 42f44b5a5dabb08539c9c3588b5665c05d27d8de7831592d72cb6769470ecbe2
SHA512 360ecd1b04beed28e9e103b21f48f88547d0eea30fcde307e666142ad97e5498a98ad55d7aa09a59683e818682ed00eb023a533ba08b94b82e6c91873d73f9af

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017b52c6d11ef9d11cacdd8b22a4f.png.compare

MD5 df7a4fa395ad23842a01a678994b50d1
SHA1 aa88706aff04026caca74dc352c568cf4c92fcf9
SHA256 ccc44bdcea482f2f2fd89c6d350071ed0e5879fe46693a0dc5792192c14a9178
SHA512 e5dc4c54821990825a6eb9c415519a38f4c5a214a7a55540a4c6bef7aecb86137e4bbbc70026707dbdde4a3e30f5c4ed825b2a0b5c594c5f5e15e632351aaaa5

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b0182d2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 8f885008995299d06b4b05b8d1c84518
SHA1 9219191880e205d8cc4ab9811c66fbf5b54b5b97
SHA256 cc6b2e2e8adfc0a1a830699e44dbad67756a707b80a16df14469b8f669925a28
SHA512 cc5b99241c39865bfbe18de11036888da3b85299e9e044c8e11a63136addc46a6ca7ebac06c58f8ca269d9d805c27e58b9a5806a3497ceb636fc81b37a3cd414

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b0181d2c6d11ef9d11cacdd8b22a4f.png.compare

MD5 3146166ed1fd8057e2219d03b8371493
SHA1 5c48ea6d05b84d7d606749fd407b6b32ee1e3946
SHA256 dc29d54b597088a3807b862f3eee3c0694093e18bf41b5dc0167781ee49db8aa
SHA512 5467d58fca53f1b4dad65e97ca81adbaeeb8333623d64376d636784a0494688e3b7b51e7e638ad1299719feb33e83050c35c4e4cda50dcb4fdde8604676e65d0

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017c52c6d11ef9d11cacdd8b22a4f.png

MD5 409f205360f9aeadb925f46f4f2a5ac7
SHA1 118b94885125d199ca27b32ae5d30e51f867d26c
SHA256 03799be4d9b5c71541905081ce2313ead4bad19b92a2d2424bbbb1439ed5d04a
SHA512 6a476ef92278c1d996f0b604947581faa1ec43d11e2945f7dbaa73f7d76ef621238fd9bce56c16718767f236de9a281838a7206e304b0efaba487604bc0815c6

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b018052c6d11ef9d11cacdd8b22a4f.png.compare

MD5 f08ceae28618ba55cef1ebcbf954a628
SHA1 d8524df8efdacddfa8d9f96c1086655b7657d39c
SHA256 e6bc98021145873772bac0fc4aca7a2a63dc5c535f93185d6ef8497ad748b18a
SHA512 0dc758ee4e28aa74e13a768117e5f5067232fe4569fa8877a4644c9d6fea7023ad059e3239f68715a963232712136b3284b8b65a72b026a602d76719620f4037

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b017e52c6d11ef9d11cacdd8b22a4f.png.compare

MD5 34502e147705e3e2fddb6297236816e8
SHA1 74ee02c9f7aeb5c49cbde7bb324c4b458e72904b
SHA256 24a3a9042e1ee7719307850ed29a4359cd7d9a0ca08d76af047282967bd06bd6
SHA512 76e053593fe9b11efdcd41ef8e87ee5e44d79a12dec5f8f0a8df8afb9dad4c594c4e8dc4455d8b92e1d6f6593833aa7824464f14b79cdb13d9d3a0538f0fa20c

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b032c6d11ef9d11cacdd8b22a4f.png

MD5 ae43f1321d104fcb03c1da6154286ce3
SHA1 20e917c3f0b556a51ee07fb3de512dda8c0fcf5c
SHA256 939fe49c93f1a1fa4ebf600f22dcd1ef0adfc0ac817735a465861deb5e4d50eb
SHA512 a305dfe8842b5473e6161779d7ef5f9ec739cacf85cea45ef70c232a157faa061491a9f64324665a6e44a928132719ce6b0cb11742d95e458cb6948889025a8c

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b062c6d11ef9d11cacdd8b22a4f.png

MD5 74f1e54688409597f6f3e0c4d3e21a10
SHA1 17029462506e44c94263072b8c6298bfcfaf8283
SHA256 6e54f5c10b49429a15214d34d8061e06ba9ef9ec5c18d852c20ddcd92bbe5990
SHA512 f1d5368efadf37cc849c63cd75a138bd5470ea30537c6d169b6fdcf3af1f2bca958306e570eeeb6d3c3efc3bedb62c54084f52babed92d082ccd5ff107fb4b21

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b042c6d11ef9d11cacdd8b22a4f.png

MD5 7ec4f8dc8ee3b2f23bd56eb3891c4c09
SHA1 7a7f3a486fb66b461f4e692666ab419f2924cc27
SHA256 575ef7061a2ec30fccdd46ac67e7ddb51f7b19215b4adac6bcf86b3d5a988616
SHA512 b702e85283f7ba6c532a150c106ab0eeb161120729de0d8c8f37361372bd4ef857c3a609b447912299e4739808c1d9cdd2aa46991d9f0c81ea7cf3cd23e87d61

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b052c6d11ef9d11cacdd8b22a4f.png

MD5 4762fbae75b467040222b16a94616ac5
SHA1 5684ad88f049145a099a546d9131264f233c354c
SHA256 6c2431538f213ad2c95d28df6446f9a42c785d8241e60bf799832d6b827eea84
SHA512 369dc792c430c67b2a6017a0c7cf8b8286d00459f4e9896097c92f3f55a33f03c3d408321972eb56b37d1b0584427d0bbd7ad893b016664dd0bb7b6e98b33b77

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b942c6d11ef9d11cacdd8b22a4f.png

MD5 8fd601909484c953bb7987b888c61691
SHA1 3989a87d56c92d09a17b5befdec1ccf07143ad94
SHA256 f5fa1535df7c76244faef920b6a6b84cdbad37affb3fd855e17759a00da0f814
SHA512 51845af88d9f4bc6bea9107f4953e7744c8a936c644ba16eaa6a0e535bf7842a1fc847f7bfff1f24192c4737c6a11a93b43a4075a993f2d4d4ce6bf4485141a1

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b952c6d11ef9d11cacdd8b22a4f.png

MD5 bd6d22ca1617d4d6594bc59ebd577ff4
SHA1 520e595492f8214b8a2e20aa76de323220429055
SHA256 65f2a673da464095878dfe1d94043ad242acd151ed7cd3641c96875c098d3522
SHA512 b4d69579b8b28dada58d14b5d082a7b203a290324727fd2f309a9c2e2c4ea1a1b3a98876d74dfee2963f7006ed9319ed93131628f4862e0f82d073247cd6c471

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\d6b01b962c6d11ef9d11cacdd8b22a4f.png

MD5 a1fb16fb73739d9f0bf9b1123fd3a734
SHA1 149af19c3296bf9993d4e0ded7617582c2501006
SHA256 b5371325df11f175bb21fc9f9d827a4314ff28ecf7846df976d26d8046ed0041
SHA512 4146400e8cab0319107c5f96a1edfc3968492c9b7aab2170ea65f27efbf9a9565b6134df0fc05d8cfe2ee641f2df3d25d2c49df269954186e1b5fada0fbea57b

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85d902c6d11ef9d11cacdd8b22a4f.png

MD5 e55214ba44abf9fdf68f052b1e85b569
SHA1 6903b785435607385695e90f22c645aed05bc86b
SHA256 5f125f147d6f61f9443f4e9f47dc2efe821702370bd5a1c5ed05eff9eb4dca30
SHA512 5fd2e1d7d670eb940ca858963d210f36c4352374cdcd3aa53ac5be3c138d16944f3c6ddeb6c7aa94b06b2a4ef74f12d9d7996cd266f283bf9cab02c5b7363017

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85d912c6d11ef9d11cacdd8b22a4f.png

MD5 677784568590f3c77d0c6434b6eb142b
SHA1 e7b7e40d1dcdc6cac7d9baef359f8a6604975645
SHA256 aaab57852a2c0434de14ae4200f5424106cfca53f1d1a5afc5734734fc933648
SHA512 d0286a4af4e1a72329fce6350b73a90d2c2ede634f1465f064baef7f224d64de2e71b6006a17d7324954328c71d395de38f60b8df676d4716ddd874730d4862b

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85d922c6d11ef9d11cacdd8b22a4f.png

MD5 9a04b5b935c2b7cd902d15317a755504
SHA1 332e7a2f22d7c64b1aef13236e1adb61a008ec14
SHA256 6fa4f184c0a56c9e3425c71abfcf1c12837b4f723fbd060a391ac28f52530d28
SHA512 77fc66a5588ad8b07994019c81b0e89e16873628a3cb06dab61cd65c68117c732a94563c5984e32492c8130f2a755fbec691fb46f5c5a1023f08986c25cffa6d

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85d932c6d11ef9d11cacdd8b22a4f.png

MD5 95223b6fa2a3fe952616e85bcd2f630a
SHA1 d23367e44f7d1826b221cf4077b012efbb58806b
SHA256 2eb5cec4208438e0ab96b78418331c6b84c22087d034fe88763c79c6483e99bc
SHA512 141d8833e8dd859f08443753ae82accce6ccdca77c8bfdedac79c932ae8216be85c8d2d159bab5bb3c18a6fd0195cb92ffc70dcea4b4f5c9a0fa1762890caa54

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85dd02c6d11ef9d11cacdd8b22a4f.png

MD5 3b20a57507e63838a2659b74c0bddc1b
SHA1 da8de7e7a4484d6e8cdfbb269abd3e6ae7041898
SHA256 88b84e826c251e100de58618b4d6e54d5980a75d7c89af79d8eff669c981d252
SHA512 7e1cde9576d26dd10cb0532c653065f3ca16984c1cf6d4453d08055fed5a8d8a689b9966a2ea6c8f07ac7b783598613635f5e3b00ae2a3c13f2877eeed6dfcf5

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85dd12c6d11ef9d11cacdd8b22a4f.png

MD5 a9271bc5204a7b2c9b013510624807e5
SHA1 2a337424bd6b5a1c71526b4286e08f3237b7b194
SHA256 83b2ffea7ce890626ef8db5a8e087cd4dd6f0680d090aad6b6fb0bcd54aee94c
SHA512 c313d97a23bd404b5ba2e312e76fab3dc6a7a998638ce38d82c87983dc0eb0714a84a6836fe0bab31266deb3f9b6fb29bfc1f003e7c6c3e73f29b7e8efe69c32

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85dd22c6d11ef9d11cacdd8b22a4f.png

MD5 5225f9217c4745edbe95af119c9e0ee1
SHA1 529fbc3fb4ca4d0cf2a244b573f57ab3a1a22e37
SHA256 0e3712fdff533422e544576e5beddf8855d043808e5d94ec3cd976a915e120d0
SHA512 a21a71fcaa43629881445c9b0621d606c57f4e1c4fa3ec1366991bd8a29f5d7ecd4a7b68fdc2c6f4f5dac6a76bf07cfde6725a4daabfb613b8bc4b32b3cffb5a

C:\Users\Admin\AppData\Local\SweetLabs App Platform\IconCache\dca85dd32c6d11ef9d11cacdd8b22a4f.png

MD5 887b642b2242d057299d47c0df28c7f3
SHA1 0f28ff38538bc6b007418aef2a4a96f820fdbb81
SHA256 af5a4b556490cc6cfd12bdda60ee48cf0bc097d3651c14846f1aa212f02f714c
SHA512 184d4e90e15c4bbda781f90ed1dc4f705088210aa45833cc9728284364d8680cfd167804b71ceb4de23dd84faa430fdc64d24b1409a4717c5f2b929996ae1887

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 c5b7a72f97df551ec78b8bd1e7ccf9dd
SHA1 41afdeb1ee910b93d6eb85c55359772a93b032a4
SHA256 e630598643359cfda46e168c9c77635523079e47b19174934c301f9cf4992306
SHA512 bd7fcd62db425fabdc5eb1258a0a12f702c384fb97d5dd323c1dfdfa1025b3dbd37dce3c5d01580af556a4160f76b7026fc3b476caeb1f8cf1b586d3e25c2fab

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk

MD5 752ccecfcd0bbe46260a17d587d0a044
SHA1 dd82992a2be8132900b535965eae14575d5b9f31
SHA256 bfd8f097af683280b3ec4cdec4a3dbde441ed482beaa445065895ad08a3fc423
SHA512 8133969821f7c1dab10fc63871afc48e2c9a830001686305bcb59f49ae7c72dbe957f793de1bc75dccde289845b66b310c0822dc8b010a7474650f0a9841f096

C:\Users\Admin\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe

MD5 975e50a6a7987c4daedb504fe99a92fb
SHA1 5373cad041a4f508315aec0aa1ad9cc2e095dfc2
SHA256 4b7b6fef62293e81f274b496068bc83dd06b7cf9a21cbf3be6efff6029b44872
SHA512 c351a77d06bafce1adc4226fb283cce9ac28bf6de2bdc41c5835a2eedc30c72e3f2c360746f501991d05b8fd7b05f61f3c5d7206881929fc0dc49db514823817

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 28fc69ab3d54c7c0bd78d964ec6e7637
SHA1 8616180cdad11422d675a96ccd0356fb74129e8a
SHA256 8f603657e3b8f878d1a402d3149b20fdb5eb4cffee6d2b17bf94bcd11546a96c
SHA512 4fb95f2140093e3a0de517be5b5f8c1db3e6a36a10dbca5959955d85dca16cacd592ed547b3e87256575ea3d795587fc18674bb8e65da0efc2e2227e5077704c

C:\Users\Admin\AppData\Local\Temp\Pokki-2024-06-17.log

MD5 159e8002e7c0a5d264627b674b0b0038
SHA1 60c53d0926792717d264cc201ff8d80044eb12cc
SHA256 4d8313726fe647ab2714e2c0494477fe0aad5d2bf38ae039d5647d8945698ed4
SHA512 d24dbbbb31369c078a16f19ed9cf9d0cd7b88cd1df0016823edef2f42d8324888b3cb133019a2533940e7bb902d6b54baca9b5a3b81cd746971d8d687a9fa35e