Analysis Overview

score

10^/10

SHA256

795db7bdad1befdd3ad942be79715f6b0c5083d859901b81657b590c9628790f

Threat Level: Known bad

The file tmpz3o4tlol was found to be: Known bad.

Malicious Activity Summary

ryuk ransomware

Ryuk

Renames multiple (2744) files with added filename extension

Drops desktop.ini file(s)

Drops file in Program Files directory

Unsigned PE

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-20 12:23

Signatures

Unsigned PE

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-20 12:23

Reported

2024-06-20 12:26

Platform

win7-20240419-en

Max time kernel

149s

Max time network

120s

Command Line

"taskhost.exe"

Signatures

Ryuk

ransomware ryuk

Renames multiple (2744) files with added filename extension

ransomware

Drops desktop.ini file(s)

Description	Indicator	Process	Target
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents\My Music\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Games\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Mahjong\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\Programs\Administrative Tools\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Desktop\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\L54IQZD2\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\6KIMP0IT\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\B5JWTXJ4\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\ASWW3GU0\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Contacts\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Default\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Hearts\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Chess\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Desktop\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Documents\My Pictures\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Maintenance\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Documents\My Videos\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Public\Recorded TV\Sample Media\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Default\SendTo\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Purble Place\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\334W6EWO\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\B5JWTXJ4\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Documents\My Music\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\QE6QYUAB\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\ASWW3GU0\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\Programs\Accessories\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\FreeCell\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\SendTo\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\Programs\Maintenance\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Desktop\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\QE6QYUAB\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Solitaire\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Public\Downloads\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Public\Recorded TV\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents\My Pictures\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Public\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Default User\Start Menu\Programs\Maintenance\Desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Favorites\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents\My Videos\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Start Menu\Programs\Startup\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\desktop.ini	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Documents and Settings\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\Searches\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents\My Videos\desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\desktop.ini	C:\Windows\system32\taskhost.exe	N/A

Drops file in Program Files directory

Description	Indicator	Process	Target
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Common Files\System\wab32res.dll	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\ext\meta-index.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kamchatka.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zaporozhye	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Microsoft Games\Mahjong\it-IT\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\bin\decora-sse.dll.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Internet Explorer\images\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Adak	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Dili	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\7-Zip\Lang\co.txt.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\profilerinterface.dll	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\RyukReadMe.txt	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Shanghai	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Internet Explorer\SIGNUP\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\.lastModified	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\RyukReadMe.txt	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\RyukReadMe.txt	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ust-Nera.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\RyukReadMe.txt	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Africa\Algiers.RYK	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar	C:\Windows\system32\taskhost.exe	N/A
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar	C:\Windows\system32\taskhost.exe	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeDebugPrivilege	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Windows\system32\taskhost.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 2220 wrote to memory of 1100	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\taskhost.exe
PID 2220 wrote to memory of 1164	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\Dwm.exe
PID 2220 wrote to memory of 1864	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\DllHost.exe

Processes

C:\Windows\system32\taskhost.exe

"taskhost.exe"

C:\Windows\system32\Dwm.exe

"C:\Windows\system32\Dwm.exe"

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe

"C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe"

Network

N/A

Files

memory/1100-0-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-2-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-3-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1864-10-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-14-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-35-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-45-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-50-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-52-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-63-0x000000013F660000-0x000000013F9E9000-memory.dmp

C:\RyukReadMe.txt

MD5	f21cd06048e07dd24138bd10b1d2e9a7
SHA1	d131f489f00339a2f3f44ab2f85c65c09247f0cc
SHA256	23d5c8cdc7f19e512415ae1bc3c2bc11ae788425363bf88de873ad10bc0dbec7
SHA512	315a6e481c9e0c97dff92e452c30ec621c427e89c2d42f4a8a2accd75d298ba83b17e07202b17aff5035f40ebe9aabb6557fef09647eb14765642bda5cc47018

memory/1100-62-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-68-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-26-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-89-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-31-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-84-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-75-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-93-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-92-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-33-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-119-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-129-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-36-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-136-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-137-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-161-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-170-0x000000013F660000-0x000000013F9E9000-memory.dmp

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.RYK

MD5	f71609d1d6e0f8a7174309bbe635025d
SHA1	dd5250d9010547a3d9823278743972e9cb70d856
SHA256	ade358a4d28b1ea3abaee4c01b7944fbd5f8988fb6f6efceb3e8024792277c22
SHA512	b36b2ac13584a6994e6da0298ae2e054cb1ba4a7535b4cad92f75bc538ad6f1c423ede7ceaad3991849889d78c26dbc3f8a4eb08d93bd75dc6e997a6fd28bdd7

memory/1100-173-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-201-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-207-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-212-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-53-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-72-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-73-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-74-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-91-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-102-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-107-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-111-0x000000013F660000-0x000000013F9E9000-memory.dmp

C:\Users\Admin\AppData\Local\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst.RYK

MD5	49810cff308ee9fbe389b52467a71900
SHA1	3643ffb39d5aa4003406de4bc61cf0bca6107c58
SHA256	44a6d0b903cc78abcde4cd0759a0b05355f44117346cd658c4295b45913756f3
SHA512	8d2eb1f144a9bf0f7161d38764dad54b4b8e37670d9ca70fff0a6f99d5bda9f163870519f748a911b3f177637ad13e868ff96eb631794cbf4c29967403051ade

memory/1100-110-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-116-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-118-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-120-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-134-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-138-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-147-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-152-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-155-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-160-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-181-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-183-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-184-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-196-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-187-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-204-0x000000013F660000-0x000000013F9E9000-memory.dmp

memory/1100-210-0x000000013F660000-0x000000013F9E9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini.RYK

MD5	8fd7013ba82fd45a678c0d4a379d8703
SHA1	0f5406b74efee03cd2d3483ea91df76233616144
SHA256	e6ce25eb75a6023a26b5faa48647a074603415bf5b7920d1290914861481a3c0
SHA512	1587610d96483b512b759af7afa8459b061ecd339fa6c658d3e50e66996d553422669ea89eaaffa40de0c936026ce9f2012b2aef14664783237c25d4367e7bc5

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\ASWW3GU0\desktop.iniRYK

MD5	78f297b20eff644610955b2e13404b9c
SHA1	da80449a9687874400782f02e8c2e994d99f3ee1
SHA256	0c85ea4872a4585777de4f9b06e9cdd5141aba21951e9018f81ff312d746fd19
SHA512	3bcf706acaad9aaa2ac8df38ec4a2cb0fc3277f698150a1fa277c472e785517023aed4166cd80106ecde9d5a4c8765fdbb078f6d5a012d8a729e7423ab94b9b3

C:\Users\Admin\AppData\Local\Temp\RGI2656.tmp.RYK

MD5	7a3a913da587141509dba6a1851abbe4
SHA1	f412a7ea145452d19f072d79cba2179802ded7ba
SHA256	d2cec33097cca758e9ac4f6d8fda9641eb486dd5a8507b8b2da152787e08b4d3
SHA512	be72b2b9678d2f7ffe3addaa7cfb29557dae418b483fe31deecfa3e2d62040bd4232323356ff8b5ef9a74c7476bd68da2e7d25f57a78e7b66679f8465b0de8b9

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.RYK

MD5	37217aa39937d977d75dc6e9e6becad3
SHA1	854ce44508f75b1eecca4ac15883034c50534d2c
SHA256	b7cf72a17fd49ed93feef5db109274e07c7516715391b8d5580031ff0ae59afe
SHA512	bbd834820f6d480826b5d8ce194a3d99ef272cf6c768ab6576e43d7638976ced8e2772326dbaa36702b1d76514546e575bf6e9c9a1e4e2f7f3ffa978daadc5d9

C:\Users\Admin\AppData\Local\Temp\Admin.bmp.RYK

MD5	9f6ea8e4ecfd9e0f2dc4e98c18709fd6
SHA1	88b2c48c555d02d6dec841db05b174aee64ab231
SHA256	90166a624afb0974b0dd5f017f448d6e44f5e7f7c62b8c8fdd583acb0b183aea
SHA512	c0f9c0a0adee22cd13d565f000dc737e0627dcb08173b75b4b65f1caa1ec5fbb5b7d218fcfc2f0481c58957aefe76b80d0da5688b339f196c568c9eefd3ad2bd

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpgRYK

MD5	dc7a86eaca16b05ed4dac7ad1c60481f
SHA1	d4eba473dd409e8ae566f00ae3617b9f8f5ceeaa
SHA256	6eb5d20f65df319f7147a3edcde72193d0056b66b2e3f9d98bf3648a026cd83b
SHA512	0b9f2c0c4c3fa5ad2ee051df49487f2e91e49c590ebac3fcd0378d0f4c70be861bacde5eb084e55ea1ea70fbe540a526d28bd271c8578fde0be191d677d76647

C:\Users\Admin\AppData\Local\Temp\java_install.log.RYK

MD5	92ef4ac9d149fddc6653ddd0ccec49cf
SHA1	1bd554f98090fafcfa6a06903a52d35904737d06
SHA256	796cc896191b46cab7ca7d1afbffceef6b800eccc14ead7075a37b52f493cf94
SHA512	5faa0678d8b3266c5717915519c6f64c873b4998d0737c69b08da07822d0870a270a4b10d34779d4df38ecfb11737476f562c4fad09caca2f4fa81e03b317266

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\L54IQZD2\desktop.iniRYK

MD5	22bdf3f29e36a9da8f63b83045c72bb7
SHA1	86cbc7fd6d3d9f9aac714567303c12e3588c57e0
SHA256	682b1c8960268dd6fc195a6d7a7d3cf244f3a33f987e93b824ae01185f16dfe7
SHA512	46c714458e6dec437d37a7a5913ca6e50252ef6eb62921cb505003f9c76a2253190af3496c6db7515fd6052c667c370edc9862e60466c9d95a29063b628c703c

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI2FC9.txtRYK

MD5	6ce6682baba86f4377d5e817f327e8d1
SHA1	be54112da62e272dc20279ab3d4cb1d17d993cf1
SHA256	2ba0c964f8c383b02b2c7058cb0afa46c74aee86be13a88c2f6d4d561c3029bb
SHA512	5044d0f528fe7d3bd3a3160873d64ce76cd17c81a3879b47ee45645dc85432fcdfa6c674b2a34e76c026b94b8b0dc7dcdf60d03f0904e8c284bf69e0e9307e34

C:\Users\Admin\AppData\Local\Temp\ASPNETSetup_00001.logRYK

MD5	84423d7a1fb7519d0dbe9b9d511de627
SHA1	aa0796b571922866c406c078135a5249c58b7672
SHA256	5882c02279ce43d3204241f7e0942a3b5d91185640d829b7b5b02e41713234ef
SHA512	d45317d9a6ea680af9d13668b2e996bce8f6ad3b2f7f93273f7e467bac5c7e5cf83365129b11d5f5a7b3a56dae32b3ae208e84e2daf71f01b161d91802ae93d0

C:\Users\Admin\AppData\Local\Temp\lpksetup-20240419-130948-0.log.RYK

MD5	40b73852cd15762efd8d234e61a5e2f4
SHA1	6b81dc15159cd2e465190d9382faca46d0a7ece2
SHA256	e3ea0f09a58fd0800a7607f00eb74ff51d8be9311065ca4a3fbc9fdb1343959f
SHA512	0e53be34e31ff9484ac81b1096a5395725cba38e9bea0c9b4c1c383b568b8f59492c0e51311ace955c8b75b48de15d11e8c07a2287a5843570a84c211d34a29a

C:\Users\Admin\AppData\Local\Temp\RGI2656.tmp-tmp.RYK

MD5	ca0a474248e889707c35cc2d31304575
SHA1	a614039885354fa255eaa646a59dbb65e440cf90
SHA256	7e11ad53346cb141a2a9539aad9f16f902e91ca1eebc98dcd69ff37b5b68aef5
SHA512	22d7df430be01c856a61ffe0c4f4d4cc526f97c08e5a2b4660116a6d07dc66ee057a6f021c7a6566d0a6a54fa12c4f105c545329f1a1d09e4a70bc1732dc9b64

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\oeold.xml.RYK

MD5	f046749ff62ab37a18856ed93fa45c72
SHA1	98e52527aff85a5cd644362e6b772ee64bbbde5d
SHA256	13822df27267feba60820cf7e361e431cacc7543a95b8f164fb882520f45bb43
SHA512	e0a9fc9682aa3974abb7685f3083212f954e56320a3b415a828da1fb2178db6cf3244c56da1c17e30d01a488803eed91ecbbb0c7f1dbdc9a95ba9e74240dceaa

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg

MD5	572edfcf8e827d94e147ef16d7be73ac
SHA1	a79ef4e42463a36389eaf251331b697d6a8349b9
SHA256	761b912268cd77ff58c6fbe53369ca504754eea238b915711606cdaab20d4254
SHA512	800296fbeff25688fb38b7eb36dfbb6d99baf0327bdcf0fa199afbf1e8c8c45e4814dae5ee6d51f5a0040157afeab289f70dda98945a1a04fa7f07f929cb8536

C:\Users\Admin\AppData\Local\Temp\dd_wcf_CA_smci_20240419_125812_649.txtRYK

MD5	dc30031845b8c1ec77fd1fe2cb5f4b00
SHA1	dfe69d884bbf1706e5f4e51ffb7959d53650e4c2
SHA256	23efcb63932c328aa63ed7984d3e61c760360171a71be2f4b3bd8d30d5181334
SHA512	bf8d6365a13660ce3541ba5fdc9cf409b22155c76dca9b256858f38f2ca8c59ff585c48a61ce06480950169bdd77c1406fecfb7d36520674e32df774d54d23e4

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.RYK

MD5	9eeb423dd44d1ca51ba76b1c039f539f
SHA1	9b6e91b7891c40645447e9f53d18db280e7920fd
SHA256	1bc8f8cd7e77323e9e5f6373f667d1dbb2a7ae6e150dda0969d012f82c4916c5
SHA512	2556deeef392a9d998bc00b528b74d15eacf4a33e060853ad536004d8e64e84b871d947c1aa4ff571d10fb2f587b8a975620300870dc520d0a04f30757c0cd5e

C:\Users\Admin\AppData\Local\Temp\SetupExe(20240419130143744).log.RYK

MD5	95355caa9c633afeeac50a8706b1f68f
SHA1	e67de0033e7e70f7af6c68b25ff027327bc1cf75
SHA256	8d605085acfc126e0af2261ea83250ea74d9831fe50bf7541858dbb0c0832834
SHA512	68a5858b47202ea1a3ac62b3c4388e1f8e612c16824ccef4bdea3f6af2f3e116da2487b04cc33e040c9b11b59e5679ee9023443b8e04c69eba69db2e38289e25

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat.RYK

MD5	664ca0452c52dbd4f75513fc62719e0b
SHA1	122f1e844a0b91165b08a70b97bc287814c60276
SHA256	1d820ff27a7386a4acffce7dfdd30cc42d01c6aae0e3cfa1ae5724c9500e6aaa
SHA512	b1b934ef3eae52b4ea2b53a13c6e188e67e80f542b4b0e34bb6c0ced34c6119dd2a7c916bcd62a1cc68751cacf120090329c05fd780a910ccb4af5650674b982

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Monet.jpgRYK

MD5	b6f161da88477e8bb3d91d8a5bf378e0
SHA1	614be63c1b0c54435187e52a508826cf9639b319
SHA256	3da7c5327e4a2c38f11de23ce567ea8bf2f3a7e2d53b4427e84f9fbec302d899
SHA512	b0a476d47ce9ef6bae2bfa6a2f59fb6ddd3a1f349fc05deedac926722d8ba660200f9ef1143aae8ab2900a07f5976c18ca214ff2c37f090b0986f7aaed86cdc9

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Music.emfRYK

MD5	16d5e0d4e6dd18324328770998406f03
SHA1	3839cba4e643a810d19a0110a4ed9b643257198a
SHA256	1d2afd3845672b6e56401b76b3589407dd9fa32af5516e790f5ff0c4e67f258c
SHA512	e9ff103b3c6746a97b5b2f82d2224bf38c3551c0704cac31fd642a30de91601f67a3f6caadc1824be656b136864bf73403a307ce9bb67e6078f62ced89b8c44d

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpgRYK

MD5	c5bf9b7ada871c658024202c2e649699
SHA1	80861cbfa916b8111f0d29628eca7374a2f60be2
SHA256	40a10dc3ce6f8e654c935da878dbeafd590a73f341dc4156b76c1cc4b4d587d5
SHA512	f370061e7cf99cd8370c73cdc14e51a4bea625645a61e73cc4356a0d2b291605c7758bc26dd0b526777e49f4dfab1a70357c5c65c04bd974bb2c7eb0c3f17579

C:\Users\Admin\AppData\Local\Temp\lpksetup-20240419-131306-0.log.RYK

MD5	48431ee8cd208ff72f4228ac2dff03d9
SHA1	3aa5ab1960814d1c77a1c686a67a788f1b48e016
SHA256	c87306be590c4592e474ccea43549e96b3c24cfb04f6e3ad96f5ccf6d1a90b69
SHA512	bb0b72edadff60bd1455aaf5676301ff386bfc48cf05a36d81d5a4ac1bb10872080069c7350b1de3cba8eef295bdacf6f4131977e1305fb0141041884b34d7e0

C:\Users\Admin\AppData\Local\Temp\lpksetup-20240419-130641-0.log.RYK

MD5	bddea366b01d62d68ac14dbb530af181
SHA1	b344e6de661331ae2ebd4fcb15e695d6c19409cd
SHA256	70d29fac3afbacf5e2c9b6e67fe597a9718501f2a0f889da7c0aa30feb5088b7
SHA512	8eb291f91dd70a801f3eb6fbe5fcc07ede6e6d2112200ce2ab4a62928881a5dbf46670f66bb6c86c05aeed908cff2d2e98a82248491f3849b9ad5c5f8b9f1398

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI2FC9.txt.RYK

MD5	5cd089268a7d14abd327aeeac1e0a933
SHA1	9734a745820a0d5e2f9a8fa5420d1bf0fce848fa
SHA256	92c842c7ed0ba14757618f8e8ae3780b23266376549ab42c410f3c459f82b227
SHA512	edd86f1b41584fb8c96190e7d7278b0e92cdfefcffaf754412c5dd2a58e0630ea0eb24c0c791390b728aee31a1d4b144c5369a785c9806f70f2baba8cc886c7a

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb.log.RYK

MD5	e2f5ccce59cc089b2d4a4f278e5ba805
SHA1	47b6bcd1a41d12dc593055d2272d5bd9539fd162
SHA256	30ebeab1c5532023617ce2484336fc7620790567e5b31c6f45dc2d9bd725c32a
SHA512	7f1c8f93235018c917dfe63250cb3f77e5d44f1b2deff04c31e7dae337ca770c1c661e510427558757ca4a0d06ec3968db5f32aedea40baadf7e380df5abf641

C:\Users\Admin\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb.RYK

MD5	25fc457474ec9c77810e445d4b035530
SHA1	88233731df7808fefe35ff9cd773c1e0b424c551
SHA256	2f6621a997e39cdab45353b4014c1326b2638d7d1080a69c9c9ae213becc2a75
SHA512	31c5f921613aefe6d730e5710162d3a322518fd7d2fd2a77ead205021c583d85ef7775768ad294315147c765ef75fc1bd257561619c9b40d7f36fcfe464640c6

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.RYK

MD5	629432c66dffa998415052d82b61f66a
SHA1	8fcf3bf32091da3f632e1f7894e36709516094bf
SHA256	0e26bba71fd8864fc0d3546b8b170c4814acdcacc70948b824bd44645773087c
SHA512	c7d933271957243e5634cf1cd131dd9742e6c2d899558ffed15fe211c21291b8d468d4260dbaefc02317e2f44c1b3b9fd6c6b4f8ec046ce729cf282e30ce58fd

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini.RYK

MD5	3c607d81ed16ae33862d4ee40acd438f
SHA1	d48f2dcc367a9c0be330e23e348a94ac9373e40c
SHA256	586dd604237801a7a247a42a6496fcd1794eb07f4d4add4315eccb348b25895b
SHA512	bb21bd29297243b47af10c4d8d59ca3384c110778bc4ebf6503212fee0f1c5c5c7c148341856d1ae5559e83a5db9a7bd2c92c47b55afdee100f640ce15976056

C:\Users\Admin\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.RYK

MD5	ff5247f7653102c3cc7844514b3c6b30
SHA1	f0720a52519dd9f130216b5cec897932ef217d49
SHA256	72f81a10e0c2e861e054edd9492d6c4466cda8a006877e223aeec6cdc4257e85
SHA512	95b28dffff8dade562998c96756d9c37c355487b39533447f50e3ceff91c8a99aa12f092c1af0e8970402403db35e00a8d482d44a0cab00c5c50b459e4c44c5a

C:\Users\Admin\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini.RYK

MD5	7c87916d9a5fa724329255755a69aeca
SHA1	3639c591582a218bcf241f2289465484b54020dd
SHA256	81cc54a4e6e6be3cc25e056dd5bb979a56ab6f003172cfef93e80b0e59a935a9
SHA512	222b10430c9a5d74addff47460da5dc2b0de2087f4a96c0aa506f43cc7bd6be6b0f44e5b115ce113b8e1fe0f4810a069e6604fe3f623ed395c1ba093b912c93c

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\334W6EWO\desktop.iniRYK

MD5	92346f680c7961c2d46ee6f67de2b248
SHA1	efb52d355ce6f41c9aa98bd4e2a2a2af0983a4ba
SHA256	fc686770c9581ee501721e56813be78f480d231a91b362ecb8e18cc45640c4f0
SHA512	ad5f4e3ed658f5be5cdaa00e1b957b8b31f2b5fcff56fc3dcbe90523bfdcfd0f2b2909a98201d72a24170cae461ec318042ba58b88b7629cdcaa81eb8cf7a09d

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Graph.emfRYK

MD5	c3841dcc3cb462d54121fe7a422604b3
SHA1	1960a7b8c90ab107f3e8f6f721c4afc8b255f1bc
SHA256	408cba662d9fce3400e201d966abe782100078dedfb4651f05176af3d8823d5a
SHA512	ca563c61f931681c71d4779181e58727c728daed8bb85f9e3dbb2b6219b8138c5afc5eea251a6b28346c51caa4b8590233256e300c656d3069ad27b3cdba648e

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UIYQP923\desktop.iniRYK

MD5	b07bcb4bb5adf7f484f6201d6d6def34
SHA1	d0d57d72213b0b4aa21e53e2d30242ecb6d65bda
SHA256	2fbaa50714cbbe3becba0bf2a2608f43dc457e81eb99b72f20a71345b81a7db6
SHA512	31b26f6a0a67e6634fb8c6350b753174e92eaa51c982e7c8e0b4ad6e6f79f1a3aac202dc46feec9f4537d358cb305f09caf857be4fc9aa3201545ca594c76ed7

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5	045dc8aecf327c8133dc0a874204d16b
SHA1	336b825866f5bf621e4ddd15a65394af65a40199
SHA256	1b3f15178cf68de4ef2a5147891668676ade108618eee9df1ac48a0168330972
SHA512	0d0579c27e4984c99cb40990453ec8b782ee678b433bf91c631820bed4e6364f7b36edc6af23a90a9fdb9fbc83801998d169b1cf5998d2e469252118eddee17c

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Seyes.emfRYK

MD5	3b44a80ba6ded15618e29361108e9c9a
SHA1	2f743994467bff16fe8bb1f6cfc61968dcc9e2b3
SHA256	7ecf8dd19c67ce4c09d60d6de28a131633078704b87f6ea7618faaddf283f965
SHA512	ccacfb174e72622f966a73e6bee7c9b096bec34690e2ccb480f2f1519fa761f50e874ec6b764c8831f01a9533ef2e8dcbe6ff3bdb1ab24a01cd931cbf2dbacc4

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\QE6QYUAB\desktop.ini.RYK

MD5	bbae079c8db7142063b13ae4fa8d439a
SHA1	a7b4c930a726d1828a0582ded52a8ab87fea1145
SHA256	2836a1dcdf8e98fd935524396ce194dd9f1480449303bd4920f1ec642765ea6d
SHA512	c73adbd5e474c5cc7864cd497366a791ac7986f38ee41e069b96bb6444418208d77e3bf3db82e96c81a64844db8affd25d6f8cfee795f55d5ace9f73e05090dd

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini.RYK

MD5	84a0682526aae9f2c646d79d19fc483a
SHA1	e07a73391a14ab696605fff328413052a3270d31
SHA256	212f8186557c173be00a646bfe81f18bc2bcec1e390f28c726f839e66304b18d
SHA512	754134b545df7021c9509d1ea9f8d5e4453744917fed176a53704a30415b31455c8f58485fec50f603b97b81c09fa3990e94468cf4a3c6c3dbe49a5e009bb927

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\B5JWTXJ4\desktop.ini.RYK

MD5	f1cf46a73436ed52d80f65c9ce255f09
SHA1	a4e7e9babdbb3cdf56342e143dcb64a243c12f3b
SHA256	858bcb33f075e3bc98d722ab38ed36ef13716539d9e628cc23aa34bad7c1284f
SHA512	52ebb328bb771d82bb42de3564a559af0d92a686d0a8870669393344115911b8d66530a7b1387b858e32273f13ed8a74ab966bb345caa05f23ffc0e9ade1f18f

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.RYK

MD5	c8f38ef908f2be0a86ea2538d5e74f44
SHA1	a8f183d8c9d1924f69bd6dca74f525a7c9906980
SHA256	43eb9639cc72b6b4697b44129bb3a63716bb4ee733bf831ad78e84030edaae91
SHA512	7811ebe823df69984fa971a2c4ced5a73910a8157bbb319c56ba2ed17d56f6c3fa945c4920fdf424a249eb62a7e64a49e534b42d57455109c37cab29a6959f3d

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xmlRYK

MD5	7b7cefa07f4ee1613743c9a3a048dbd1
SHA1	edc8784626a1e521d4bfd395c47dafadbc137ea6
SHA256	678a494a7f824755e1621f922a4ae2e945f2d895b2fcc2b097977f9befc6eb34
SHA512	e801541532c080100633008c9c81aab8eb94bce5efb051c0f83eee7986a52347d584f7705b972c992273b37af6f53085e3fb3a2d3c7db3c8bf5dfcd8cdc866f2

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.RYK

MD5	753d79e55fa30a7ec86683ba4a06a09b
SHA1	9aaccedb729e85bc2c2902b5dac075900f6231b0
SHA256	0e3f49e6db80848556d320aa5cb82e71748e617ac7bee14119c9fb712dcebc53
SHA512	536f25dca5b0577a0891f8f65099f97bf929ed15a58eb0607ddbc4456562b18ab7029da64edb0bcb1e46b5efc1b72661acf2c44e75e9217a16a20eaaf4e22e18

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-msRYK

MD5	2fee7ae43d0cfca130d2c1982217857a
SHA1	e87c565d42720fc3ce941454947f7dd24c9ef173
SHA256	6266cabf4f41f42f02cd3fe121cd6b032df85a764b4781c93c0e877355c820fe
SHA512	becfc4f2001ef06167cb87e31421fad5f1bcfa4bb4d90e3a6c00e4093bd75c33b4f9abe8b999480848c67612249535fc58648aa7a3c29e0bd0d981088d11b495

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.RYK

MD5	258fc9b793ba3cc1bc8855c126a2fadb
SHA1	43cb957d6d5d72d7f81d07df60fef29e11d20427
SHA256	88f7b898e532a92997f71dc6e2aed3da0e5d444a832936512251d400c2efcdc6
SHA512	e5cd19b19ce6a27351189d0a385b87e7bc9bff6ac4fb9fd5836b082ac30cfe27556f666d278cca381fe59307cc2e5e3b3b08b866a550360309878f2cbd6a49ee

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat.RYK

MD5	4f6120160f0f44e230684512c3458153
SHA1	c89e0bcd071b64d3c6beb05e0430315f1b249420
SHA256	46c0d2a91c3356346c66cd838dc99478d61f7f5452a57bb94fb75acc048be700
SHA512	45505890d129fafae9c6f31e5ef909ac51c2995518575c63e83ff07119a3819c418403edc84f6aba22e5e61b0056c4a847ccaf6f4fc37bdc37aa2d999fa3fdd8

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm.RYK

MD5	76a921d35e846dcf32a529dfdc426129
SHA1	6478a319232d0ba93ada5ca856a97744b70d465a
SHA256	f0939a951f7ea4bd804597777e489312d9aa21be6aab1458741e20684bb1aea9
SHA512	7fceb11abafc9e1eee80f805614b122a67f468aae4dadee6e8830f6c4c3365934b634d79db69d01707c09f7625a7fe634792896449653ecd04bb08b4549324e3

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Genko_1.emf.RYK

MD5	e68f478dfc45aec211b41f6f59cb6fa6
SHA1	ed02b58dd9719847a8c8b5accb2d616133b349e0
SHA256	39ccc50c2e04a93844afcb0d4ed278ac50542c9173f7f3c9267c914349eb8018
SHA512	70290c5f2eb991d108e1a28e29cf6698f252330f95daec88b63198d6336ba2075fb0343b3eccf86c29d2b1d49d133a03359169fba2ad76f8d12229f4b96f0399

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.RYK

MD5	fed56567f740893af78f3990e7f7f66f
SHA1	3f37e849b3a8b0739121c2697dfbafd7faefdaf7
SHA256	2cc94bf8fde811194827dab544a672c7951b9eb195e27e1a8056e05ce27f86a4
SHA512	db141a7828b48dc6ac1968ab14d6fbeb9edf70df683511940cd20562de949907cf65b7f0d4c7e26771cb54f0bdf41e6f01a3827af4ccae610f0d01657e80b801

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\grid_(inch).wmf.RYK

MD5	51a3bc7fd4a8a8eea98c33094cb223b7
SHA1	e8d4f0a75b8610b938ca60dc4d6d67f6ca730fe9
SHA256	9a9c67a16a3487742725a9a22e4ca362bc40d3b4b93ba1489459510cfee6a388
SHA512	b07cdfbf72d7aac3a0a812cce1e19529b5648e9ac211c9ce6f4ca16d622a38aa49defec620a2fc04b7b35c4e0553876a67c5e07f6ad3c851f3d5ef2c5ce0260a

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg.RYK

MD5	1d16c34dff08789a2bd79f0ebeaf27ce
SHA1	5b71a253c33a60028df5b3ded7d291d91c5c50bd
SHA256	6edd476488f72171c452943bcac94b9eaebe0532fd4139a07ebe964a0f0d6aa3
SHA512	62b57be94b337253588d1b7f2d91e64cd1550333e538bd4a21d923630582b58809559fc21ebef6995f9492b1383f4d51dbd315c6bbf8ff623f9db466ad61d752

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm.RYK

MD5	c61e1dfafc8fbd4227645e19ebefab5f
SHA1	69717150a37328d07693aa1b1e5da9ae78804784
SHA256	147c1d0b2a6c0eaf28ebed87ca692f8385e28bc28c4698005c2fc557bd35a21d
SHA512	80bc499f795d41f55aa5a690c721e2379890095a01b7509faf86ab110a396cf86a6371b9f067c9dbe5e38eda732aab9e9f176e937ca8dab93aae3f3ab6b5bea1

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Psychedelic.jpg.RYK

MD5	3e4c09ddd83b1720ebe8c4fb89ff4545
SHA1	50cba755a220a59f0719a54668256d2f1ab8b9f3
SHA256	20875a3b64666374c261cd8ab59f3342dfb0ef254868ad638123b710518e1f35
SHA512	6b4b828517390881fe293bfeadd68d6d56ecd32c34aece518f3333cf87e990019d4afa72f67b304a9409f3e6d45961d5d2d7b6eec05477b791220fbfdc4e5476

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.RYK

MD5	5f0ecda2a28a465ac3e0d1662714f6d2
SHA1	81741820d4d8fea977aed3b2d97f6b7b5c9c7d26
SHA256	9dfd8f9e7c825c94033bdb8d3474c4d0e89f35e8d4c09f8fe1a7ddbd2c7851e8
SHA512	bdef63411f72c69ced5bc785bd84097134b5fa0fa1eba61e57278c531246e3a3569954655846ba12fb2d08b026ae13fab7fe8312cdc9efa639a263f522257bf6

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Small_News.jpg.RYK

MD5	a967ee4be92a5bd5322495525df4aba0
SHA1	e03c8f31995189b1f7b246b46880e92c949efda7
SHA256	117a54d38a56e5c92b7c9df112e44fdf64d63904511323215d413336d0a8b397
SHA512	b65c57ece9c358efb6e0ec4afd3148888c3380762e313c84d5431d762eb56d24465f7c42d4976ba5d65ee56d08832b967dde0de73fb9dba5ad90e9a6651393e7

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Tanspecks.jpg.RYK

MD5	d98bb266785efac96fc45e37da4a2006
SHA1	496e037b1cd244da92d3bed60986ca1f7d6e44a8
SHA256	1808756ae60c929309db27fd6f34b11dfffeb1612f29fa3814c32cdeb354700a
SHA512	061cf0586e51c75c1d56a49388f063c3ebf3a46319d83feffee268fdfcc9d74867d0b8cbc66c552e5d6fe851285b8757365879ef3e61026e1a02d65cc4421476

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.RYK

MD5	2148ddba59c3403bfe46418434171095
SHA1	d9b7091aac35a3b3f55b2486ef25e521ce951aab
SHA256	563a69adaa0314a08e8f082ad00684264d763bd16dcbab4180d2afc642cdd2d9
SHA512	83f846d0b70cbab1e8d2fe44851a8ccc53be67d8edf4dc1f4638318ecf085e4c81a67d28d5f998e87d90a78784137b4d68c008047145ab20c79a318ae671c8bc

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Wrinkled_Paper.gif.RYK

MD5	3a43d304c6d1889a5276ed4646e9371e
SHA1	908e86d2e144117780278533e75f029b4cb57ae9
SHA256	7ae6533143f9caea3515dbea6acee790c6ede21b1940ce5e57a2f7b2e9e993f9
SHA512	447cd18a4d73a840c5167861ba43b2a978c085b0910bf2bf44351ebe0b54dabd3a47c2d1a89b8ab2baa685cc369dc0f024641dd3b699af4acd2959d3aa0cc116

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat.RYK

MD5	eba12e6802cfe74ea164ccc0360e1fd6
SHA1	2fbbffd9f7e3c4931726d09a919e12fd41b37e9b
SHA256	2951443f7dda8161e58673b05d91ec8184f95a59eb01328a3f4e9d31b0882305
SHA512	d58979ff2e25bd512c68a3b104ade30ed86690af40f7324c9000284f01d6b7a18a3f73b0f7626fa88b53ab0423f54903dc66eb2899fd90a92358304d95b3f9eb

C:\Users\Admin\AppData\Local\Temp\072c5df6-c276-4384-80cb-815aeaac643b.tmp.RYK

MD5	e35b7a92fcd28d792a9001d398658e75
SHA1	229c5c3906a9ea8439a0d47de88dd29114c19a98
SHA256	a19ddf97e2713356af3591782979f67ed6bfdbcfdb8494cf293a19b45bbcb9ab
SHA512	c7d854a78b1bd94e93b731638dc5f3863b5ed45880182de6f544e80d9bb9c623914360648f9abb28220ccc4bdedac9c7fc09006bca1f72315b19fb6f3c696177

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat.RYK

MD5	1454bd8ecdfd393acc4d27329cc61100
SHA1	f15988d6c9780dff24b71d9732f463bb03fa1fd4
SHA256	e7feeabab7ca91a87f60ae85268915ef5cbb1d3c977a740a69d6afbc798b8639
SHA512	a8a253e11fd8c60824916764074f8a58b9e5bca5505351edc05310ff5b9065eb77d9d724671ddc59c0af1fac48c67e77ce5a4db43e6df2e900a97c6be221ce40

C:\Users\Admin\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Suggested Sites~.feed-msRYK

MD5	9834caa0e77a73360690c3ebc3e2a28d
SHA1	7c3105e4e24b41d33ad78f546cbbaef555fdb2f5
SHA256	9468cbfb4500ce5017ea0c94fdb6279a76af6438c7450a600d84179cd393e2e0
SHA512	2c33b97a809018cc41820eda2e6672c42cde7ec47b71d91e085017d4fe93118f855da0fc663e7b77fc0f8029e007e062fa7f836c5f5b7cbfdc34c26cd071bc8e

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-2845162440\msapplication.xml.RYK

MD5	1976ca1163e074ae0f4cd50c1f930145
SHA1	c59d67436a73683881ed0cbad5fb0ee9ff42dc41
SHA256	a8ef9c5c3d4756ca704690c39907357847c6d6c3061c0540c08b1cc953a2f6aa
SHA512	93c072534d503069a682ddc642117db966cdea7d3d93ab008d64f1eb62d24221802f4e6c30d9980179f391bfc136513ad7c376ce67ad8f3c1ebc0baf5ae53e4b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.RYK

MD5	5880bd51e89e536fee7d96abbf9f3dcd
SHA1	0f49a5c0c7455165424d46583abf1742f11ace80
SHA256	6883ea4e212ffe638d79a65148630de44be16d8a92a253a00b35b7f8bfdf65c4
SHA512	b2f88d4a569abb36c602c7d903f94ae649fcda8f9b2a161d71673e3b11a19a06d98249c5d9317c871638dfc9fec4f2e4038cc76e443c01e84946f61cd4ede5dc

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.RYK

MD5	620624f5c4d03093395d04a8752c4b82
SHA1	c00e3c5778aa514a0d4fc7e7108020a4b886f1d1
SHA256	63af681aaf51a01c4c1f7d2c9582f7b915da544b164d039393cc5c275460b372
SHA512	ad823f0f60403b1929c582e05db2549bba491288fd48267ce59ba4a50f83cffcb9f1a3ee7818d531e6a27fc4073f947ffe3ac21629b6d7db7864a0a31272a9c4

C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240419_125759045.html.RYK

MD5	7391c6ceed98944f86cbdbfb2a02a7a8
SHA1	380db78d1fc0ee214f93454f8e915b0e73790aaf
SHA256	2dbaa32767967c22119d7fba400684af0329c9c0a62a1246182c24c586e0ea9a
SHA512	1e1f0645490b09432e323df73ba756b7a171e6a977695ad0b04f325887a91806f79637694c4154fccfebeb9e0ab20a8bac3b11ca6d4c0427c9464e586f9fd7e9

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Dotted_Lines.emf.RYK

MD5	ad241e5dec84e5273800dab819bb28e9
SHA1	145f1ea7eb6e79108490f5e1ebdad24839c84883
SHA256	e59b07604536b02a903665e2e880a6eb9a376738e4b372afcb8b948629fb5fff
SHA512	87c94a92d1592ded233976bb025b2390afc4856f7e68cb5200c287c316cd5620ca477806e56f1bbe88d8264b8ffea635981291fcc1a1950fadfd8017b6b5fb7d

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Cave_Drawings.gif.RYK

MD5	6d37e13ebf1875d331ed5ec493c88190
SHA1	5a731a35a36db77c99b429e99c3681c68169f532
SHA256	ffbc2be68f4a0e4c49985e86761357138ded77b4b80a28bcc769f8945bfffcc0
SHA512	b0fe923e20d8014a07ea98f7f8055fa70e90c1c93df96c3e2694fd105046bdc13e1c46614fb8fe56bda8e5db2d4f80635f911ca48d94c8c82a5be1b61a32226e

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg.RYK

MD5	30aa27be659321ae40706c495bf1e233
SHA1	73caa9f48aa95cbf6e1790735f323a2b5c0620cb
SHA256	c6d3d26eea84d51f1f00c4bee8cb0b4da86fd10866cdb4cef1cc7948f7163195
SHA512	d4abb7e443369782fd65d80aecc056d05947e35f12ee87d1ff5bc8cbf3f12d2f191317529c0b6e4dcf2fdd0b31b4cb827049b761762766fa6d6b42a2e1ab6aed

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.RYK

MD5	d62bc6d289049bb6a58371899aa26f31
SHA1	fa2b6f3bf1f62af5a46c6c863b5a5317da09d789
SHA256	513800254a4f09e097951a8bc0520bcf5fa924e60bc3877822fb795f3c2abb77
SHA512	227dbd39f3871c4e16f08228101c29e0ab97bec2d6c54de29044c7a2ae43eb1bd8f8804a39411db0b44d35919abaeb180c083eb96a679c0fdfa9b17342e3b2a5

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini.RYK

MD5	5da1fdbfffe5f17300b15bd6c403c113
SHA1	719448df8c9917678e5bb841ea067b4a4193a657
SHA256	1b89db96e067f9c6a01990e4f10cd2cfcfbdf33e59502634a5c35d7a6c57656a
SHA512	9cd6656fd4efc55b2a3d505a36bcca52e372e1c83329e1e9caa5cb545b949894d3c71a707b8cf7e80ef10c8e6cc91d0b332101c416b6e199010981ff2ea4bdef

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm.RYK

MD5	aee59258aee13ae06b001b34624c97cd
SHA1	2bf1acafa12516d9bf1b7f2abf015d4485915bb8
SHA256	5aeba7edbe5e997e9c0a9e7434363fc3e5e28546744c4c1f17235cd57477331f
SHA512	31df4c313ac0d816f9cde145e7ecb98f8b3869db07e4fd5ec28525c8f169536c20caf34a9cdd019c8f853cafbd04a4e52df281c7871414eca00e140e8a484a55

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Notebook.jpg.RYK

MD5	051be544db7e9837228f8a8a4dbd4a44
SHA1	1d6b726e78ba5dc24ee917170112a860fe6cbadf
SHA256	4895f5103ae263d32c062430d9a36d7bce97ade2c0710e8fe58004a269974fd6
SHA512	f942187e1169898e021433ba6b919a2362a4b71104784441e940b176e6e61361b9d7437f135b6018f0bd895cec5da87549fdfa9c4de778682d31e89d36c5e600

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg.RYK

MD5	76c19198de80d1c5d2ca2ea73ecc0e9a
SHA1	077adc0e6589aec2609c6668ad9cf4eb6b0e178e
SHA256	9ec9bc68f69ff15e4553a2f3a91b5b94bbd4e981b68c68bb173c538beffc3df9
SHA512	c72a4deac54fed1bd6d552f05743f85211f9cb81e58d184be3790b53ce459a8e184b287c3d4b2a566908e2ac3a766707f3c16e23438f9a833988ec2407a3bf48

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm.RYK

MD5	dd940d27bc53d5a2c3d17873db1dbfb7
SHA1	ce726221412fedd17ac8cb9bc9790539ca21d730
SHA256	50fc4e85539773ed5c9157b3c5422306db067f0f3b9ace34bec9e0c7e2aaaa77
SHA512	068eac39a27114c240524e1e58bb01e7616df0f81c42b2df57667d3228c8afce97ebd24a0be99a4f6968d4fffb6978f5f5271fd05b16aa913030604c4258c970

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm.RYK

MD5	f43a289f0df26800632edfecd2ee5f47
SHA1	b54ada4613d77cdeaf7849a57680aa427e19d02b
SHA256	2cd103994b2095390f8a56c157888272028e908b142fe66bd8ae58b8a617f428
SHA512	a4ac3eae0ea09b90baae95d015bdceee4484d44f606e0f478e6179a870c3a858cd0263fe15aef615b8c22519f15e97ca945d429fe702bbf715eec8081af411a0

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.RYK

MD5	1d4cf93a0d5d9b615dbb7796268075c0
SHA1	6505e36b6dc8a6620cc1ba9b1bc21779624a2feb
SHA256	3099ac25e6b2e824baa17a917f58e25cbeed06d1a5d92de32de1b7b48451078a
SHA512	343ba12a03561fa7876ad6e646a59809d4596776a78e34590b5788a70c25ba09242e79add9a659ec6711b2b99accd2c3f6f7ea10becf00c07d98a08864524ff0

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Shorthand.emf.RYK

MD5	beadeba7130434622d989bced2893077
SHA1	17f75175c69cddf8368dcfc27d7699f7ba731e37
SHA256	dacf4d67c27c6afa3c7781c5917e0e68a5c59529d6d01d3255f295f9cbe6fdbc
SHA512	fd1f6fb6032722a74a6765a2ecac386bf3f9fdcf70c61676bae1c9e215aee40f529b807657f538dab81d020fa7e719b8396a22f4bffcd6f5bc7626d5fdc61742

C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\Settings.ini.RYK

MD5	12a7e9b6206e3210bf68eb5ae8d96901
SHA1	9f6aa15e3ee9065d78fe16e724dc82121a8d4879
SHA256	cb86f4e8c5122f976385ecd457e1c01b096f1441d21a931db5a1cb17be091783
SHA512	c5ac5ba82806a559302576a9247a93f99625d0b4685c543c5f69cd836eb46d9622f56547d61c2ca8a927d9dff9727c3be7f41fd0eb973a4ba14a8d9887f5483c

C:\Users\Admin\AppData\Local\Temp\dd_SetupUtility.txt.RYK

MD5	1d341254751f41f9265a34a1ca344e86
SHA1	f51ba2b139a5943d937bd9c5c02ac92b670ce617
SHA256	7979d25eb58659ece698651f2be6f4d4d1721b029522205e96b17d822aa76fe5
SHA512	755de3dbe1dc6598b8a7e860aa0ca5dbbd9d535b3bcd5a35437db31a5aa4bac3de1594006fea30c774d224d21472e65be768911d9696f1a479faec6a2e301a9d

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3008.txt.RYK

MD5	02797cbaf7af9b154906b9e714017fc6
SHA1	baadbe00d6a32217188d476f58a971c79c84024f
SHA256	f90f57bc3cac2508255406bf23dbbaba024377407c5a238a1bc02abe0cad40d2
SHA512	7e0f4f86903f6b25c32974ad8cc52ade9f6e75f86dd28b444eb77d4e16e901cc3966ba9785c4868844431618f7a3e1380dd22b857ac1c5ae22f3943c19b76f70

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pine_Lumber.jpg.RYK

MD5	1f52e278e9bc5bc67d1b9dd5c24d2b0c
SHA1	b0f131e2a439a2ed7a63338976c9dd70e586a26c
SHA256	42fa21da351ab57489d3fb3efd9336651f8db92da9158c021514c04c342b5f73
SHA512	430bc3f1b4eabc61d11b7f533cf1768c85776845eaa4007fd83ff2f0f24b761782729fd833a7f4aaca57b59a06082ed05bc711864c24f73d9c3eb1ff09d50379

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\To_Do_List.emf.RYK

MD5	7ea87fbffa76695a730750346e5d9a7f
SHA1	eb7e58325ee7897506a83ca9b85e3c5608f9a8d2
SHA256	5ffef7c2c5bb72f99441c11442837540fe777c963cb30a1e3cb9febff9545aba
SHA512	3c08fb478875ccb84c89e445ff686f0622106f1b178dca58304c3a127b4f9c71005c16df97c2b0ac40f74c3179925389f383366bb8c0218811ac250f4690785a

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms.RYK

MD5	4dbac06d6aa8e4cfea5c72c1f6a1f145
SHA1	5ca5cd289617397a0a8c7cf2eac11d322778c1ad
SHA256	7730dd5fbde79f50cf7d9a699b5035fdeebc87203ddb2df53d1c86e1d0fcec1a
SHA512	18581135a6fcf7b49493fecbe94162496a0440d55b2a1d00eba37f394bef8d921fc54c90bfe3845e70d4411c882cd8535c0ba20fb84f09e875b9e161384498ab

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\04_Music_played_in_the_last_month.wpl.RYK

MD5	5e284d765607fe9858ad6632ffa5c5b1
SHA1	cbfb52f5a6404b97d5563ae51b10ab155f614b54
SHA256	e32c1a7ec42bb1e9b3a4908724867748a3fd6c389f2642323c4e9590d71c0db0
SHA512	64ab909a0e2b14c8d1ee6d2162c2bd6484a9f7a0335fa1bb098ce00f621e5a98ed0e84dc384db8b03a6455bccb7fd7e1a6aa6008699b3b028c72971bda0b3b80

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\08_Video_rated_at_4_or_5_stars.wpl.RYK

MD5	1db1f390a502a044041653c3632d1762
SHA1	53b67093e34dbf1e4cab4403f2c6577cc3dccc1c
SHA256	7933223c40f9a27011a6de8625d9582b054ec2c95cf66567f06eaf30c1973c05
SHA512	50b1231246733c5664e2fc22a74be8a893782e8d9e48e8cd6810beabeb004a6afbf8777d9a8f0733d62037d16de562eeb6bc245ee90c29fbb7c1b99ca6f21453

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\10_All_Music.wpl.RYK

MD5	ca13aafe367ee4cf59daf95df6cb8629
SHA1	148522d55d6b9c7194d5dc03d8e37288421b46ea
SHA256	43091b5496ee232a7a352902722f0c91b2be6d30ddcb36b22ba1d725cde55baa
SHA512	2fc7759494f5a899582bcdab3b118b93d6664d718b9efb7acdd0b779b698940cde32c6d3cd3823b919d82989523671c4979d1684c86352c880d2c3a131823549

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{B1AEE5DE-E774-450B-BD4E-150C20A99C34}.oeaccount.RYK

MD5	6d00b2eb49c7b850d258e3a0045f035f
SHA1	330e1b31330a5b78bc61826f3a236bf75193e8bb
SHA256	8c6feca3fac3a52973160e85d69daae14a08eb2a9f5e9430a160ae5c250f52c4
SHA512	6d104e45959b124ad9a0f7c54cb6a07d6cc00d9a8701e2fac6a8ca4ef2abefdcc927beb261635105eed1028d46be91e9bbabd2a064da81fdc51ac38d3b12c854

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\11_All_Pictures.wpl.RYK

MD5	aa68b132eea7add16708e11ec3e2621d
SHA1	6c9caf1f43c521bd9ab649ae33d4d89d25f2376a
SHA256	061701c4aff608fc0f962cca96c67451cdd83190c165125d621444581ee9cbba
SHA512	3eb3f496970ae8bcd581ce4657bce1ac4d5df54bb7266d0bb637d35e478caccf0dd1abb2b8b49b015f91912e10f2f34ff913eeaf7aeda1932fe8f2d03f98eda0

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb.chk.RYK

MD5	3b009d9f2d12727218bac809cd94ff72
SHA1	3806635baca1a14c40607d7a6e1d0bfb93ed933e
SHA256	f81ab2b43be783039433ecc9093b5eb7500fb8d555970585eedea6d88dda366f
SHA512	0749a1fa9258a2918bc4c36ecee3cd55b795881fee694a517fe9d4f2c29a052e141c5eb3dc6d07f5b6db935f02d66d2f55a082839c9ab44af943a2c84873bc55

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb00001.log.RYK

MD5	330d05bcb1d7dc4945a22140918abf33
SHA1	085b1bd0cf7b23da4057a14b48a88015fdcee618
SHA256	1020249d6004157f240809e311138790f512e24f815266bec219d8945da53b59
SHA512	838ef13267aca5dfe99f70600adf2144af0a827813c96e5478106182bdc4d927d461231ad4062c108524376264ea3e1fa1fbd40ece73231291d1f84b0bdf79ba

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.RYK

MD5	caf205ff8598cbf867e48b39407d93c0
SHA1	b946726f09a23e184bb32ded6c11dd3b88fd25ec
SHA256	cfebf539f19ba07c297c2375f31032e5b5e7a0d67b556d5e5e390845ba06ca2a
SHA512	74bdfa7fd476157982b3b5999b466e455611b9ac2813332959b4559a7e7492edd40bc4384bbc9740853811864575c91273e1015a555e959c3211d0ff89235536

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C3BC2C04-FE50-11EE-9BF3-52E878ACFAD8}.dat.RYK

MD5	3be33105e24d32e1a190e564fc449ae5
SHA1	2f5719d0f04e70067c874a9dc98a100a71463944
SHA256	f673b2f125d04a5220fda6dff2620331d5867306a292fbba546ed47c11d64abc
SHA512	186fa7307234612565387c32af25c8f668a938bf898dcb3dfdd2281909b1d71514e4760ec5b6ff32f8806d57c7691a4d6aa3ae77507bb4ee0bed3ecfa5bc7521

C:\Users\Admin\AppData\Local\Temp\wmsetup.log.RYK

MD5	a5415d9850bff350a396634279df2ff2
SHA1	9c21e6e414a2fe1e73abe43e54d5bedced78606e
SHA256	d547c5c28a6c81260d60e9fa26452e03f445361ea5fb566d717ae959d677d36f
SHA512	4e1beb66e76e4b2086c149d2124df935340d9af112e9a18bb69c5b9d60d1b15e94298bf86f225ad7610c0853c45dca1286414908416c4aa4c8e44f3bf7286239

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Tiles\pin9728060290\msapplication.xml.RYK

MD5	ba74e9ebec086fe0294056ba70936626
SHA1	aa245d356dc65d16b5b5625f4d5e68cc3a0c7e97
SHA256	e45b21f8b2b39f9e65cda5b024ea97aee52dd2b4cc393489a565f5fa7fedd0dd
SHA512	c981fcf8fa8eefa803ecfd5bf8e5a4fb25fab16c47aaef1862d0f2f60647e55ac662e126e6d25113a34a14cdc5075b550ec1b003fd83e014d4efedaae8095b9d

C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.RYK

MD5	62e00cc63b1b476ecc1d948146e295b5
SHA1	b401148a0373851304f63b295ef0e5e48eeac17b
SHA256	e66ea955b29991f1ddc24aed588c7ab2f8975bcff3e9fd9c060606ea08a16c2e
SHA512	ee8a3de8eb749ceb2930ee5154ca81d55e852a8c9f83d3b8efbcbdbc45399d2b00fcdd4a9e72b96d9321fce862746a52f07c885c434d97553b3445b72b4f971a

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\12_All_Video.wpl.RYK

MD5	d45dcd0655265f1bd0abba5bf12fb00a
SHA1	009412cec9a1fdf098ffb4768e42f7172bc725d0
SHA256	bfff2db0bc2685a8adaaf985e71d87d7522c222e833fd70c4c847f6c22f97e89
SHA512	1e02bcc685b1ab9ba0af3409a7df66d2139b26fc8cec642bd2dddebb5436e99ded6a87ea78edc62204ebd31d658f2251071fc19bb6cc054b9d43142932fc5cb8

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Blue_Gradient.jpg.RYK

MD5	0cd840be6bdd35e187b5b67dad78c0ba
SHA1	3e48795ee94741a90ede33d689dee16340576eae
SHA256	84cbf6f7f581e75867e38139da7a1a934a5e25add7f8b0bbd1c4f1dd8833c8a1
SHA512	d338a390f3022bfd3d6bfe75b954c7337fa585421dbae798939a70f180b6eecd7e9799520bbcccc3a86fa82223db1f02d4248f6fa40e93b67da30e3eed23a073

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm.RYK

MD5	5377b9596609c2618a86e50c7f61cf55
SHA1	ae35f8044dd7d79ad91003a68732f6067da7b064
SHA256	9d666cb0fc8ef6192da92ffe2c0c5a96d0f583da562f6c63bcdf8e0af60d4d31
SHA512	1d1d24be8b9be5c76633da0730b5e27443536245230f117eec98b8195fa13ecbe263e14cf8b021724ddc8b14bf27e0362487c0a85cce3482f49cfc631c826f6a

C:\Users\Admin\AppData\Local\Temp\scoped_dir2060_1620485634\072c5df6-c276-4384-80cb-815aeaac643b.tmp.RYK

MD5	5fddcdb6a272e770230481b6403fc070
SHA1	5b1f441e80a9a8c1b56d09a1a9e847b823fd526c
SHA256	524dd25357a6bf198937a0fb29e8c091c6383820a2b7c079879bd07eada66980
SHA512	ef7f9e2d4dee7875064583c9efdf480e49637283a6f1aefe2c28460b00b2113491e0491ca977463954baef1f84db2d6d0ba1368f130af99868ee48ddb2cb36e6

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Genko_2.emf.RYK

MD5	ffdde1f8ab3b759257c9cec72b9b76b1
SHA1	25eeb40fb17bceb1b889a5a33a474f5761cb2cf7
SHA256	8a74c540123841b7da2a2f646d495e8d2c7b2cd64a48d381baac26ec6a724a6e
SHA512	3d8ed2cf6b6d479ae8debe2bfc8a536362bdf0c9708376c8f567a4a8f0e3886953889d0f9c1f18cc02c6c1f1d94263df1bc7f556bd81d3fd956d421470f6a979

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Month_Calendar.emf.RYK

MD5	51c4e95b50c89fc0f75e0dac788e5e73
SHA1	c741195f4fe2d9c5f32881fd0ab74c16016fe2b9
SHA256	2eea19b52938aa2eddd4dcc1fd5be2583862efed8a5f5b91b2513d5a2a083c1a
SHA512	fe4f058fa39217bbec56411592f0b8e61836072403b5572a271ec97918fdea539d7e038bb749033678415d0762598c03af60ab1e2ff77ec609036f6ffe1221d5

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\grid_(cm).wmf.RYK

MD5	96d39a218efa91f1af6ea27bbaee660e
SHA1	328f1cc190cb0c796e22528469b19c792754790a
SHA256	bb0d558ec79e5461269bece101f9ad7faab84ac3c203994b9a2afa1a8e34f3cc
SHA512	b7ba07c802dd92189cf3e51601095531d33015bdc8d13dc7efd9aef1e4dcd573e6c70fa93397463d1620f88b05c6442442c2205f616ce84647a7ba678f377517

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\01_Music_auto_rated_at_5_stars.wpl.RYK

MD5	9214915f1caa3eb7b78dd6b630004c15
SHA1	d964d3d7a35a11011611c2376f51a853cb8169ff
SHA256	da02e9d746fade4fc7cd64902afc8d2d3b6c82539acb866cc3d8907932f177b0
SHA512	62d3b66a9d59b5a099241246a3c1f1a7de8e15eda05a1b855c27cc7652bda53128b173b30dd1f1283b1aaa4dbbfaf26ee4be8cdf36b5277bfca6dc2cac4b434e

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pretty_Peacock.jpg.RYK

MD5	009e088c62bb2c6526bf76bb358f2413
SHA1	d3629d89117025c684f6ff1c961599a0fa9fcd83
SHA256	cc01a44255d61746c2031e27a8a0281d81c05524c3e2c82fb22513f578da8592
SHA512	9ef4d9ef9b7877caff50cf15df94ea979a3d0b2129330115715621aa750a4f10624abaefa59a4654ea36c0e33f2a8a9492d92e2bf9bb1f88a359c4851d7ba7b3

C:\Users\Admin\AppData\Local\Temp\1aceeebb-e269-41b7-b749-3b0f94e5e64e.tmp.RYK

MD5	ca4ba6c6b6e0a0f5c7883b5f9d048a35
SHA1	d4e207a15673c4425491d14f11a2113a1548ef2f
SHA256	dffbc9204ef0b0c8e8b1413f2f3a4951acfa3bfd52ae3781396f48f239159826
SHA512	b6bc9a1c1468a1d67af4cf61f9acb66f54f89f2aa2d75045950f1ffd4c72f1792502e087b8bedb487cf3cecfedf9aefb3af33614ec27386c6384a7125c490a07

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.RYK

MD5	b0480ff9a80c86457fc204cb36fda5fd
SHA1	41b9d2e5fac6b74e4dd40d39a1f5116e6f3b5cfc
SHA256	da35cf2623632cf45cae76db0c45f8d26598bc7042c2ab5c5e3b58be4e361258
SHA512	373841d965919e6eae6e73633e5c91aeb800af471207d659577d044179e0213242c8fded63bb7f422cfd93fa7ccb63db111519c4f1fcca9bf0e02d9c73ba777f

C:\Users\Admin\AppData\Local\Temp\scoped_dir2060_864416737\1aceeebb-e269-41b7-b749-3b0f94e5e64e.tmp.RYK

MD5	f12ddcf9044cef8ea7f4fb848a23cc8b
SHA1	a9eac23f709924225292a77e89335904dedf688a
SHA256	2df1f3e86bbc5176604c30feca6859e991dafdc5ff7b5ec0aa0bab3017dbb3dc
SHA512	69ced712baf74967d4a5efe34ab3911695330b2006be1b41d28f6299dfde6989e35dcc56c4e03428e1a8e91d185d0b0717b541d9175027d59e898c890a2cf9be

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\White_Chocolate.jpg.RYK

MD5	4d41d2c8f022410d6dd6f74115ed6a9f
SHA1	de1ce79338742752dae0e8b694fc865ce102d39b
SHA256	ee25a4a2bfa52bb145c5647a19ec7c5702435607fe44d3ba239dbb5deec2ee50
SHA512	4ec997167272ad3f815c689f5eb594ca0a3a1eb32e98c21c9d9e4194c4b6a31885c510cdd856d2064ef7ad9f8fba0a25cd2f43a3c28cd0e9a66fdf475f558b90

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stucco.gif.RYK

MD5	95af395f15ef64a30dfe8f89c3055e28
SHA1	91ed9ae6ec5a687de40b4ebb63e3c7fb524cdfa8
SHA256	3450ac39bbc7d3b69db99476572c1e4ef14661eafc06990cf7646f3cdbe0fa30
SHA512	47832735351ab35b02dd9f701335548980bae2dea184efeccfe583ac27cda1717274b3c96582b06a428c8f594dcc0a0e024db7fd7442d142d8d826a5a2d6c1ad

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm.RYK

MD5	eb0bb4d60f609f881da40a5858690f09
SHA1	3d39a26d5266ab8b09ac4fe22888e316e3bb850c
SHA256	bef411d6f69fe7a5b5f04091adee8034f3baee7e32e8fc9845a4e7559e8233b4
SHA512	5f361a10de9e81167fd6dbc30a84fab8d9803f623d2f4607261e6e4769c11c4ee330c22659fc0524275e3ebc1e5c57adb962e741202e1031697b263222d0776b

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm.RYK

MD5	ed5d4ba56381234b5f808c39691c941d
SHA1	19be2438cd2b63c6ba6dabd5f9df3da01c56875a
SHA256	0ce892c9a403b0af0a01449f47ea8c7ea9c34318d44cbef7c98608237210a4d0
SHA512	f294006cad3b3938c08c9fa14a603ecbd389c69183904677d4c8cd4e8e59cd907dedc5f2fbd482c32fa5d2447317efecb5a278e05dd53eb2cba31b77541e10e6

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{CE676FDF-6E3B-4AA7-88D1-AC708FA95312}.oeaccount.RYK

MD5	f113eac1c9cb718d511420d8ad22afdb
SHA1	eaf1e4bb861b141441df529d7a7bade84e619e61
SHA256	5025feddaccb0b231bb2093d7dd068b169da6716a86f0249feac7c78c7317b38
SHA512	5b1d05f79f9c04eb9e232e7ead9bf424c71e74ed8e1bda7bf9783f1eb43ed359dddd465741e1ce607ff74d94ea80bd420c801befc8b95dfc8e6a4b277f071f27

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\account{366452C2-21E5-43A1-A419-3E6332FA4ACA}.oeaccount.RYK

MD5	90fe15e2dbf60552ac5059c7cbd9a62d
SHA1	cc0375640d0ed7c0b337a1f05dd038a7b43acdb7
SHA256	c750e21e5a29306177305b98e4ddb415ed2b922ed51cc0321efec45c9227830c
SHA512	90c4b0d0e1191473eda002e0c83cd27251da62b20b7f05e153d9ace487b3e0b740c4d98cf6b951094bea827f80284acd64374064dec08f6a1093449b8e984024

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\07_TV_recorded_in_the_last_week.wpl.RYK

MD5	7493e8e69817cfb20adfea1a2cb8986e
SHA1	13717bd09abc38a4f4802cc596f4f2a1dc8db14b
SHA256	dabbb0c441970396aafffa6dab79fc7cdb38d95d646174470c0856f067afc22d
SHA512	5e32efb6c867e8fc800b5adb8c1999f8216653bc66256cea95a52b163f50e1d1063938aac077fc65ae3d9cfeea68cc7f2de3974b2881d20be401582fd88619f2

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Connectivity.gif.RYK

MD5	422c89c83ed1129b6d764d27741e077a
SHA1	095a07e61270844ca88fd5f7b99b6f3fc9d69b50
SHA256	392f427379d3dc38c9345f0957970e56cbe591d017113287c60f132c47841466
SHA512	bca30c6d50ea26ca2e41150ecb73bbf11621885db73b8ef18f9540986f35451ba98f4e8288605872bcdf7c95a9fd58aca2cc804f0c300c5f8df66ed452c71741

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3008.txt.RYK

MD5	92b54b0c8859c76bd36f8cf045551eea
SHA1	821a5d4aadd51dc63779a7714ebd59046071362b
SHA256	481f6d010a9b0c770085852a5335b395e68c1981a9246d3a79e4b89285ea8dbf
SHA512	dbecea0c445a980c4b2af343e73a7a6683daba9a18cfc30579d81d72cd977e27d36b28ea8d3f301d70527f7e84e1696d9c4cc2cc89f30605027c2f9b84bfef19

C:\Users\Admin\AppData\Local\Temp\JavaDeployReg.log.RYK

MD5	baacbf169b47432335b03c1c334e136a
SHA1	2b77a574e20267620c189676e23eff15ec64b4b9
SHA256	2fdeb46d7d3b166c3c2bdd9a829fa2d66545a70331d26101c680de02d91cc204
SHA512	929c66731d11dd969bdb0d568928ff098fb3ec0cbf5aa8bb66ad5efd13a01af4b39fa7240e78f7adf3da2b863bcdcec961255267bfb180eb383e945e44339726

C:\Users\Admin\AppData\Local\Temp\jusched.log.RYK

MD5	ac631ac72b80c677e74ea18c58e2458d
SHA1	d1980269b43d4f0b7162f2c0c4a35ace02b4d6ba
SHA256	e39e9bbe156abf548e2e57b756d0ffa4d3a2b385049b4b562a6e2f060d02e884
SHA512	57b36d6a6dedd4c9168f30bd9a1a1ddc74b34053ec3795bbb33ba33ab1705132c1a40b114cbd10c6753f6fb0ef92c10c5f90c5f47f7e283ee0e06baac93775ca

C:\Users\Admin\AppData\Local\Temp\dd_wcf_CA_smci_20240419_125813_070.txt.RYK

MD5	4808740522052fe8dd8c34218ce0d9c7
SHA1	59400e0f3127a0f962ec1add92ab8820a41e9875
SHA256	4930297a188b66806633f8e7b6522b36d5e44c13704e20d99e537a5e84e9daab
SHA512	a6e20ac5ef9f30a596339a7703bb384cb5bc15b6ecb36bddf7969c50dad9329d4548bae28dc71e1bac34be77ab389da942c35a00d9bd71b6be306e0260a29f5d

C:\Users\Admin\AppData\Local\Temp\scoped_dir2060_1620485634\CRX_INSTALL\manifest.json.RYK

MD5	44dbc8d6dedf17bd10efbbff551b41f2
SHA1	c00ff1dc8acbaec4572ff56c31c3f570b6e055c0
SHA256	25b13d184677732c35767e6e1f4b7dfe20c00c5db6b8a396ace4bc57b21de47e
SHA512	07254e2583d91620cba3719e8ffdc9c62508e35c6eb1e7baf6bad9d2fe6ba521f00a1ce047ce68814514ca23719aace49c643cda2a2310aa2556b794f9072594

C:\Users\Admin\AppData\Local\Temp\scoped_dir2060_864416737\CRX_INSTALL\manifest.json.RYK

MD5	bef59af881352a3a336c08b20d293f36
SHA1	3ad6ebc380310217862778abba1f2b5702f03b40
SHA256	d3637fccd52d41b4772fd540af14321a6f6be4681e430c58eca39800540cc2fa
SHA512	ae823d366a14ce1ef62e1e60d8bd86972280edcc5b1be9fd8d13beed3acc35eebb52682b3637ae1832dacf6fb985d5e69f654208b841da1553781068935445e1

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6KIMP0IT\desktop.ini.RYK

MD5	4679069c4e044d60f691bcf73e1443c0
SHA1	f2994562ce55bc975b34c052e846ed45c93fc747
SHA256	9d4636b5f2595a191908071496e624f2c83823724e9a7cc401b3a3893e7a6a59
SHA512	b9dc597ee11afc22a5a2713f1157df4f8b368f15f0c312c48457b0822ac442ac58fb06022fc95d4f9b12ec933dc5cb2beffd03285471102f2f602a335e325d73

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini.RYK

MD5	623ffb469f70a5dfc214776a0cf83dd0
SHA1	79f5ac08940e08b0072e7de1273794f28680b7ff
SHA256	2fa009623b91206b1908ff221aab4c0ae66a6e4ed2fc810834fb535579cf947a
SHA512	98af8484a0385479b201e5ccabc48251cfd620b6750b58b78548200ef8d18c877a7eeabebf19edfce3204b216a8f7155abf7df62c1d831899e850bd4028b6d2a

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHX8DMHP\desktop.ini.RYK

MD5	fb04b4610f23a60600749dd985e3b451
SHA1	172d10d16acbdb9adc5da61482d485acd8a35961
SHA256	79381ba76d813c2c225e84b35950f15767b7cbe6a3fbf464d6c4eea238db2535
SHA512	484a5577cad1631a4dd616a75f3714553d630c8292a818fe9c5796f95d5bc79fb8eb6f32593587c5a0f575d50dbf0a4e4868c8642d3ff9a730e9bf296db46749

C:\Users\Admin\AppData\Local\Temp\lpksetup-20240419-131130-0.log.RYK

MD5	32b095aef52342d2ae4566b2b37d96d4
SHA1	685429a0ded9841c0d4fb7d841993c8c9ce897de
SHA256	16cb0c8431fd21ac9f8dcb9e28a93c3ed5b8e4ae169a26b68d121446ac09f5c9
SHA512	57589ac6347f594d0e66a89b8e1d4f0d5e3d1c3d46131522ad507f96ebe671ae7a444d2238a6e3997962cbb3bdb20414bc2b63b4902d38e432f6957be21d9451

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\06_Pictures_rated_4_or_5_stars.wpl.RYK

MD5	ed9c08473ea6f65fbac971246e01446e
SHA1	9076d7246cdccf8598ba5e795bb346be98ec2460
SHA256	fe38d6ce8144e75b0a4f956dbe6ff435b9ded518f8abad2d97af69094852833b
SHA512	b1a79362d7a32814168b78396debfe208ad635c5239e5f188dd4f9499438f4df37443ccad8668d641575605510a72f14899f54ca9197457025db737b5869453d

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\02_Music_added_in_the_last_month.wpl.RYK

MD5	b56be250e9adc9fb1bca84cbee7be496
SHA1	3aab5705297a13403ec610db58218c5a7c8dc824
SHA256	6b8cffcd1faee1ae3d7240b3b8d17206f4631d1f2a935b8e180f54c88c4288f0
SHA512	cf1f87cb9859541d547e4ce5ec4b1615f9ea536eab5d772950cd7ab1f7de92ed3037fe58f16fc9ba41ee22a1998050dedec9a57fa1fb0f898ba720be315c6b62

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C3BC2C01-FE50-11EE-9BF3-52E878ACFAD8}.dat.RYK

MD5	b589d5d0331551ce873e4a33c0106042
SHA1	52ccd2ecfdb15d455a6fabf6104c100b3c1a11db
SHA256	4d177d5dae05057dd03c5fbd2572a072c3e6df243957af1e534ff085908e9bae
SHA512	6196c6f550fe312342ea724e0461e5f56db29c3999dded89bd45118691c8665e138279c17eca20f2ff7c27d14193fa5738b1e18f1758247bf4a949d0d1c3665c

C:\Users\Admin\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-msRYK

MD5	93be2d3c0f9f99123d663d3416e0e825
SHA1	e6bc1f17ee4f80cdcd2ae5299e104f055715ce08
SHA256	113f9706bd77229936edcb4ce90ec460b47e7f5018d12261bd6dc885e75c115c
SHA512	383fad610a9a27e9496a964d1f6f8895558bf2159b7ca3f36e2b24ec0fd9c0dabb578f72524f87511abb97552423565ab1e923c2de1d7b46394e0c1c42cafcaa

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.RYK

MD5	065cbda8f28ad0340cc34b1dc06a478b
SHA1	2abf3f3db985484881be456ce92d509dc8244143
SHA256	96f5f14026f32d814e8f212d30dcce28f9311d807a7ec60bbaca9a09b95682d0
SHA512	c51cd8233cc1c96123d26e798a59b3dde91dda643204eb097124718c30c2c1dfb1c0d6620ef332c4ecb76781819360cb8cc2f5e023f9cc12f8e696229f2fb43f

C:\Users\Admin\AppData\Local\Adobe\Color\ACECache10.lst

MD5	a514446a3752ad8f4007492614a2f0b6
SHA1	b700ef86c661558d5af40ed6d8542022a9859c08
SHA256	c0afa501f8f5bfb63710bb461b773e041d3afb6c53eb46cbf289b8d500ff0170
SHA512	a7f7a293cecdc96960f336c3d1703157d6b657260dd921b68f66bc64b55eef5247b292f76e45d170bb50fb87e59c587c2c6f8af7635abb8ce62098e47d5eaa3b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\05_Pictures_taken_in_the_last_month.wpl

MD5	5cedb0821430cef81c92554fe74e985b
SHA1	6bfb1ea2ef58b465859fd6d8c730463a854f3897
SHA256	1f9aefa9f1a9a1e85e66d1ab8a4ead4a094be2283c12ef9c1ca4827e0fcd9444
SHA512	ad585880e7d7d2844f4d18591d92a80224cf1a80775b0180a07ae42b30d2b9aa124e245a8140918e9bb69639d2e83f66b58f5f87cd3c0ef753e07610be9182ab

memory/1100-5529-0x000000013F660000-0x000000013F9E9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\USA~dgov Updates~c News and Features~.feed-ms.RYK

MD5	490520d528e7f3251f6add26fe798fdb
SHA1	ea6a0cd83dae8facd3bf88b6b2ef9b4c9a5328f4
SHA256	2921f67e84aa6fe8a9257bd8a41d63703e53b98a4eb6d3c19c2e9c801001edca
SHA512	3a425a4a8ca168ff5c03a9a3d13df334c374bb2101aedb7683c86d7509854214198c9f0d9eb0ae60ce9b7acce646d42abdbda6487f7ed8d3bf76870f04eb6ef6

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\favicon[1].ico.RYK

MD5	924803f56d473bb567d237937c476e4e
SHA1	1bdcc701cd389a3a80b9e0ba718228dfb1ef7fd0
SHA256	04871a70ef4ed1240b43a0eee161a6c1b627408bf104b6060cca40bc0735bb31
SHA512	165be6cc8495deb4777f4077da0df3359947ac54e87dc0b32f6bcb1274354a733fe620cc1aca1325453aa004dace2e5a40019df97812e2dd31f5bbd00244f904

C:\Users\Admin\AppData\Local\Temp\ASPNETSetup_00000.log.RYK

MD5	8ea751b989c7b417e58cbdeee03169e8
SHA1	4aa537cfc29bb333012761411f7261e2816f7219
SHA256	3c6d417f125c54c59acbc9497e03b0dfd541282f4592ee6956e9a906d02c2ea4
SHA512	0b84bb851efea002b8ed383f749fbd89d730e1fc2aef8fef86f705f28e419f64eaeb06831326fc235eee7794f8f22383a49f6722d43034a024f4be3e6253b43f

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Tiki.gif.RYK

MD5	15b07052738f5ffd3bcda7a85d093059
SHA1	9707768f81b3cac190022d8a9f966878a449f763
SHA256	104ebc7c9c1527b13a6fabd6e55f0fecda8b5cc3b1bc39fb27c08ffc1da97f7c
SHA512	252b846fda3c6634052f8349053cb3da672a46cb93aab9f6c3a052e7aa36fb5255fe3a9a33a1a971dba6281a749f2d24a4ef34aa3583ba0b6e921b6d564bd616

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Sand_Paper.jpg.RYK

MD5	25cdcba92f16f3da6f1ad004d757717f
SHA1	d90ae27ee293c87af331a5bc383f76817b455288
SHA256	492c0622ddf47c2174c694de50b9f883581f1a2331569ffe5ac7ddac33b8cb73
SHA512	db23898049b5bf50fdc1394e3aa932fcc598d6feba341828b49d14e75b27ce5e759b58a1837a42d412011cfd5f4a6eed819a0e38aaea0dbad148f086c564d7bf

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg.RYK

MD5	7faf71af58be25a88214e6010819ffa2
SHA1	14ea60a885c1791b2c03586c83bb8398ba0ef1af
SHA256	f9bdb8d7ebc2057255f76e33eb125ee65bafd3990f4b18725f66bba23c8b0fe9
SHA512	2527169e927d3129bf10ccb63486026d2b266a4c488dd3ba3498fc0bdc1fd861925a047ac3289dd6ffccf3aefef32b82fd7f8a1f3dd41adb78ede9e2ab12bdc5

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Memo.emf.RYK

MD5	b8833fecea8e99c88fc821083a35d207
SHA1	59e9e2729b06bfcedf0b6e090eb3ca5b76f5cead
SHA256	c296c8282e0c8e3c298282aacaf6fda4c71b472d0258939783fe09432aac1644
SHA512	148e2e18b9563596855b17125e15fb72366db31dde3c86ba72ce2ced85612ecd68583746328e3baf7e44406a9e5083e7d7290921d5c93f7ecb21466f17ed0fe6

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\03_Music_rated_at_4_or_5_stars.wpl.RYK

MD5	e089e3ab9b1dbf58dadf3838c8eb63f6
SHA1	44bc60e5f9179acb2c31a267219d8a1bd0f7470c
SHA256	3cefb6dc9cd8da65014893f2919be5d82e8a49163759374b2f6b602330088eac
SHA512	271fc41a41bffcf96020a06788eab825cc21ce36a2961a8ca02c94bbb7d7ca906da83d65878f91e792b5f16512f73d8de5652ea62d57d283a4d31409f814114a

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C3BC2C03-FE50-11EE-9BF3-52E878ACFAD8}.datRYK

MD5	b10de206d63b1517a67a9eb05c1e6126
SHA1	5c8b963486b7f3e7d346367737f79a6a587c2fab
SHA256	cd9fd19d79c643e2766f706dddb665e261d7243fde56d3c8a855ab7463d8dd2e
SHA512	78ba495892aca9ce715ab4909a53fd9df1f0f0deae320a05f1b5941a4ecf2f0233381a16b6a09c8cd4dec8af06fa3a96235242844579e8dba0abfb75c590441a

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00005AAC\09_Music_played_the_most.wpl.RYK

MD5	a665c434fa8192a8f1472aeeeefc0f04
SHA1	22dd42e3b528fa6a86361b11012fd34d0a1ee5cd
SHA256	2abaed19036aeb42f1b938211c14332ccbace83fcce5500cbdbfdfca0ef9f5f9
SHA512	38a8b5fba8f580e60f7ce55f54b811c901529064b983966ca964e73c54b72983464e3a475cd097b20cd39e92cb3d6fae3d30f14e6fe2df9345aab24075837b70

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{82470F40-FE4D-11EE-8011-F636DB4E28E7}.dat.RYK

MD5	fdbb198143f7f5a6939409738ef78e97
SHA1	08335f7e4eb99694e45085bbe341c04c50dab30b
SHA256	36314f9d2d95dfdbf5b71e613deab0a80712aa18f1963eba67d380b74016dd98
SHA512	78f412f79bccffb8f427378d07f50c6adba41d73e0a33d23e4d991285f0dfd174e878b1dc7205dfaa4cc94d8a8a336f87822539f8cbacd717994e24456cc1532

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08e575673cce10c72090304839888e02_62d00eb3-39d9-4013-96e4-e92894ec756e

MD5	93a5aadeec082ffc1bca5aa27af70f52
SHA1	47a92aee3ea4d1c1954ed4da9f86dd79d9277d31
SHA256	a1a21799e98f97f271657ce656076f33dcb020d9370f1f2671d783cafd230294
SHA512	df388c8d83e779e006d6311b2046fcf9259ec33d379fc0e2c6a4b6b90418f587a12c5c23acd488413a02568ca2d3effe04608ec7c791925c7ed53dc71093ca45

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\Popular Government Questions from USA~dgov~.feed-msRYK

MD5	5b81c6121db6873758864f4420f305c0
SHA1	f8b75b72d4377324ebce317a091365d6bd324bf1
SHA256	48912e86526e255516fa081d4ec418b7f379c6a45078d7beabbb8e45b6a064f0
SHA512	c713e7f20f1dc07e84461cf5e9d07220799f0d1c94504827d053349eeaa17669dc1c482336a7f94fb33e67a5605e2c8d25e0ab5cee372cd7097d0a488d4c2cf1

C:\Users\Admin\AppData\Local\Temp\lpksetup-20240419-130816-0.log.RYK

MD5	aeaa4d02520451861cfdcd34e207ab53
SHA1	e433d4e5aad909c517c581e39c8da17c4710e31b
SHA256	637576d5b78b869e8852fca7ef851c7561d7f6caa5f1f05bef972fdb2eac20a5
SHA512	2213e531c3eaa5181ac4c5093af2c304f4ca5bfa35e7607dd5842367dc11263b41db04a3dd311a18295d23d8cac96d32a0700aaeb663a885b64e520575756e50

C:\Users\Admin\AppData\Local\Temp\java_install_reg.log.RYK

MD5	d695834f90dda939e10347240a6d4018
SHA1	c59b093bca61b54282fd7aae2121a0fd52913d64
SHA256	a2d4c3035d9d77658bd1311539d789f27c70b9ba4e369e60095f2c1392a6c79b
SHA512	26bd8958fbf2692e020fd3f70d88a84038ca68aae30f10fa1510f7244bf2894cfc90cfb18800fce958bd997f78de326f8c0193d650fa76d747fc90e784698543

C:\Users\Admin\AppData\Local\Temp\chrome_installer.log.RYK

MD5	bcba152ac1476fd41b6f50852b39394d
SHA1	c9081d25c702de55d8b1bf91128420e182743ce2
SHA256	fb2c038d55bf9b29909078329c30715f6628b5a906dea7afac801f100df0c66a
SHA512	0ac52d4f9a4ddf111e0ef0d6842d88fbe873472360c213a6f886eb98ee51b7e4e52a8093a395915891c1d7583725a4c8985eb3919336c8d0489e43a02692cca3

C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240419_125759045-MSI_netfx_Full_x64.msi.txt.RYK

MD5	13e293b91e02fbc345536d7ec15f0a46
SHA1	c2550b6b4fec42ed78a4fa15baf349df63187eb3
SHA256	f664204eb2673f35a6400ff960c8a1722ceefc81df823ed2207da54591055efc
SHA512	9982457fc23b298a238f6b60519392373a668972bfefc8ad6b847ea2b7a3a46dabcbb6ea42c853b07276abe956d964056016f4780bf99bfa7d94a2b1a3fafe46

C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\IconCache.db.RYK

MD5	00a4c9aa00e253d9cd2ab1eed51d1a52
SHA1	46f9dd132344df5f14fb1228b190ff02bb2397c5
SHA256	b07f444085adecea10bfe44b5bb568424d6082496ed88359905f0474d62a9af9
SHA512	617bb6b639e6fa85f2b2e612c106f62dc509de7449646ecbaecb455034148869c782b78ae8d83b0e56c9a288cd7a0b28ad0c58a49090611551dc86436251f602

C:\ProgramData\Adobe\Acrobat\9.0\Replicate\Security\directories.acrodata

MD5	24adfc47c676a6aff6e858ec9cc8b877
SHA1	8eb87430f5bb314b5fba5f216409456ed6e35092
SHA256	3d4d1e3f45e6480e2f4fdaad80f8e9991994ca7367b4fb89d6fb30690c62f153
SHA512	de5da88536e8f512de005b4a3401156c2880fbf08bcb0a295400c13913fc81e6a7b77550df851143e85bbc9920b42e7af8dbc14673147e95d1cce18cdce00177

C:\Users\Public\Pictures\desktop.iniRYK

MD5	d678e373e8fed4841da305ca2ac8aa08
SHA1	a9f2ecef651dbed5f767f6b6bb04c480c5461d0a
SHA256	8b8cf56fc31fca7d2bfded2a0119c4928bce43e9140d26fbe1fa388edadadb04
SHA512	207c66eb705a2f8e836671fddfb34965649e5907694c6a74ac46434953dcef10a5c4201d3bc987bb363781f0ce440e0ae038f414d6f3975ff357ba9bde5d0f1c

C:\Users\Public\Desktop\desktop.ini.RYK

MD5	c874607d0b82eb8bc65000b24d776283
SHA1	6a66dba3b612f0cecc3c86cf1cf6d37a837a0241
SHA256	509eaf90aeeadc4d007ce6f60870484d6a0a58b34a9891085926dded647e2ffc
SHA512	78494a41e6efbcd892637bb65d287017d82f2ec56bbd424c11f085f03be93ffed9518e0538553e2d0bdcb51d5b8dab4592e30528505fb8d9ee87dca45bcd387f

C:\ProgramData\Microsoft\OFFICE\MySharePoints.icoRYK

MD5	1f1112c4c360c1e8a09b49bd2ea488d6
SHA1	a08558ba1b9584f62f02d01b4e6b6f039b2bcd6e
SHA256	fc8f745f1cbd63952a244474f8a07209e1b86566bdcec22fc77a9b2f5192177f
SHA512	aa398cfdacb487e58a98e85ab27c1512338aff045a7fa93265039e05ad3cbbce0f7b7b809c3a0fc3cd52f1e015380f5445c289bcc90f563c94fcb7a4e9bedca2

C:\ProgramData\Microsoft\OFFICE\AssetLibrary.icoRYK

MD5	57279e66466122a67fededa4193f97aa
SHA1	4eb064250e29dab41b2c34213aaa137120ef2e27
SHA256	6892d538ea03cf29294842dd19e4c3775bd8c5f74122f59cdb267090e451b5a2
SHA512	9b52d1139270cd3a64cb26b3d203fb0b26af845cdba893bd292dbe44400ea4f4cee6abbc3dc7756426b9048e7aee2a4183e88a47f7a8df48f212ba8b6334d704

C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxnRYK

MD5	a404b8a7fa8dcf6389a77551e9baf999
SHA1	e7590311c84b9eceb821c71414caebd45565b525
SHA256	bcc37bf56fb4551690c255308f7ce627279655a283fbc1a364f620bff5c1845a
SHA512	24725233270c6cf470c66fe46e6eaa271901b3ff6bb45d6bbaae36829f755f93eb00274817ab1ef6b2b4abfe478e05a7b291a522ab65b32ccdeecf397540ff47

C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxnRYK

MD5	b8905f57d4c848e02724fef0cc7063e6
SHA1	db1a3b56061c9d78d118c9c229d6b7af143cad50
SHA256	addf2b1a1ca6078dfd663e7d9072fdddbbcc86248e68738cc50d843793fd1d14
SHA512	3e6e4654d1d34b260a03aebb441e9db758f3d5d13af3d8f2733d2b66c7649267ab837ed2c9d3dcabedc8b24803a5af87bee84748a033fdb180bb28338dda42b1

C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxHRYK

MD5	18216cbeaebea3e3610864a56645752d
SHA1	d7677a48d8317b196f4bc42b6fb23b87fa6a0b57
SHA256	2ab535a11dd188122b72c25cb3fbe1346347e4b0ec8cdbb9497557fa8851a80c
SHA512	6587e4454f175540b50c3224c76e819a78063364e1f4866727e3e96eca16c9442bd663a805f615f514f51a9075ba5e0d40db93b0cb9f16f3a7466220db868bc1

C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxWRYK

MD5	7f6e6420ccdd373aa0a0d85a4a948704
SHA1	c4a3cb320494f3f31f1db5819fe7d6852c53db46
SHA256	385a62ea17b21a660c9e0c95500fad78e9a041dee032723d42d8fc18f8ce5cb6
SHA512	64e082a48b1bf7e1ad9267a9d1b862bab5a073a655578a5e5afffad32a7d6af6ab600fd3eee7e659de3f0fce489a0c100e5ebff48a9fc31bc8da6c500d79b7d3

C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxnRYK

MD5	2d908ac7ceafcf6152dd8e14878faed7
SHA1	50224588f57a64451e33655b60cafbf9e587b1c7
SHA256	24474238e9d44aca5c77427dd18466aa057c495af15bd37881f1e9ad02ae2507
SHA512	43cfa515549df454eca2059ade115514b237e043b7e14ac1b0705d91b748f7f2553f4d6dc8deed39378151f7814979731c1bbce0e8b3f22e3e0f6f6964d9b81b

C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxnRYK

MD5	fe3fa98c681c79d4411d78cae171be6f
SHA1	882a4931e056f4e659c32740c873457cbd178af2
SHA256	87b39ef027cc01db57718fbf8c6e477d649127817a1b01611922d539c7d4f83d
SHA512	a812654d80755bb64b6c49ae65c96748149ffe7342c9764ea1b49775358dc7af6cc6ba25d9c2c3041e40cf1b26fbfcf0fdc78843b3643e6ea2cce45b4550a2f5

C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxnRYK

MD5	ae96f651faa86e2c3fefebdcaa27fb27
SHA1	210d044923d00dacaa2e71989550e99cbc718bef
SHA256	363d65a44b525600944f13b84f6c2fe94baa492ac2b472d34a20e939f6ac6231
SHA512	9056e85620f843934c3a1a4c4cb9535d975b1078440ef222ee44780973f3cf19302f3196e87dbeb013d3d45f1e213a53fa89d9aa3bb6d343321c0a7f0cf9bc8b

C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxnRYK

MD5	488c25683ccb9428282a1eba964f8a94
SHA1	347b33fa79be766818581b3ab519d7dd3a984a97
SHA256	296f77ced271e82f221d57ed944ad8bb9bb4427f354b80271ad145d64a840556
SHA512	bb2b4e7a5f144e09c344941a4f13b8d30f51493ae29768109c2dc347f80fe266dcf0d8d65e455d2fb78eeb60e9341337bc178a6a43e3253bb711972fa1e9a243

C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxnRYK

MD5	c7cc68b65242f2e25c9f691b4a6b0bd9
SHA1	079d3d789af9ef4997545ddc83a0644eace1c0cb
SHA256	8f30e3596ef08e7d792ecdd9dd373008f2cb2ae770608637d0b672c2921036e1
SHA512	1915b37737ef9e584ca222c52572c71c8280323bbfb8fbacedc901e5c0c120ce60ce01a8f9c2e38733c18d99dc268c637da12d53632821de4f9032f1283b2d10

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dllRYK

MD5	04675fc53d7dba5e6910f58b39bc7ded
SHA1	bebb85db1b35298ff18983e60965b321112f7e59
SHA256	28a568b0f8e3ea3731a07378a5f9eac0c8ca027558a476729f66b4684182f33b
SHA512	8ed268802fb059b35ba463d0c5a333f128492be9973d920818235e77fd4300ee397593c8895316373161719f4888d46cf6638338c6b5068b74a60f42cca06151

C:\Users\Public\Videos\desktop.ini.RYK

MD5	6044358732044ecf95872cf8d5ef774f
SHA1	f80634b64e6230cea1b1ea9a798b8f2900b94141
SHA256	01f81e6b7a0d08c13c22185c7c4adde8329a5f7cd3358edd8eb73a4b802658c2
SHA512	d09ad74fcca6f07604dccd2bfc7247089cd3560e7d43c5023c61dad1660ce48641abd0167d900236e0f5ec7da691f4dda9289284be20830fbd212ca61831309f

C:\Users\Public\Pictures\Sample Pictures\Penguins.jpgRYK

MD5	933e0623709bc4608c21ce214c6ff71c
SHA1	df65927a4dcd5f703630b1ce77d555633e953660
SHA256	4b039aac3da80d112124765fb8c3dcaa45d59f6d57a34204104293cb21da681c
SHA512	635cbec2a35f4e3eed4fe679aadf6c0ea051823aa5691d25535c70cca233434a993d09f8e79bd4e929e8be5ab933f517cf430d6e5224531a9707c5ce96e1bc0d

C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpgRYK

MD5	125f3d3ce41b9480949d26bb1d403168
SHA1	2ed01a4f81b7b9a3b3c14bf05dfe56d5640f56bf
SHA256	16ade25fc9e7744f4c645d5014949195418da6a47f4ca90e85c71132c0fae051
SHA512	7d56d0851b940d714b94190bd1b45a1c6a1a67006d1a9cee8704e07653462aa470693e2cfc60f3e7b63456ddb337dd075152e03f27bbf80d760be49bcd4f5c7b

C:\Users\Public\Desktop\Firefox.lnk.RYK

MD5	6039f5c12c5519d439b36db74e9d27b5
SHA1	a7c7e4e41edd60260f540d97839dc14e0f146da0
SHA256	a8ac81fbcfdaa0648e8b328537c7938c5a5bbb7bed53e7f28b29cc47b75f4dda
SHA512	320f417359ab99e6c7c7d3cb7e449bb68e65502bf87a62494eee04912ff2892a0eb20c89c547e246f3f6774a364bf7098c00e742dce908854b84d4383e0c5173

C:\Users\Public\Desktop\Adobe Reader 9.lnk.RYK

MD5	15b3b5cbd70e266bc0e356a0a61209f6
SHA1	15d45f4f9d0f579f022a0932668b72f444dd4b41
SHA256	c71be4abba98ea63bb4d13eb046f8ea9e548a524262eb2aee2e0d56966f826ee
SHA512	4dbdc4b8a2cc777bd099524e3be349529494bf8ee99ffb423869062f80a8ecc20167cfe6b372297f640e24ba1606dbefef48d673b3b38d753b0dbedd59ae0f96

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnkRYK

MD5	eee5b371ba85d1153ec8ab57b54144a8
SHA1	6be04a68d4618b10c7930b252632c5d6cfedca7d
SHA256	6ff479f3dffaf953b8323a6f47965a6eb93e47277c085ec8d94fe4733b8eea30
SHA512	dab0ea6b625992f1ec51b90512ccd29be338d1746d62ba805d83f6eafee74d4900a83bf20fceaa4319926086fade39901e8607a4b7127639778a800a268de99d

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dllRYK

MD5	425a859ea959351cfaea41dc3e5110b2
SHA1	c60891098ac45ce6d86ac079d515ecdfe847ac68
SHA256	c5c897990f1e6448c3f7853a34014d6023e96264a4cb19faa83ef641f545fb14
SHA512	3c197340bde50a5a3e6ed9002f97f74ba2eee2c647bac93a81922ff4f421fac6dff2bfa03531ec97f7ac02111ed1a95a29a7475bf11c236a91103111fa49ae71

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dllRYK

MD5	0998c7afb53d2f3b12a43e4c652a24d6
SHA1	c78945da1fecbf1c0c1d4916d98048dfd537bbb6
SHA256	cbf3d6198b8e322ae7d06094e9e5283c615ac10de2c6b160af68dc90d01f137a
SHA512	a16fbce9b7b666fc391cba98de7b894026968a0d0525425f0722a6bd989969ec5ff430e382fab428905d61a83a6e12d208a65bd68978b5ee93dc2f450dd240b0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Chess.lnkRYK

MD5	4dc5d288bbd62efdbbb3ea709f9242d5
SHA1	549019ecf140840303262e1e701b780f26d79178
SHA256	0bdbc859ac0aa90e486cec82b8f847173d704f97e5573c0b3a5960777d46550b
SHA512	fbed038a50e4c52ed44d86567fe7df1cffc0eb69ad75c29277c43f7bba0c062d00afcc131f80f2dc110cae66dd0fa89227bd03d39107439b7400bd58efb19dfd

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dllRYK

MD5	16d1803f2c6671a52a90282c178c58c0
SHA1	f11177e085b9eb152059b15fe36fd8952695c6a9
SHA256	83a5c4b4d93400fa074bb42a80d80146c7072131241c2c42057d75010a4ec8e2
SHA512	0fda83e79f71606b9a5d8d4a70cfdbea8bb013c8733d39ecc708d421006cf0dabd9b2ef7501752dc21b1146bf5e28b2e5a5ab54bcf1ba4e912ebe50c437de552

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.REST.trx_dllRYK

MD5	d9af086f7090b60db0627a10085e6bfb
SHA1	36f5f7abf48df7aebdd035bc8dbbd030e487b7b2
SHA256	dceff940708a76c1bc2b57131d6c343241822419b2d257a555cb559b530d042b
SHA512	b38f20c8675b48e12be2deface167eef56c3333009a6b129bc3dd30a9f13e1ae7e870168835559f5b7ea6137d11b5e8d36034244280b3dc82bb8d7d6d0f10f0a

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.DLL.trx_dllRYK

MD5	498272118bd63b74d30f2e7ca1dc66ec
SHA1	9705f23753438cfbd471efb613496f4206490dc2
SHA256	998b194f4d3e906e2dade82fe8ec0d8bb82bf96afbb236a4086672f5b27ed3c2
SHA512	2c1d1da7dfba8db8e74db9b12d9356e7540b34316e0f27b1e4e7aa54b9b5976d36457842c88adbe6ac8d9f9183fb38c0c3bda95404457735e94a8b1853c30bfe

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dllRYK

MD5	61c12ad7a0db0bb94e37f26280f16813
SHA1	acdc8180277547dba983f5afefb396dc371cb0e8
SHA256	11fd1be8f27087b73eda87d1c69439cea8deff6299aa5a36a77d7bf15d9c52a4
SHA512	4b38a0df7d4de323d84b493b9b154cae86c7f1f79bc4874ebb70382bb4714ec7159fa1ed7bc19a2aa8e7ada87cd58131dc57895e6ef1a69cf88cfed70668e3d0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Hearts.lnkRYK

MD5	ca3c6406486e47061cabe547df04ecd7
SHA1	afbe5809d0b1b63bd019c2146e1f6657d50398ea
SHA256	f16a1fcd2be6c7cd63aa795320f683ad64d448e59ed5222c233269a4d8d339ac
SHA512	67ea1ea9f4948f91d99ba5163f2c1486b24047ff82cd2757a5e2253a3f1271f25cf19d2f917949c7e6c3ee6a1c0ef3bf8a2beda879bc4fb39a7aca7b91c3c2c1

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISINTL.DLL.trx_dllRYK

MD5	616ec63175686ad0e7dabbfdfa0e6446
SHA1	bd49b45306cc6e46635ac54313108244c044e1ad
SHA256	0eb928123e895ca084d8555cbc54dc1295fa991fd499ca0a42af66a7b49a197b
SHA512	2583f6eaf68a8117ee9fbf442e5f163e6a0fbc7a395f6f24fc243bb40e01acb6291e6addb8107ce9c537d0a38c9dd82efc69433a174cdbb3d8e0b616d05ba635

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dllRYK

MD5	e1a2370bf5c431308338111082935c84
SHA1	a9b3fb6843d44af9e76fdaa18d1ddcd0e2a4cd42
SHA256	2329a4b84148c38b7fde8d93bc35c4e7c8e4282de10acecba6a556431803bd7d
SHA512	4cb9a4638c28ee47af0a329f7317a209179b3d118de82cfa7bc943e65e2b439881f04552622c4e60f2990b76816876aea713a13b8d3f9d387b6148a90ec8a889

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.REST.trx_dllRYK

MD5	155ee9e79622d3628c5ecb8e4235c9e4
SHA1	4ad0d9a9d4ff8dd5900c394deb4d7261c0c6dbcd
SHA256	00db6272279c25a266a0576854c7b4de27610629d01316a2afc041d206582dc3
SHA512	e23151f7c6580a95210a41378f23e14504c54ac8d187683a5b4004b72b851549f0788c7a9b58a4c6b4e490ec424417879302b8646c55e5c68dcba908f667841c

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\STINTL.DLL.trx_dllRYK

MD5	3c6c79bf7bfc6564d54c7e5c09b9a6ad
SHA1	ba49be07e5ed10dc1d0d1314c9dade021d70f843
SHA256	914bd7044a56833f00e79c03366c23776489f0bc80064fa0003e712bef536746
SHA512	42ced042400f1f5f84810817da65b04ca192b599d04444ad92adf005ab323117b347c45006c4bf1721a634dd83f6f8ff73662207e17961ac5963c5b6e4aa52db

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.DLL.trx_dllRYK

MD5	6c009eacf2ccd8c679da166366afb722
SHA1	0fe658a471308c26a7e894ff9824d040a20e6fd7
SHA256	65fdae0a8952c4e796c282fe8e71d6bd0865c4bc0621f1e78101ff60730ec971
SHA512	4520f37dacb40a3f006ab595e8bcfe3cb559b5489dcedac5ae912b794b2cf875164841c2de964c1029ada3d141eb3cb850d55beef0c6d8bc8afc8352cc2a2a6a

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.DLL.trx_dllRYK

MD5	571251b64dc01d4a3a6ffaa1f726382e
SHA1	63de131a642b3e5c740c84b721410b3d23d22cc4
SHA256	5090812dceaaeb1666044bfef30af0941188f4010b258a12165fb34659321240
SHA512	7f01a742087158e2d4e24c1193ef87384ab2d26a686bf96405ac153a1b64aeacbd85b642349e04b3f8e3aac417634af992742b1ac41487b0b34e32cbd546b1cd

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.DLL.trx_dllRYK

MD5	3af3f904cb2ff3b6523cecbe8f580d3a
SHA1	11dcaa2b4d01754e153e3d6c8c38c273e5b1346b
SHA256	319b20e2f3b90099d86b854c6406dec0b6aa7015daa1cb2e87bed716c26ec539
SHA512	c1facdc4150e578f9bda639ec8ea773bd386408708bfc3500caf562e75faf563193871f8a83b6f881167303fab60db80afcc42e1e2db02a6f5c105da61bb88d7

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MAPIR.DLL.trx_dllRYK

MD5	844ac21efa75e0486b17a45cf1064984
SHA1	24b8ea0d561dbb0011c60b60a6e36ad6e1620b17
SHA256	96b860a98825f774109393047195c0f744cce5b79f55874f169827e5673a4524
SHA512	0b794740cba7d5998c3e399a78d5c94e140794d4a5168c8315e4ea843db86561f01d4181bdfe97a20a2269940b71c72c0fca7e5f5d2510ca413e42776417da97

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.DLL.trx_dllRYK

MD5	fee267a030805d4c12edb8be884b1626
SHA1	08de5fb9707e774d11edfda44e40336debbf9702
SHA256	533fff47139e7433eded447fb048f62781de8e542249995c47ecc24f98264863
SHA512	c6b73eb73dbd8fad828ab2bfe0ce30da346cd34d63ee619b511c6dc3043f4bbb482c186c6b7bbbee3feb2808072d7f30ef1daf7cc046811849ba41c39bf2d753

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dllRYK

MD5	8a359658d866698fecbc26be8ff3c083
SHA1	15722f9e8da13200822a964f1c6d0a7fe5a3ea94
SHA256	e5cd35aaf9c44b41c4fc04b81ffbc794d6a5f60d06b4d26dea35a1e59bc847c9
SHA512	a3911ca41a21207b5bfa41c4cfac152932cecef1c0959e944affc1b46f102817c00c8d73cdd63c5671c2b83da439f9c2f440736bbb8e981c2b56fc40c0c42e0d

C:\ProgramData\Microsoft\MF\Active.GRL.RYK

MD5	d3a7a60cd89fb03a363f19adc5e4de74
SHA1	699ce7c952fa7790b09e8f6982e7969c5e5e5f04
SHA256	e5e6e6bd7871af70596706a328cafe98e72b1f93af321ed513827a37b2211f84
SHA512	a15f1aafa543aa4a92add4c3bde21f4d8ffeefa7dc460b35d4a7fd970595013a33cce8c0bb1e8b98e64bac3d679220e26fceec01e6828f62c372b7c7f8666f2e

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dllRYK

MD5	970e4d2e4353976ae1aed9ad6e28a723
SHA1	59b0d1332548368063a7b197f6084f083ba07d03
SHA256	6c2546acd5bc9fc8ecadcfbb20215da4935fad8ae420da1dcd4368ad82fbc942
SHA512	5325d439b136bcdbb58bdbc9f1d9f399f2cc23c11d5b7fcd19c8ed17070d764816ac4b4d23df19ef5377d62de72aff0ddbec51eb67f2ca4f6d1e52e9b63a4ddd

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISBRRES.DLL.trx_dllRYK

MD5	38123701879885212b354eab89103e4c
SHA1	2db8ba3c43af9080e3b6a46297e3f17558724e73
SHA256	6731f1dcb2c01905cb87143d100c9abd3ebf1b6281f9a26a9314aef0079c8345
SHA512	e76aab6a6108c44f4f8a139adf6f2f256cb1cb0cb83e9a00c932e3c90d9bcc88a562743db3d262af102db17800f9c1e2a835b48439000dff184816cab87f009e

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OMSINTL.DLL.trx_dllRYK

MD5	e0f72910263c988d31873fa96e8b040f
SHA1	56c2fad997a5d63332a4ed4fd595799b32e746a5
SHA256	89d259f8c153d9b485e0ac17ec62bc7719e21ca9d9730e0ebae979b4db7f764c
SHA512	f2d8ec117163dfa2ca72466a3e54a773b40badf43ceb8ef356864f9b4ad70aaecd4f9308581d6c5f382fdb537df3c052c994ad713b18407863d0c9feccf1800d

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dllRYK

MD5	38175ac9125e67ff93eb707221ecf958
SHA1	5c3ff5b65abdcdbdbf5e209a7db0d9e8b2c1d56f
SHA256	aa86128aa704bf65e6335fa50a6300710b23a6754bf83c79b40070647c7b2628
SHA512	483bde8526cca5119cdcc9d65f6cfcd225c6f1908ca3eac061a81e883676a82de7f9f7acc407fb738a05c0061c4324d41f855455f05ae7aee7ef54c34ca47880

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.REST.trx_dllRYK

MD5	5e30ae288119ae8d0ed79da956ec9f25
SHA1	e07072c36e5565043035a9321992e7599d42bf4a
SHA256	7d021380fdd41740d32318ad388608e384c53c3b6036cdfc89272c9ba70c0fde
SHA512	8b44730159967b2a07e2d0385a521e624e33891ef48aaa66d43d8809e08f33f6c4d3a295f6bde8c32651708eea5bae0c7fe31ace06b4cba9d0bf5a81e6f18cde

C:\ProgramData\Microsoft\MF\Pending.GRL.RYK

MD5	12ce243bbc0a0ce85f1e03cb9c600113
SHA1	10778b471305b2d33d7efbcb7a01082acc8ca452
SHA256	4b72e7bc96407c792d1a6b4b968c103ba5c2d2224fa840189d57c6147915cc3c
SHA512	799df19d07deb811b66994d4f6f7e2b7d9bd18667ff879f4a6ddf8d917e0299fa735e7e5d3f98257a42a51efaba610255662799bd829df651253e5518cb6d0cd

C:\ProgramData\Microsoft\IdentityCRL\ppcrlui.dll.RYK

MD5	d04e6a66bf07f184507538e9712e5af3
SHA1	c8c781df9d1061664cd6ef0896c1459949596253
SHA256	6eed56d867db66d8aa2c0b3472734c2309f7bf35309d873327d6fb4cd6a32b02
SHA512	9c3ca4479dcc4c5a20f75b91ab3210918db017d5b2b1fe3fd92dc11468b354128b1b9560ef4fcbcbaae389e9a383a80dbcc37d4742a27b5ad52a7ddef9f6e8d1

C:\ProgramData\Microsoft\OFFICE\MySite.ico.RYK

MD5	be8703a14549abb7dc31167f6cb5b95a
SHA1	c235d9234ec46ecee345a186a4096e9465d48de2
SHA256	ef01dcf14a947605582682b7c633e85146abe49173ce117a5b1ec18099f1795c
SHA512	44c07522eb757b83254112dde5054950317e03dc788e83fa91378d170b710bac0a07ee0a9fcc86ac321ab23abe79cc959fdb150ea6aa80cd6215adfc8966cf5e

C:\Users\Public\Music\desktop.ini.RYK

MD5	67b821e66a92cb5543286e01a13867e4
SHA1	563a0c5ac48545fafdc917a69fb3b28ee8cf9263
SHA256	edbe945b77730add6e06318f73cee8bb681a6cdf5d436974b7d13c52a5cb67b2
SHA512	2188cd132b38b24c6699c8d3f43607be820b38d7d0f7e198aebf604e67650e8f35c195b9456d7ad0bf95d2d4d4ec9ff4dcf6dc271c1264295a05d8547db1ca82

C:\Users\Public\Desktop\VLC media player.lnk.RYK

MD5	9f7507086cf37ebb46c7cd4ea5b6556b
SHA1	149481d05d8aff4bdf961989634e7d18080a206b
SHA256	c7f37bab0c41ca9f611370edc160fe092382d663ad6e4c55c68fec81e4d445d8
SHA512	d74aec3c917034a28c3453908d0250d272e7feb647668f238faf1e578933da40941cc02d8cb65313d9592ba761f745bb3cdfbd61114af102ef62cb5a50f9d079

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.DLL.trx_dllRYK

MD5	d93306c56316fa72108490cfea01f03b
SHA1	1c3c4d6269cdd320096cdbfd1ec52071d0e74dda
SHA256	32b21d851b0c3f8e579671b3f1a811006c293de5c01379469ab504e5ec983577
SHA512	ec169d88690cc82de803e26f077c0035d4a6f0105e6a1b7e2ed3bef8d0505135b384d09f50838a560375f3441868cebdc546b2a304a1643ce9c17dfa61f03814

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnkRYK

MD5	d75aaed602094f9a5597fe76918a9310
SHA1	6959344ab684b0e4f1611fd49d1e71cab48e319d
SHA256	8a6cfcbe47627a0ca2c65317766ee765468b1ba6c95ad0f90d546140a1d6ceb8
SHA512	05ddaee64c4660e05a73f470442018117470f4340c76caa702322ef42f82d30ea9eee9e70d43e8a81aec50866025303629457c27d04cc7bb58df06c66005e4f0

C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpgRYK

MD5	c03080c0c66e9e1caa337bf2c4ed4d4e
SHA1	87a208341b974abd9b718a2fdfd57076d1a01936
SHA256	6460effec1464f4baf56893aae47cd36a15c7a042430fe5944f5f0dad7785972
SHA512	1b2dfb883bac81548638a286cbb8a651d86fc940ee7d074c25959e38e749b8f1a76baa783317ea207579f57a2790c4276b949f23bbd34ea4a17118975bc7d6c9

C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpgRYK

MD5	cb839b42baf2092d39f9377c2479f5e7
SHA1	042b4295bb18243486730b3f3cc4ab2f5fcdec85
SHA256	7ac5df01342aa51ba7741e3fe9e4b85e8f36bb742494b86dc2c2bdc423c6f96b
SHA512	ded1a7f70861371bc6800b3796663a39dd0255d9788061f454c76cc753ed837bff178bb88a1a0d2947ac1138df6dd538efc60566d322ed1a401101fa220b0738

C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.datRYK

MD5	3928d87a52a7bfdd1a0d28d724115237
SHA1	f0b793b1587bc8294d7c4411dd29574febc638c0
SHA256	779ef7ccc091c0cc11ecb7e8a955b93925f47b304f0e12d48d7a9576cee17e70
SHA512	f42152f1a095ec859dc643afcca7a841d07596586c2dcfa5a22008171a9c10cb4f54d37e08b658303e96a9c2921b812968b116a224c8e7d76bd9cef4d2790fd9

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.DLL.trx_dllRYK

MD5	0ce537f3bddb4b91dffadce03d7ada3b
SHA1	956d0e3930fcc61edd59701989a03a73469e51eb
SHA256	49767efe6cc7d88f7a07f43af05ec773ab2bbca55a36065b1b32541bfd6eec04
SHA512	6ce31d00db0b1bbf35cbeab62995a7ad14948bb642a3a43055798257ab77ada54d925e9e1e55ccaac1ce5d20e26a4d94528c43e9de34d527bcf848b77733f05e

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dllRYK

MD5	c09dbc73511ff73f7bca94fcd4ea4137
SHA1	a7a7fe82f7cdeed1c396f877bbef316cbf1f4de3
SHA256	c1ffc28adff268d7f5be93bc0fe969b1398987615888d46485cf51045b15b6ff
SHA512	ac206024535d900e726e7af18652b7a04e055d846bc458e9f57f4882122f43584616c0b521f5c92e2942888408038031bc2a01a0d635193b3d5cb2523a32d704

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.DLL.trx_dllRYK

MD5	ad053d0bdcc0b12cf0a65053d3a8d5c6
SHA1	e1465925305928852a3333ee13fd06ba6c9872ce
SHA256	24fa3e22ca33af7f6e0e5a2eb9cce3b5646b162b769894b2edebbedb99aaf747
SHA512	dcb11bdf84449a91bc366b179e1426bbb9de39f0e5552c340fead27775a3e89e96f3c93f56b111b2209b580f378570740970474b35f1586d434725d31e4c88d2

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MAPIR.DLL.trx_dllRYK

MD5	330a0b7356ee34fea0da750f355afeb5
SHA1	c2f58d8a5418eaf17d7a3b6734e2fffa92fb3ab1
SHA256	7e8087dfb9ac9141752183ce65cb831dee48157ad728528b3d07d7b160905543
SHA512	08d5a940703e76d9ebe2c0bc9a4c90b144f5e6236d9b97c7067bb66ccd16eaf819ba95132c0c62ab6b3a81b4cb7e1d897bc75a0b36cfe64aed8141e14a03da3e

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dllRYK

MD5	070263e4b7494cb2444ef691cebadb73
SHA1	f61dec974e97d0c66bed72be861f53d011241117
SHA256	2b56e0c594305c93ed484c9e595b637a59fb638d53dbf2e77c7ff88c3f73ce0b
SHA512	0c86cc2792adf1adf8f1147e78419326dd77dbffde7c05ba4764d00d61411e9a202e7afd26f845ac947a3d5515929900816f0df870350ccf31fcb03421a25c67

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dllRYK

MD5	d64664558da7b76c4fd4ba63ea15ee3f
SHA1	6fc18a63ff8b14ef80c6d3a2596423682b190c8d
SHA256	cfc03750b19d0a7ee14cf5bb275160e77264a83faba0e92c4b9deb210de47421
SHA512	7e28d929ac5ad3612a16004e7be51acb9a901ba179fcc2450d304429aa16e71872accea978db957464d9640ab8c2dce2e9bb54d6312c7aa6e080a64d25d2e488

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.REST.trx_dllRYK

MD5	a196436dcc94ed76eca7fe6760b7b596
SHA1	6f178e84cba5c5fe73804a6e4ca5603d01050f32
SHA256	4571fdce8df33d9b47db08942b8e42b718f22003621b099df8181efc1b5e8b4b
SHA512	39f4a3aac87322d376e22449850e66f137ed8d546b1b8d525520f0c3b6f06bef3809c49bf7b38eeb2f04c3b02d3eb62f77a669a17097190130753cdc8e03805d

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.DLL.trx_dllRYK

MD5	a3ebd8568d553a73929b0983df1c2cc7
SHA1	63c418c494b348d815491bec09af07a7ef3f20cc
SHA256	419d1e9313a520818b148e8ae4b739bcb8c03841cbcc1416264bc6e8dae60496
SHA512	34587909c7f3b90b16c30ca2e87b58b5214100efc5102faefda5a2c7d62b90c61d80bc6afa4fc6f6927bb6f1f9be6b874a109f04187929f8c43afdbce2a39bdf

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dllRYK

MD5	b0d2a8ed0c0695bbebfc52b2c691a48e
SHA1	490818b18f4281848bf9b330031737f5b54edf3b
SHA256	32df00872cfd00f413fb570852192866775488c21e88f4f1bd4af9c25440da02
SHA512	627c3ea06b328a6bdaaacf5c32b70e6a399119ba13d0ea9a04680733fed188c3db25ce99ba8eb51f9c451a7dfd3a371b248558314650b4867ba01b45b49cc6dd

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dllRYK

MD5	9318c4562910883b7300bd6b401bb6c2
SHA1	7bda55137d9a5f784994f3efd1fd2b47c6884658
SHA256	bb81fed51595aeecdc23d52140aece2abe8742173ed0d06d7ef3892f606fed95
SHA512	e9843c656fb15f359cde0d44a6422372c3e96bce70994450d18e512284ba7409c4d362bca26907b79db214b623fedbd6762d406ba6f11c29315c9f2b267af810

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.DLL.trx_dllRYK

MD5	ee8cf6c33e7ccccb46789e23c2cb068a
SHA1	2a726b0711fac02c1d5c80e87bc5b793ec552a39
SHA256	919c4d42e9e3955211f0c9a8497a8ab92d2c6e81915b661ed7d308dcf93d1569
SHA512	9313d290a637501a81d631c4a2b1c42de729261f3ca95e84903510624dc301f94a74920fb0ac9ce425c5e682d36f7e33676ab1fbfe5960b7d79f52ba8a52ed9a

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISBRRES.DLL.trx_dllRYK

MD5	af870f9ca7d724a4f9cbd78a603760b1
SHA1	b881af4ca86c177f191c07d2aaef5692a6dd8ad3
SHA256	f811eb9564f858a6de0f026e8effdfc74aa21f0f2271cdf12e54eec45ef472b5
SHA512	b4d768489d3bd9229d14f701e9d8a5d07253d4513d87911fa51dd42a70107765d0c8977892c7293ae503976805e7d38819ccd894ff9645a2d97590683ec6a1ce

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\SGRES.DLL.trx_dllRYK

MD5	294c6ae0874080dddca3ed48d8fc320c
SHA1	daf1448a3c3fd4bc82fbadeee84f1b429685c095
SHA256	625493550d074585d46d6345a75a33720a623544564cdac4d444ec3b4267dd87
SHA512	e436b43099b62eabb45fabdd6f572cb082a6d0bb2e34abff62e765ca4365e99cb07b02bd107ca7496cdafffe115c5cabbba10e4a3c7e72c6c4cbd325878ab75f

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLWVW.DLL.trx_dllRYK

MD5	3ab377b1f665ced6a5a35aded5b36032
SHA1	93e60a8abb143dfb58f2cd1bf27033e0bae2b8bd
SHA256	3aa1ce6221202c91de5938d9f52adf2e7ecfe25a40025ce2c87c28e9ad4b7659
SHA512	48e20cdbf9f0f7cc493c797bbced087ddf3d9891787dce3d9a5deca13cb225710248628fde4c75a07c6bee9b3abf7c2b07f21b7c74e7877ee435ded538dbb4bb

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.DLL.trx_dllRYK

MD5	838473ca31f403115f4eba80f94c3add
SHA1	cdbac50d22585cd03cfd44fd9add362ad205c681
SHA256	bcd54931938e2bc6944cb863700f318bfdda6fc8269e69c028e8b34abbe3cdf1
SHA512	d35f7ac362154100128bae170b846d0f903eef75327ce9b5337d0c18b52385e7e920efe5baba78067408ef80209383518ecd87ce8a35405bbc464568ca963b53

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dllRYK

MD5	e72bfbbe8996f20f233532d0d8e8ee84
SHA1	19cfd9183c056215e9dd13b6d65e13effc5f15c4
SHA256	362391a014414506880638eac9d7c92307c857f5577ae5d83ac72e1e4f1ae4ff
SHA512	66e5327ed0bb30ef5ed6688958637d635390e393a8b18621cacc778c3dc7a65b3df1374169ab702c8a1da8f332bf52ea087472e8613d619b7fb21506870121e5

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MOR6INT.REST.trx_dllRYK

MD5	ece1c5344e3871da1fbbb784079d35e3
SHA1	087ddcb107fc95d9607eb16183f6c4500c8ef2e5
SHA256	c69681933c5d2b7da41d74f3247be226391e79f9f5f9199e1b1e9c6f134eac93
SHA512	eaea9afed2bf39a3d9b1b9093d668982ee7ba29377062b46b6cba141f101b5839800f95ec6ba10b111e749f0ee3c47a781847ba6edaf3537d5c9ab0035c3810b

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dllRYK

MD5	6b243b9e137fd572088a3e35d39ce9c9
SHA1	5abcbe501a097d3c5f886dc8e77058f531b6274a
SHA256	1691bd99dde95dd047208f119462363b52b0679482217a45e01a0c8cb6989b1a
SHA512	3d9115d44b74a4567101cbd1c1c98385a46ddd24180c31bc394d396450bb8bab17cba1a3806500b27e46dacfc8ba3979671ba6cfc92ac972e6739a4c21f79e83

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.DLL.trx_dllRYK

MD5	5e3989e73cf647deefb42ab1bfeb0e93
SHA1	f333376d3111a4c03ce3261a4fa328e71343f160
SHA256	3c7fa110e6c41fa051ab64e033eae5a9e3afab0bd21fcad5824e163d22b22223
SHA512	62880452ebc832cb493e86de9c31368d5b7aa837e4cf44ac83b5849842a3e26f73d5868d469d020914c5c718e167f7eab233d4c0d5533ea1e825507b551e0684

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.REST.trx_dllRYK

MD5	286aeb28155486a2ecb438adb1c2341f
SHA1	2b4a9b1b98c0fb83d03f6d89dcdc8a85f6409cd6
SHA256	8238d630696eef21261383da0d1eb5580fc1a261592c765acf92716b9df9940f
SHA512	5e38d1edf11817fbde5007256b4ced950ce2f5ec79ee4f6385abade30f784724fdf998dd152e3c8fc79acfb2f629a1a85b6ee4d736992cc53e2890208eecb997

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\STINTL.DLL.trx_dllRYK

MD5	b5d7277c1d918d8141a38f70b891f394
SHA1	6b0b5799004c2f80355f644971c32c162aed3837
SHA256	18758a2d0a2b92773ed1df9a4ebe897c766a6ea37554e57cc50cc8107374b330
SHA512	9319f8d2840342dcda85da967baaae01757ea7fae536cd57cad6890b3ca8fa4c3d8c406e53d32035f39eb9017b4c9ff4b7e674f3173f77891dcd8a88ead1e684

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnkRYK

MD5	b4f8c2eb4e93e78d5d4e3509a7f11985
SHA1	73bde53374f0d3d278e3388e614027dca11908a6
SHA256	92f7392c3f32439338b269e2c7fa1a231e5f33af50ca93fdd6f0a26b92d05954
SHA512	4198c90ba976aac53a525e16e4fb9211001c903760b3b73111e0c61c79e588050ccfc1534a589c7dac9d021ea9d79c0d61e51780c5ae9fa55cdfd436ed450a49

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Reference Documentation.lnkRYK

MD5	eae028052c687662ec73f5f95dc3f11e
SHA1	e80540dfdba8142a31399f30de328d5c9d7b9a75
SHA256	0480dde9279b4ed3e0e88091a76e1d86376d5692043fbae707bf06ce2cb4e45a
SHA512	22c2d4d4fbb125d367b851d3c730d7e2a579371ea085097d1099b7175e0e7af72c3b7c230203f5ed62c67bb5a06a64ff252afb6e01f42105b4ef01f09bc0be2d

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1QRYK

MD5	7da73e23312e0e8ef2b74e38d688cc5c
SHA1	682f5bd023448b6062971e7898c66273bd09b8e8
SHA256	f3d3f0f0999577c6979a84ee6fe2144dcdc5dd46ea9432231c5e52bce3c0e245
SHA512	eab8da5bcd93b7ba5c024daed68cc55e6437661efbc20e3a697feefe46274eb7b943aaebff5769ce3040fb68fc679b56036ac04558e2b79ec6fc818ff1b4a4cb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnkRYK

MD5	ef6daaa73b8a6322478cc6719e17c1a0
SHA1	495da887dfaa3f946a7030bc54838616e22f358f
SHA256	b5fe9ba9be2057bfbc01b6fae328257424fdeff19abe6b75f59f72d0d929aff6
SHA512	a89123a20e4673f2ac45878e570f138aec271c95c8ec6d83662e547ae4382c82811b6ec86df12b8462645425aefacd75edd249926db7952ee0c6d7e1ebdac8f0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnkRYK

MD5	b9aeccac7c5c3e791cc66142d8039d92
SHA1	144280dcc4be3b3d1008085151df41c1e0cd5eaf
SHA256	857ee409024048ee0e8c91a13b3270726ea2281122b65350f104e5977eb6be67
SHA512	5ef9e74533bb79ecf7a95e1d9e0386f7b34b0c61ce4379fe97f94f8e3af7cdcb6921c13836442f52682eacfd3f95bd643a6a06395a234d8e3efe0c347d48b384

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnkRYK

MD5	8c871b69ce010ae4f05f107278610a80
SHA1	1ab8dcceaedab30aeaadcd2f5b86802220b1c88a
SHA256	69f89d68eacf112f8abd1d42b4dd3fe3587bd33f893c6502dd3c1352f2822aa7
SHA512	6b7566d43fe2982c790885aaeca08e8ee3f0a0014aba6f9ef52db463f3bb6181f87151d9ff0cb5ec5ffb971f84c384e8ee40ebf8a57aea7e8a284df7d8a9f72b

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1QRYK

MD5	9eb1c076adaf2eb93501e8202fe9221f
SHA1	7ba39a372d21fc8cbb0490bc5bbd42df9dec2e12
SHA256	32a6038943b14f28dce34970276b1a731f0c43398faf619e5f87c7606114e98f
SHA512	377301818162a22ad48258abb39a30444ed538a9b88af77da1e0dfa4940c74d919dc131752d7b39f34c0f858d0025a5cfc2250ec37f04de9a259f3aebaddec6a

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1QRYK

MD5	f17479fb0ae6499a1416aef858f2d495
SHA1	b0012e93def66d600c1966f0551f7713abb9130b
SHA256	b36350d14b4dd8e42331e8bc8bd4b76f04e3bfbd70e1767ca7cc235ea707ed89
SHA512	b9def93c76b6441eae6cb42da77204695714fa46c32152fb4c9720dc35c2ff0e5c282a982a83e43df3aa47cb85c82fc1f25ee325e791b0caf156a1b9e5aac455

C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm.RYK

MD5	737bc1a520b4ecd729da8ea8f0bb192f
SHA1	a5a2bfb6d9c0d7d84ca26a1b4d57f8f8d0ebbabd
SHA256	33b7151ba934043675298af5fc3018cecb7a96941b28ff3c999c77ff6ec4019c
SHA512	47bc2101fb0632a1d2044170fa84d42ff1866452d9566f7dc808488116b73dc93cce6ad8d6385ddd656a6a3dce9bf02add8aa02c3d70b3346a0817e24c6d2ea4

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\Microsoft SharePoint Workspace 2010.lnkRYK

MD5	dfd8fb70b83923c291f42c3a95412d14
SHA1	9bc1042e2b30fb96d7d78b449b597261edf8bc16
SHA256	8dc568e1b2c1287f47fc511c36a64c7e474bce8d0e7c5c64a325832d737f52c8
SHA512	a2f714ee749c3b096df78a791913688555ff7ed5d3e15f4eaf3de86c6ff404ba186dcbe18c5ccaf6410321900451a020117ec487f21d902f57c065465d119083

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk.RYK

MD5	d111b45ab7ad97c0214481a8a077fbb6
SHA1	bfcece3a6dd86530f17757450a27551bda7afbb8
SHA256	229c64e9d5dbd0e389d3c16aed2c5d99d0be1cd77eb8bef471975d1868c5fec1
SHA512	7ecabc5064578c4ef3c2d6a313039d4784ae86343d469412316c7f637edd116a74a7dc0acb13e99d69e16534d8d8abfd0bec9610248a387b18e8ee6ea08de988

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1QRYK

MD5	4c1b61864d973b223b374808fe176842
SHA1	b592a96adf901d64e292b50e4ca94094be5728ce
SHA256	b5a503f2f9c6eb761d039d7af5711c6430bb65538ff2024e28ccd3b0840eb3e5
SHA512	a9bf4512ff864bee2fc0c71e0cece1bcec21db68a071df904f01e3326e8d21dd89f67f45dce89cd95e115cf566f49c5e853d1d524e96697cdb4f8806566aebbe

C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsmRYK

MD5	64be33cfab4770020c1bfbd92cf561ca
SHA1	15bb2a79812803bcffa31a6afd4dd04fd33b577f
SHA256	d1810c127f45db5bb31b6bc30f0d7d4076411c4f91d9cd0479c469a23615b7f0
SHA512	bafec6949834a0a32fdeb6d0e1e53f9065743b9af05d8e6c97a1c0ca85d512fdb0391db9280939e3ab77cb3f4616ef7d2d700d8bb74220af9d0daf9759526300

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini.RYK

MD5	4252ce12abbd22b6b24c1a826d7b39a1
SHA1	c0e1c5bf415201a93c4628276adc9a7f789f9dda
SHA256	5badf4802a99b2ef0041fb41bda52d9e637d368b685e50ca4b2619e4e41af175
SHA512	f90188929c3ce19e48605028e60db04b375bcc2059fc37a0802a385ba0ce9af9969f71df1e84463b9b38d57cffdf9224edbee64a3a8958325ef07a99c63a63e9

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini.RYK

MD5	bcb6a655f5dd51173d7294210c3be12f
SHA1	d4addda7e6c0e4961137039c76049eb81d4059f2
SHA256	581a8ecabf6241cf1218a986a70a6e4d1101b808b67a468b8e91ae488cc76d63
SHA512	d1c35f7d2b2eaf3721ddbd3aa70654aea3b0129ba40bd34d20bbe0904b329a03cce47bd948df08d48d2ed66e6164e67bca4c5845b550b76fa80857ddd29a6412

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk.RYK

MD5	cdd42a6e0db4f984df69ddb7e551aea4
SHA1	dc2f003fcf22f7024173da9476b11944be297674
SHA256	165b58ab2178c1854b553dfc7bbd235314bba7f8573791aca6ea423dce4ab9c2
SHA512	347c4199a1e795c1f5aa23ac6ceff53852c60e1d01a2ca854ca953b5f40777fbfe590988314b82fa6ef4c210721e55d3018daa67d60c53ce7c91a59f184d5663

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk.RYK

MD5	1424a860418d9664a6980c0834debe42
SHA1	4ef196b21a015b23c4c3141e5d5f004090ade0ec
SHA256	006271abb366fb2ae40ad18bc8bc281689fb7ea41cd5a56aaa4e59f007087cfc
SHA512	9d284ffc049978106355c669833ddf2c0fc4c55801a611bc7ab3390fc4dce89d226795cdcc662271b4db9fac1f85d3c75e0b97d413068340de161c6e6687c8af

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\More Games from Microsoft.lnk.RYK

MD5	1be8a8dda340247829466433cb3679b5
SHA1	fba1ff38863d0400ce37f6182a9c571cc4f15733
SHA256	e8f319c1892f115d1a389666d74836d476c588f7cb097a9319527bce0c47c843
SHA512	5e58d07d680e676fcff5736c24fd5baafe124002b520f66d8691e3c0badb535b7fc6b2522cfffb5ad7abf24fc709ae0eb4f3d71ddb73e9dc121aca50415c8bcb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnkRYK

MD5	20e29a24bf435c3d2bfcf4f9a27d4cd2
SHA1	12ecbc5d3a52d0558933993364796a0016f7efe4
SHA256	1120e0cb83c97ff83ec5c3dbe1c7f6fce7f4fed2984b4f93ce1a4d768f621798
SHA512	5e603ec607a607cb3d8c52cbce16ed5f714b39c7350ca833a9894781c63fc58c41b74eef470ed81c3c9a6b68c339419d90afc736e66191935dac1fc21e09b5ce

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnkRYK

MD5	1f72cb84b9c8d950dd5343c65a822bb8
SHA1	046e2aba02241dcd607810e6d20a007637fe9dc5
SHA256	29aa3e61ad5f99185a81d01498a59f3f1a8ebea3ff237618b280c607c7d7ad48
SHA512	b28b44596c2eea9273a7c4149ec90f023db47ee69717e85114e4282a4097839102bbd0d06d8617286bd3e39f019c1047166b258a41f171d0d8bd68d54e4d5333

C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\cab1.cabRYK

MD5	581349fbe16816d82232516b98757600
SHA1	d185206bd000a3754dc015279e2c1b0b66242d46
SHA256	0ffa5a7c0bd10d3899cac2f731ad5681667aef771dcd8cd180c7418d63c88fdc
SHA512	4c3434dae69809087dc791aa9e8d18a135e7623d540b149e403b921a8bdf2d5c3c0f8135f31860afd83b61c1bb5b1c4289d7a6e8e984ad97d4db642339cccd7a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office Picture Manager.lnkRYK

MD5	d98d94db25f95eaf3b6a2b95e449ff2b
SHA1	16b842808126982beec4f3b04a88771ad6442f6e
SHA256	e73612c8a6f94f19eac5b083e2ac9b90747d24f88bfbf5d4bede650bf6667c40
SHA512	33ab02c0d4cc2987fb15837799329326b44fcccacff06d7c9bc5a66a78e0d00dd42041f5969d5a77f76509bb3b493f605bc171945cbd6346f8c9c4aa6f5409aa

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Designer 2010.lnk.RYK

MD5	2a9c1f92c129c54c4b5d389b9042dfa5
SHA1	ab0762d472bb737136948befbd62cfd69af045a9
SHA256	2a493d49cbc5403a5a0076c720ca03eca07ae4fdd898be7d8572b522eb1d1688
SHA512	07ad292635347d1e3d6a2a6b85101eaf67ce491c4f31af4ea345a68e3330755c395141f5dd0b7178feeb38b7d593eea9d427bd0979b5756bb4631bcc95944e7d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk.RYK

MD5	9c14f3aa0870a239dd9ae2c32cf33750
SHA1	6d2c65c0b62a3359d2a3f86d241ad25ef34e8de2
SHA256	cc274661f1ad1a0de057577687512bc01a38f64f4fae2bf819d4df87d4cd8f37
SHA512	a9b048c3f70dbab779f29b44330947ba81ab5e7ff5acb9da4b32d37e7931ad2ebb8027a2f425299675942025123c3837c50a98aa0ce07c5b32a43d1e55e468da

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08e575673cce10c72090304839888e02_62d00eb3-39d9-4013-96e4-e92894ec756eRYK

MD5	1c27093ab1dee5cb83ff0919d40588bb
SHA1	7afbc4eccc909713f78883aea03c2102fc84c2bc
SHA256	1626466e4a1a9068bbed5a60aa7631a06e557fa0d88aa5fdafe0fe266c03eb9b
SHA512	6a3aeab8f6439b1e9aec3c3a343ae1b8ad855114a5850fd3d56079c0e3ab43b574c11036d54dda4dc9fb6a5f9252be3af3970df1e7a43202fe47159cd4405a42

C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cabRYK

MD5	a64bb61e9aafb5ecfec651a625fc4752
SHA1	c021923da0d130c5fea24264217492df809e0169
SHA256	fd566fd3429cb8749ac3b07162449b1e39b0a9ee0be3d199a9eb386e78897856
SHA512	71ea6ef1ca2bbc6bfe5bd8db53aedb50c67f11c3a806e88fe660ab4993a3251e41797be7319f9c50efc88352cf7e79214ec0c42c82ba0c90c5fe8adaf7b5c86d

C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\cab1.cabRYK

MD5	b3e6cd652d9b316b6bd4bb9e69da27a3
SHA1	8c4e204eada30db04a9aed9010ae1fc257e2fc72
SHA256	f816bcf8de69f514d16df5a4b6c21d9292264428bbd9eb2d33e60c2d75f2d697
SHA512	70048dd99b68b13815c8be1288bf52dceebe29aef67542c6438579d6c66d156cb9ef186dfb8ff019ca82be81c7f624654e57bd2bea8abe0438e0ca75b4ccd876

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk.RYK

MD5	fcba5eba9ec77d21f1493ff037201e3e
SHA1	8002296e0a65a8b49d4383749dc3951869fc1521
SHA256	27cf5a16c13e960975ae6c492a8132b4fe2bf421fe873c6219c355e9e4827e2c
SHA512	6025894728d848b7508be7d4ac2aad2f85cf32769b9260d73c6acd897d08a04e76ff52c3917a780ee6c7a85772904ad1cad9b9593e0e851cb2d604e1afc158f4

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk.RYK

MD5	6c481ce47181c9e7534df55883eb5fd1
SHA1	c58581f544ce62fcf8f96ad88983b7577bd9b56c
SHA256	873d896e4037dfb89ac35dd0be957ef79a5f2b0710a3e875831d616aef0f3421
SHA512	f2b32b7407ca4967ba1d2ef53123ed3095650e6209f81586c585119faaa5a3f3cb7645ac7ed19a47986511ef250c4801063b93d0f8a9323a7e749b4d4ca8ff98

C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msuRYK

MD5	95b1bcbd60500eb699cee2a03ce3dfee
SHA1	abf0d91658f95ef3c1e0b961182d11d68fc83f33
SHA256	79acdfba3667dac97f8f5803bd0374d3bf518296832237de7f131474219d9582
SHA512	c5c8f2de291e370b5571afb775874ead30e5ba4b56447e81a556a2fdd363a63627b0bcb4a729a5c6f03142a23c94e53970cd426b0ce3ddf3a0425e948a6914dd

C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\cab1.cab

MD5	7c8dbeca1e9c4d7c7bfaef53f6b7530a
SHA1	432402f03218dcb19b08ad6de4a88d221bda81d4
SHA256	dfde88218a2a4a784523c5b12a5025fc8807b6a4e4b65b1b7d88ba005efcd244
SHA512	d27cedbe5980d4e09e2f349293d188c92d9589e789f917dfdb6f6606ca0415996437b1ff81de508cab02521c769a5b77f3af124bc5d992c7d45daf18fac29b30

C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab

MD5	0cfd57d85614d4ec1c6e6c97fd3c2f19
SHA1	a435b78294ffb543375a6ce89846e07b08fe4ea6
SHA256	4650d87305ef3c006fe9aa262c171a713c1f05332bab82c3c2033912999748dd
SHA512	a164fc6c7cb2e9aab9a77f110296b9b4c30f1d9f69968d67efd491617ed7b79e5d682c3ddeca4c5e2f9b2e164bc94aebe5f0c524952dfdf22f333513a4680282

C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_62d00eb3-39d9-4013-96e4-e92894ec756e.RYK

MD5	7b1f49ef7dad9742fa852275ca41c364
SHA1	4323335e5b8a0a28409fbb9e6e07eadc4bc7483a
SHA256	f54f61caa4818938927e0fe3b0d668539ef675d047f0730ebb6675830c5967b7
SHA512	3fc17ae242e7e8d97a799ad301c3d8f6fc142bb664f627aa8e783959977d16446e82d9418e52b153892dd344f5715fad984b1f0671b74a085efde7c985de458f

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpengine.dll.RYK

MD5	0b6a3415480c7782b2c2dc42ab6155cf
SHA1	6ee3d2ad98160b76c5f13fb71166d43bb1087b6e
SHA256	d6c3f69a7bb551ce3fc02fd4c036aecfa927bfbcf7f8b6936719337d3af3d427
SHA512	bd918355c2211e50913d2f5460eb6fc2dfd22497e02a9f5f37b07712eb5d28ea4563f6ca7719778e6eac368df40f86a99ac27ad4d9152d719f90252b74ee348e

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasdlta.vdm.RYK

MD5	f55ffae8734112d0cfe906a31485f596
SHA1	c84f7300fd2c1b9c53a322d45a053afb6ffc17ef
SHA256	f46d3681c2faa9821508768e1928e4135bc73c2df3e2b7aa2e5e840f7c095363
SHA512	6cc7f49f78474de4b4fa1f3ef4ef718946a7059e4025f4ed9e866f2c55b9f132ebad9927861e9eee412ff254204d0aef686df17f5c474531ab466e31586edaf4

C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msiRYK

MD5	478d8c7225db16806c7c48f6271e1612
SHA1	f585a6b754d576b481a80ad176e62921db584631
SHA256	bdb40d86b194c5d485ee4424c60153199c9ce04815d8f509043ee7ded2449bd8
SHA512	72b1600df5c12445a9924196f9e93d900242194cd6003962c6845343c49efc04ae49b634d4f566dc6695ad87c5cbd71b7b9ce3f2840e82092d58eff02c718dda

C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msiRYK

MD5	f9f1da89b8de1a37ea55ea0d84b14b34
SHA1	286af0a284c4d95b2bd85fe7415024b8b999bebb
SHA256	10ce7a7b48a301c9558aab94005c87257fab3fcf5dd709d24e00366afb84d66b
SHA512	44a0c9f318ccb84d21855a1346d4bbfde0bfc7864b545719b90f8e3b81653e06bb0157cd933b46521b34867bde6b406722729df72c567e8a074cb32618ba1c43

C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msiRYK

MD5	b661b8be10bb7af133c938d99ede0ef9
SHA1	de40368fc2d5c93e4279943fd2d9a0eaf9bd059c
SHA256	8c5559d73de0bd89115fafa653543b6894d3ba0deddda9816a35c5da3d2514d3
SHA512	5727642e6f953b3cd91bb9d4f4758235b3b243d652594ebd07ff2489db2035a717ec744cf1ca047a5e1a15d80ce202e78091159a02cb0098e46a6802a6139505

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasbase.vdm.RYK

MD5	eaabafe0bad98f822d7bcd3765919902
SHA1	d8c860e88dff65615aefb56a97ec6d9640eb2877
SHA256	70a6d4de75ffda693df30c019b60b44eb0104669151c534877b8006dcf57cad2
SHA512	6775b82008c79748c3b0865eb9b408cdef8ebfeffd5b7452486ab7cd21e52558f9f9eb66690759bbd69d5a67d21e84e94a7cc0e99f0cea144452abad6e908f25

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Upload Center.lnkRYK

MD5	d592ef61f1fef7b3ff71bef63f3116dc
SHA1	328625b131eaa214621666279b5b24406b067f66
SHA256	eecea2a86f498cb904514a7f469c2c1162d85e4a10682af9456427bfc717a15f
SHA512	c93044a1b646c5207273d3005de9500f4d80d0b805b5fe36987d0de377c45bc995345b07a73f23a5b746a5cb4a3a114259875b9e4e8941f7ea308f9a697ec2e4

C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msiRYK

MD5	33980214df54fd1af5a46c34c176a349
SHA1	e5e1bf013b27508c9711dce5aef3618661a824ca
SHA256	55e71334f154f3c243c3ed1ef0a7767c8386d1328acb999ae1901b70012f477d
SHA512	0304f8a86bb511baeafa79bb0bbbef7be320e44be2e259ae07dabe4b9c5ea1cb48935b0b20dd9fe899e38a717741f0024b54b1f89760068618a4bb2fecd1d70f

C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msiRYK

MD5	493c50a6690eeb63a061d88c96561d9d
SHA1	ea9198f89d01f697b395a5131b32cf9311a898ca
SHA256	0db37fbdd49a9733da8c715741aae883d162c1f946f831fdb7a3c3f0c7b40461
SHA512	ff330df01a3c93d044ed64206c729e8784da47fdddd39deb5acc5c56c0fc57574a9fb1632106c3ba50bd8831525221d13bf6ffbfdc56015aa11ee8757a9d5c09

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Clip Organizer.lnk.RYK

MD5	32ee1305d89d8cc469a97c318f6f71a4
SHA1	6f3001ae8f7c013a9e259ca666a62798178c20a3
SHA256	0d1005780ed6641f86fec913febd62c144c0c0fb435197c7f8a832bd4e5027f6
SHA512	672ffa7657507a49d1b92a69d3c4876619b9458fcab60c8cb55acf8f7006daa989bcaa6bc9428e549ea622c7e74f25f1addcf1f5c3b749feb50a53b47cb2ba65

C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.RYK

MD5	bb23e2c95e6e41e519a000fa68c954aa
SHA1	268be3a2ea69cbd26c6fffea692ec84af208835a
SHA256	419c624f89b050943ce4cdc87c8293fe248e3325b8a11110661cad56741d41ab
SHA512	4fca976b7c13d1e296c48a2c5be8bd86aee6b1e3a59787e83c2834863d2921ac680e228a47ddd3b38642d6a83b1c885b20ef91338461df5a5c9208e8500e0966

C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.RYK

MD5	2b69275eb561beec6dc7d7667a9f4109
SHA1	727355485a08cbd8677e738f43f5566ef0d540ee
SHA256	b7091d3adee74f1df8bef62a27bf3506d2e7d60dfa03368eb79deb5b53fb84c9
SHA512	b033f2a9ce0f51383603c7ff1a4578f80d2cac4795519d862d30c69a10a9d7d67a79b4a07786073715868884fe41faefa9a0bf3e091be49eedcecfde71c3476c

C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\cab1.cab.RYK

MD5	51f71d0284062705c0f7dc8b94b649c2
SHA1	d236a0b75c5818b93941278c7f9a3ba1a91afa80
SHA256	19dfbc034a9976a89ff7f33244277a19286b2309749c2849aabe34711b7a707d
SHA512	c736ecd1383bcf3e2fec8bbb165fc891174daffbcce6481fadecd2fa2cc68000bd77e44bc1c6c35102b659944de23b02b5ec0048149098f02a5a788f27164787

C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\cab1.cab.RYK

MD5	1af7688be5f0b6234ed19e87884085b3
SHA1	bb6437a4dd4e287ccd6961378f86879d24c3a5aa
SHA256	8147ccd0fc4ee92a72059c12b5f7293f76ebc731303c84882be56d5ccd76839e
SHA512	c35cfa94102e4679540fbb08a1a6ff2eee75bdaf65b43da7a40b9dbd73619c6117e62fd5afb6882d82b62aa05e8e148b29566df190b03097f71f198e9185095b

C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\cab1.cab.RYK

MD5	dda3e4875030ad9055fe3276692fa378
SHA1	ab5dd3a71859f92fb743dc4a7eccc742dbb28b03
SHA256	04967e6e8f4920c025101d9ba69937eddf7d697fcf0c7f80f7809cd788ac9f3a
SHA512	156edbed6f74472d58acf3bdb9873523d46aee033230f51e2f3872769b2da3adc05381a5601aafb7cf4894884c0cdd9866651802d0bc66f18329d4da783b6449

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\cab1.cab.RYK

MD5	fca22aa197e84142500c1f277841636f
SHA1	3ad01d68f0e6af3396265be192d376e343617470
SHA256	a9e925251078fa42d620f6f47b71151166c41996d0e70fdd35b63e596d1c0ddc
SHA512	053bb34c748dbb3047a301b30f52a59ef383d93ca6140c0c978954e0eec86821e31b8b4224c9b00b099daa8ba5c17679cec979ef0c623a3346bbcfadb3aedb2f

C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\cab1.cabRYK

MD5	bffff343649cf6e95442ce598f73254a
SHA1	d2198124b39aa8993707e24700d03b395fdee240
SHA256	b49ca1a58dae19450e73daba27ae792f67b5533ed177ba7c02f95cb046e838cd
SHA512	9a4c74d87001f0450024c5e6e6125450905b5b839054014e916ab75bc4751f5ac3fce44597ba87c051b47d82d3124774976a7520218745001626e5268a1679e2

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Language Preferences.lnk.RYK

MD5	da40a3884e8cc8c631ee078faddf5b9a
SHA1	0d6a02c33c03194578fb262cc44129de834cce95
SHA256	e24430a58e10a204c27a21eb5959bf9045695d7ea0f2a0e5502e409e3f41dc00
SHA512	b3332170479fb25001ae20dac4c706b3321608cda8971ff8cc2efc731fdd888cede3b43ff5997c5a59de2f15dd3525069b18572307b677d8650697bbc3c6fda2

C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK

MD5	15841d88f5daa09fec1636ab3ea0d67a
SHA1	5150e0bd041038960d790517f2a669266d225dca
SHA256	d7ee1e8416c776b3f7471a0ff2cc166ecd23d74c4da2c506d13a96afabe75600
SHA512	541ddb46ef7cf39d709ddf4b8a55f65df3a3c3ce58d7138d1e4b0e8a9df86eb3a54ff1c1ad2ffdee91ce3bd4d75ccba882e475538d48f5e64f108f083b42c9b1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Digital Certificate for VBA Projects.lnk.RYK

MD5	7d98b25298b0695909d0dc8c1840b691
SHA1	9e6dc473cef77bdb43e13c094938250b42066fb9
SHA256	9cf93302d11913ecc7f7cf8133aca9a70542e7089574beabd5a67213a6f55595
SHA512	7c5d304d3c9b7f4f1717feb2e72bb11942c846592e617b3e5e046389e5c28644978d8315c3e66359ff9c673adf65b3abc9bd87cab705a99fc54291233991bdc5

C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK

MD5	27bf7b7d24371b0260e887ab6c1f25e8
SHA1	326bebcb799332e4b8d71f188852453144432343
SHA256	6ecd4c7a32cd7528e903306efa2707447db910cbc72236581223578464cfacfd
SHA512	d056ef8a01f5814f8e373849f4461265f161e775caa003c602da21e36d2cc57c82420e01d1d80cee8b3da2e50d9e747b033a0ef3a8b91a0bce8f3a7e14b38939

C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK

MD5	1e159722df940b6763e975d21ea6a1a0
SHA1	56edb73cb89ed6e97a254168a44ab04844ee2ee4
SHA256	0bb4b0eba7f69a56d0051763074d201c9c14c00a8704de68c02f3046a4ed4288
SHA512	be0c35e2d2e269c2279b810866efa96056dbf9711813ba9a8704047b63c568fa38da86d6f77ff2aa42e924dde95938d814f91513547012b3563b4c9b41231e6a

C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.RYK

MD5	40829b22ae09499087ffca7194140c8e
SHA1	92b1b89aae3086ada8a5204c00a6a555066c05c3
SHA256	1c3555df1771788e1f2168c4e3eededa8f8b7d9de5a61af1d03c51156b23657d
SHA512	c6632976f03e40b98bd77bb7edf4d1e9f8ef2da4520e61e5b72ea1903b817d9262edb379f97c509805ac58e660d318f588ee3a9bf5620d5119977ad58cd8cded

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.RYK

MD5	17035ffbce57388052217a1a037ebb82
SHA1	8681dcb68f394f9799210fb774d83e902f7b08c7
SHA256	d24e064258de4e681efa8a322901e6084f6e7a7e7d95d69da0ed68f64eab0c1c
SHA512	bf685c40843bbbef991566b331a4dab875dc77a256d3bdaaeb8082e46ea569195c4d6c3af9183f4e1b88753661baa71983d7277e81a79b793f91f4697043df4c

C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK

MD5	61040141101bae8375d58cfaa5538641
SHA1	8bd7879d65ca3cf58290b70a9fa4acfd00f7334e
SHA256	b7cef60db44d76d272a23abe98b534aea72c02675b93120d41b48180b153e81a
SHA512	d457057ea2b444c4876594868c004a380f21ab487362a916e9f4749a8ecb9e902c901babdfd4bf7ef14c5ad0a4128bc6368e89ec57ada83bef8015abd0435b50

C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.RYK

MD5	aee2fdc836508acf804ec626b4ee733d
SHA1	27dc65c938bbf5984ef2f788b013dc0e7e951ad9
SHA256	c94ec096558697c0d576fba3b0332e0f77d717347efed5c7870f2013388e90bb
SHA512	da02329689f007365eceeea0e1e97cb8ac44bc079616e78174e553400b2b4434f241ffa2b658e9fc0818112cd848e538a2b8c14f285e9dc9304b746750351573

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini.RYK

MD5	e0a6c9cb6df6e5bc763cf741ecfc3d2c
SHA1	a2602c7a62d79caacf39b243f8d67ac4c59b68c1
SHA256	ee46c519958c7aee0b711b074b6832459e8cb77e3714177949873a0cc1d12b14
SHA512	d50d5b442a7e6d48515b741abaa9dc51cd3d87ada37a769bac9d2d5c5fe6ddadca8e38420a19868bc94fd2d44e1ea48d0a821fd17437fa8c00caf5a524627633

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk.RYK

MD5	52e3f4c77d540e7d3ffffea5d14e8fcf
SHA1	83c57a88a9564b3d84a1f6a6000b17f4b6a6e9a0
SHA256	7d5b8f1da89ef523888273214091c604f80e8ea3280487d43ebfe63c695cbb85
SHA512	6f46123db9b4003c20c26e81361a7b812abe1f3e5eeaf676d947a54adc1ac73dfd461134ac2a5de8d50b83f9e20b4017983511f5d9acf0261401ed6d3d1ac9af

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk.RYK

MD5	8f8dbf7211cc35313b611b3e7c3af976
SHA1	d815a65e3bb369e4ce9b35bbdef4eb0331e2ffdd
SHA256	398c0a1bff5ce56f539b8c767a53fc770bd662af21e135bd01489b3416ded43e
SHA512	7fac8cf6e924649428f6664455d4ee847bcdd164d0be63e2be0f35c3fc9b912276f72abdaa1500f842c5b8b882e21d410adc69862c02ca893a180ef01314556d

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-20 12:23

Reported

2024-06-20 12:26

Platform

win10v2004-20240508-en

Max time kernel

24s

Max time network

149s

Command Line

sihost.exe

Signatures

Ryuk

ransomware ryuk

Drops desktop.ini file(s)

Description	Indicator	Process	Target
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-3558294865-3673844354-2255444939-1000\desktop.ini	C:\Windows\system32\sihost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\3D Objects\desktop.ini	C:\Windows\system32\sihost.exe	N/A
File opened for modification	C:\Documents and Settings\Admin\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\desktop.ini	C:\Windows\system32\sihost.exe	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeDebugPrivilege	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Windows\system32\sihost.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe	N/A
Token: SeBackupPrivilege	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 620 wrote to memory of 2620	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\sihost.exe
PID 620 wrote to memory of 2652	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\svchost.exe
PID 620 wrote to memory of 2752	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\taskhostw.exe
PID 620 wrote to memory of 3536	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\svchost.exe
PID 620 wrote to memory of 3728	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\system32\DllHost.exe
PID 620 wrote to memory of 3860	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
PID 620 wrote to memory of 3932	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\System32\RuntimeBroker.exe
PID 620 wrote to memory of 4036	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
PID 620 wrote to memory of 3968	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\System32\RuntimeBroker.exe
PID 620 wrote to memory of 536	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\System32\RuntimeBroker.exe
PID 620 wrote to memory of 4360	N/A	C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe	C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

Processes

C:\Windows\system32\sihost.exe

sihost.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc

C:\Windows\system32\taskhostw.exe

taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe

"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca

C:\Windows\System32\RuntimeBroker.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca

C:\Windows\System32\RuntimeBroker.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding

C:\Windows\System32\RuntimeBroker.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca

C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe

"C:\Users\Admin\AppData\Local\Temp\tmpz3o4tlol.exe"

C:\Windows\system32\werfault.exe

werfault.exe /hc /shared Global\93cf4a0455fb4ed9b7c90c54680ab48b /t 3892 /p 3860

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe

"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca

Network

Files

memory/2620-0-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/3860-6-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-20-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-25-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-45-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-80-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-131-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-137-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-152-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.RYK

MD5	543b79f891301f47042ac79f447c79f5
SHA1	8448d403cbd60e0e05c74ef8f8f977bbb255f0ee
SHA256	27979e66ac8867b0dd4ba57b1cc1ced5a745696d45e61b6ab81f9eb1dab5bac2
SHA512	4255aa5709cbfdfbbca03ea1377b741c88ea97558c5d44018c294ddf4d6764d16ad5f500e3316f7d0a1fad7ffb1856e6f695db934ded16f4d9ee22e9397bbf1e

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents.RYK

MD5	d20c4a954dc5026eedfebdffabac31ce
SHA1	d7b55a9a83127a531bcdcb6dbee98c90f0d8328c
SHA256	c4cba66d37ace10b5cee6e8f9b07ad730713ba3bb5b425297ddcb19213069308
SHA512	76e7eba429ee77dff29888274d0f983bced12b9f151579d6d31856702f949f197bba0074f266b2850962e2883a09b48dc1ac6f75a4fe4f2df8945704169e0ecb

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\UserCache.bin.RYK

MD5	06da926bdbba58cc440f1236a1289dca
SHA1	58d6ed38ff3889711e5708010a52513bd920544d
SHA256	5cac9b125bd4367bc493a6c06f687c9bfbf7e9efc16f664e49f975a41dfb1b2a
SHA512	e3312268a15c0ee52f65af6f07275d553315c36f2f6ca54ea1dc9fb6f7b28b7e472c03b8ec9904932a119ca0902ea04e5273b560d6076aa2d15bec4cf546ff26

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat.RYK

MD5	3884ebb9e12e85cd24eadde532491668
SHA1	837e4ec67fdb4a3795264b565958117044e4b30d
SHA256	2ae6a96c8760783f131f829c1140bc3c00edee035fed8fd53432953a7fef39bb
SHA512	4a6d29a00350e9e869ea0750b30200a94d19b56ec3f23542d7e031c7bcacfe87b67cee48224f50de35e195e34e5a752f05164e2c16953f880260001823348f34

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst.RYK

MD5	f7bc21970677dcf659b739a381307cf6
SHA1	528c7bb073f812dfe09a2b50d6940332666377a5
SHA256	b759028ff1d2f76ed77b35030908f4ef7b67a8396b65fe5233ca3328a42121f1
SHA512	144df7a90cb1b5f03d55bf60b4b4fd71ea9868bb7d93578155680adf8658b72eba60198e33678075b913af59bfe270cb62192bfa2b9f7c440434d5a68ff79d50

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.RYK

MD5	aa8bc0b1622d7040a1f4b1b89b49775f
SHA1	e774c75795cd03389fc296debc831fbb62d15b9d
SHA256	318c5d603f1c249ee34acdbeedbf2483bfda8fcbe2a565f178d017503a47c8e7
SHA512	c1735f9884fdce5b58be49c666f964d6086d89e742e59dc893ac93fec4b339e7bf120aa23f055f060c8b539cc789727e97e23034d07a6fb3c6ac6dab6d5cca6f

C:\Users\Admin\AppData\Local\Adobe\Color\ACECache11.lst.RYK

MD5	73fc758eb7a408eac8a885c7a1ffc6d3
SHA1	c6bc2202b1785080858bf3ebcf016d104cd5217a
SHA256	032c86b98ab6de7d5247f3d4a31935a8c1ba037cde9d53be824a165285a156c7
SHA512	90e81da5b6a047d3c25a8a0b2544feadc512f2cb7d93b38a891e941d42f5737640f4b438a87c787f19aa30026acd7d5c1e40ff6f422df6b973a0ef8e71b0d9d9

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst.RYK

MD5	efddfc180ea8c43bd5c96c52b951077a
SHA1	ec4437371aa8c3fb21ec82a8f107455a6097d762
SHA256	2ac4e174e0991b280632035141b8947f9dbe98f2140ed85101f6530594b3d5c3
SHA512	34bb0d895fae624c8e03aba58a81d7dc795ccc465f039168be816b7fe7322ea8d0ba4c22d304b6096e5cead02fc1f4550f6299643eff47da49a52cc4d974f43f

memory/2620-149-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-146-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst.RYK

MD5	a30aedea0a3872f0894db3958881d8fd
SHA1	20c59413cc64cdf0d415a0421bea5cabddd71672
SHA256	29190bf82967b07f1b74ad9d662c71efec5e082d6f955789b692c3bbbaeb3b4b
SHA512	b7cc266b25ca16acdf86c862e03a9e569d1eaeec8bc6c018019e853822b1bfe2a2029465cb75fa25cfbc2c0680538dc652cd9c60f4f2924b4c95cd7ec0cd6b5e

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USS.jtxRYK

MD5	76f65cac5e047ed9693a606b159a99ec
SHA1	25046c4d854128892c4c2e1ac085954b7ecb09ee
SHA256	0358c45b38001d12b3548cf7e68b79e63dc6616cd0c843b5d408d4c435ba99bd
SHA512	af29300e5ebcaafcd1f066441bbf7b4733baf8de9d73060e598749a6dc25d51a93fc9db288c67690940f17364492a79172653f9b0b968dc8bd6af46e3bb9d0ed

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USS.jcpRYK

MD5	6ed54b6cd77ad30e8e106509785f4cba
SHA1	cf4aa1c926b635f3bc0008ef5494caf1181ad621
SHA256	fa47a14c672b04a76783744e5d8940b316ef54a280113600fcb8a95fa057ee47
SHA512	9f7095f0703fd14112be7a5c7fdef2165a2ee78983ba67e185bf57994ef6d5d1ef2626b5c4397bf008a940e45d2a1a9784c15762873e18fd39d7c8c53b2bcd2e

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.volRYK

MD5	846b39358adcbf8c62c84469e2d1afba
SHA1	bac7690e7755d33822b39ce2a21cc2c58dfb7a46
SHA256	2ff0355333c762bf2dd80c8be412dae46f09709e1910d31f39dfc5dcca8217fd
SHA512	9298696491e995e2708f65d0cd64bef66ecc77282ce6ec7eee1a6c894e70652c3f70f88c9da404be40fb241091398654f66fca44740ec945a951ab6623769912

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfmRYK

MD5	cad09ba7282ee8d8d62e28559de05625
SHA1	b0d7229625a6ba2c28d0fdf08504af3e859ee22a
SHA256	a97cd64a721364168f18a26f6e3000d6efb97e6dc2fec1c4414a53df4bde8188
SHA512	9f502ab8c26c0128fecba169aa3c01f14d9563cf7f4b96d382c65bbc7b9c3ab31710b1f9edde7c56303393449c6ef17a38bd7ff8e66959432115bcc5d2c9fe72

memory/2620-143-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-136-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-134-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-132-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-123-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-110-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-120-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-117-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-116-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-115-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-114-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-111-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-109-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-107-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-103-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-100-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-97-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-69-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-94-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-89-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-86-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI107C.txtRYK

MD5	eb283155b9a3e2e9773d1f0710e5659c
SHA1	13f5b82f5340c08f0761d0c1e09b4d322ecc7715
SHA256	bc3088231db020e7a51434b69f675623ae3110bceb5fc59fcff7b281dfc8e245
SHA512	e61fded1007669f04f7c117d2ac3acd3f1e389b00f5b1d65ee8e35401e8c03e0a6851f3c2b91cb074716e128cab3d0541a9e21166c45f6bf61fdffb113659143

memory/3860-3093-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\StructuredQuery.logRYK

MD5	6cdb733d3eb418310ae716668eec746a
SHA1	9c05a15f2f10e0990da5b0c4fd53f9a2dae1c278
SHA256	a1140698695f2b9923fb78f1108303915dc5a4e46ef267606f02d51742c80c87
SHA512	8ed126a3a5970674928792d0e5acd57a7bd70c92fc24521ee42db49da3d8fba1fd1a661561177a1bf0d273f6d142a897b8c09980f0686cee3f606b5f071ee596

C:\Users\Admin\AppData\Local\Temp\msedge_installer.logRYK

MD5	9e9f6a594ec83cdaa26ae1d5d6a71de7
SHA1	dd23136a3bf40b2c11df03963801eb6943e4eeff
SHA256	68948fdbac00eb21aa251cfc2c346b89ef9cdc21e746836940d539cc36abba5f
SHA512	329c53318483f308f62acb193d510da183750f3e808cc3921a78273a7e082c76007b4d5509c77ff631e31603676a3772d7de570aba9e3a5908d70c14bbad6c86

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI1058.txtRYK

MD5	1b4a95fa13c9b1c1e70f9ba182d4b79e
SHA1	f8d9bfc2da2bea7163d995aa84055ebe700ab501
SHA256	c0bd5d75e1ab4b0bdb300cb0d005084326ad54e2aaf90d45e9ca6856a125e4b0
SHA512	5bbd96a5126e4768d2a4a06e411f50a51a6385f70762377589ada1a569131e347d33e83262310fa94151affa25aa47292dc3b7edc08596d7d1d52bba2011013f

C:\Users\Admin\AppData\Local\Temp\chrome_installer.logRYK

MD5	82e41ff0dda1cb5360edb7d0f02d9f10
SHA1	9beef6e171c2188c6dfba8f63b28f0a5f3fe3b07
SHA256	f53ff5acd0f17cb3cddef2a7697a52848baf72011fea61a2fcdf5122549eaac7
SHA512	fdac84ff55066e27f38487a92fe368335a64523ed909e3bfae4e1606e945331eed7120306d20ab40f0ab1631868825775ae61038bfd7d016fb00fb9b3f3d6659

C:\Users\Admin\AppData\Local\Temp\aria-debug-3608.logRYK

MD5	0ebaeca3cf5611b7e88f3b4e903d8dbc
SHA1	cb36eb6385e5dfdac7351279b09bc731373a4977
SHA256	06bfe7d239b508f837600b47ee6256ba8aaac20b82e02d9f437266adcf3ad8d6
SHA512	520fb7cc456cf3479cfa78953868e538607189e85b68972f5cf741b38e5079ba07c61e81cc6f14ce7d3388e6d502766c24b0a867696ca16fc7aa3ca2cc98a082

memory/4360-3019-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-83-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-78-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-75-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-99-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-57-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-56-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-48-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-42-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-37-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-38-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-72-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-35-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-68-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-65-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-33-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-54-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-21-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-41-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-19-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

F:\RyukReadMe.txt

MD5	f21cd06048e07dd24138bd10b1d2e9a7
SHA1	d131f489f00339a2f3f44ab2f85c65c09247f0cc
SHA256	23d5c8cdc7f19e512415ae1bc3c2bc11ae788425363bf88de873ad10bc0dbec7
SHA512	315a6e481c9e0c97dff92e452c30ec621c427e89c2d42f4a8a2accd75d298ba83b17e07202b17aff5035f40ebe9aabb6557fef09647eb14765642bda5cc47018

memory/2620-15-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

memory/2620-32-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini.RYK

MD5	94457275de26338de0ebf66a12e494b1
SHA1	93f564f2d8e20d4986feac1b1c7356ee84283bed
SHA256	e4362e205fdea2ce0c01499b6635b829b4a0980a1eba38569eb0d758a9d7a893
SHA512	9ca55393265deeee762b6ac8584ffce08689c22dbe41ce869a47bcd768457073fe6830e4766c8f8b918e555dd87a7143bf476794123556a658a4fa9d99b04c1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\CookiesRYK

MD5	2eac7e5f9690700388202bfbcb3486f7
SHA1	23aa8b20a48d4a6bd26054c08f5714425c0d4e01
SHA256	78f82a09e78e943126fe843944acab634567a7e9fff7944af759c15f1d08ee97
SHA512	7cf22a5cc007b28552cbb41e05674dcbf640fa3da7f2f4ec1825de5d9749566d200bf914eae70c74cabeecad47d515f3dadfe33027a7d932c24b034ca523a76e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top SitesRYK

MD5	06b446a792509618150165639ef6934c
SHA1	32b9ea74c902871267488f73cfbc43a343ec10d3
SHA256	9cd21713b62991a004b48eaa3e24e188f419cb03cd1679e36193507f1ef786e2
SHA512	104f2b1e880d02b529fb3ca9f4044f848a331d82a39022ef81b3387dccb6cf72263d12be32711aece979445edc518f653cb91d8f6b6ed07b68235ecb08936665

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web DataRYK

MD5	67be177708a6d6f3af4f86680cdb0e95
SHA1	b413130bfeaf5beec28a837eeb48f85ef84413bd
SHA256	4f794b7f3ae0b526127a57a8030a8af5c3638d93563204cd468ca843c0f3c0f9
SHA512	91a9eb0719fc8a127bfe2fcbcd9bea486b10f95986ddb01a5af2b724b1021c6c5aea0088c0e35c57c6d8a12645efbf5f483306fc28a89e9b9b79e638812d12af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Login DataRYK

MD5	0d1746070a373cfc4a524755e5e8c4e5
SHA1	81225c576a1a08a4b5b3e3ade7e8988485d73bf1
SHA256	0ce86daebd5928642cf093901bea02fb7e3826bbc17bf1dbc6490fc8e5495cd4
SHA512	36df7bb599171be1c2e57a63e9e76ec0067a8af23b9a9c5e62f83b876e9ce33970a5c4ed84699c4f14b30892655f28a4d3183688c49b3e05d59c026a5e5c6d8e

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DATRYK

MD5	2d0ff0a1a14fb8cf39a8e8061cdc082d
SHA1	1204e15202f7d28ca05f7abb010fabdb7806f50f
SHA256	c9f7d9064a7eb41a52dc76251334ef8311ccfbe4fa004f0705bab87709129d30
SHA512	f628582e7fe08390a477c3c5bd948d2213479cc1ed18d1d61b186a9169c136293cc53822501fa53dae470da73f45abc053dbe82b018a93ac2c5baed16af295ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HistoryRYK

MD5	83f0d570a7f1fd2618be85ec2826eced
SHA1	f1fb9dc04555f66c455aad7101ba999af2303e96
SHA256	f76b88d00d7ec91afcda24bef1056bbe3b86913007f8138463ae91494013c939
SHA512	593dfd6a2b4e6e82a21cf43cfd7dbe839cd56a1d218808375f339add0f4d6b67719f141cc8adc0e74def48f0d3d62c6f7b9ad94a911f79804649b359bf640155

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\FaviconsRYK

MD5	3c694f8a7f673fa5f79af7ff3149cbed
SHA1	49d2f92503a2cf9656d7c5e1bf79153d0698df5c
SHA256	600607ef5565a56ae126d29b4e402cfb03860a6e3d94b85a74acddd19a50422d
SHA512	d67ceb2995e100dc298e3050473553787bc24d63b53762ea819516868f189de3f140fafec659b28d6855badd9975794d0e83a14c2340dd7d685c25708d7f46f2

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08e575673cce10c72090304839888e02_39fbc0df-d496-4ae0-b1d7-bde60e245d90

MD5	93a5aadeec082ffc1bca5aa27af70f52
SHA1	47a92aee3ea4d1c1954ed4da9f86dd79d9277d31
SHA256	a1a21799e98f97f271657ce656076f33dcb020d9370f1f2671d783cafd230294
SHA512	df388c8d83e779e006d6311b2046fcf9259ec33d379fc0e2c6a4b6b90418f587a12c5c23acd488413a02568ca2d3effe04608ec7c791925c7ed53dc71093ca45

C:\Documents and Settings\Admin\3D Objects\desktop.ini.RYK

MD5	7aeb6a9bf975a16986f891c69269c737
SHA1	58c10cf56e0e30eb04ba00eceb6a01e760cba1c4
SHA256	4a1702ff4876245397dba3cb97e80fddf289a8c81c532a7e4d19c6688b203888
SHA512	36a3abd886693a062adde2d003b18703baa1ad5df62a7407144e896fa00be747565c17473b1802e3a77cf8561eb61e808577b3768b65b5be0415bb60254c4b10

MD5	2afc5c6aec449fe2350b0fcf593412e3
SHA1	062f85c2640257f8b2f843d69a197a33b9135208
SHA256	ef218a8974057f4f6ffef8411f60bd3f5b9e0086dd1acdd8f58ead72c0bf4fb9
SHA512	095f33c5e649b565b6fadb20c8b4eefdc576c109394aab1b5cf4cc8662b1574681b981b6a244e74d9629b9be1f5f4087d14dae27d8ef49f139df0738ea6e98ad

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.binRYK

MD5	35d0975ada7f1535220e2184105eca62
SHA1	3d66265408d67353717566112e8a76d65fdaf1e9
SHA256	1e13881649dde8d568219a2ae55a3e2ec31019462b72bc16f549bbb9e9c1e444
SHA512	f4186a3ffe7f990cbd5a35c1b1ae58210c7b0481f4764595ef0ddd04d9f5c13376de8237083cc13fa4d403e04d13da9d19b54a72ea62a0b4dd8757e1c11defb4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006Q.binRYK

MD5	8ddb262a19339725fe4d0ae398862300
SHA1	112267337a7bd7d14cc175b2b40354720dcb1794
SHA256	da4fad7defdb634e3d24a8d30f596d257bed6dd99eb5bffdbaf1e9aa4dad105e
SHA512	be4a8ddb7dc18c996cafa106ec87196a179511328427742574036f71a8ae8d913c4aef2542c7c73c847149f8b24aa3cd9c97880fb47f6730a0c192cfd2f768ad

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006L.binRYK

MD5	d7156104d93e9cef96f556ba44b0e902
SHA1	be89216724804672d784ff3ce944bf74f7f5280f
SHA256	e8bdf38152e3cd9622e672bd69578ded3d1036af03f2d4ba620c3aa9779fe75b
SHA512	ff9f5354735af974343cec8be6da2f692dca2d22a5e9adbea27ee497fdd996b9767813571d4cc17993d32a4583b631c2a04a95912720940c0c344a5e4a1a7086

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006J.binRYK

MD5	d6b7f3e4940203fe297f5fb510a1af6e
SHA1	a721ab3c755b7322f5d25d3d317a9ec01618f252
SHA256	616f3b5c87958b0c332411d8baef1feaea3dbb632a3b5797805a7095d4ad2e03
SHA512	9ae270bc92a0de1c05b3d1f9d43b7f4e91e970114cc063df0bcf34ab02652d1e5c17b9aa2d0c4aa688b5b3a8d1db53f8841b6aa11d0ab3fc5dab82a0902bcc95

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006G.binRYK

MD5	c42b3291d10c829b9bd65ca1bc1c71ae
SHA1	dbb5afecd5eff53a3a0f545ec51e7c076d9da7e0
SHA256	aaedf22997415936502ad0229990e64c8b84a4f5437236f178828ec9d96266f3
SHA512	ab3eb4ef388e10e109506e9c58b8793ab44a7b8c35824789b5021b53f819e7362ba0378c1bf219b6db16f2e70dd0411b611145f9eb52580cf9dc8b2669281433

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006F.binRYK

MD5	75a4c2b0844d7b2d0581d3f961111601
SHA1	59b732883ca10c9f24c316893c26f30ebe159b81
SHA256	0e08dfbc280d422102a5ef0a43d983e5e5b0009c8156565a684f8309a26a9086
SHA512	33ddf04c320ac1822a649b46751624f9b59bd861b7280f76d8057e2cf4430c4d3e7a4fd6ffb6472ef45f7617dcff931858a8ed43beb58cc758cf2734aa37c299

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006E.binRYK

MD5	e9b63abd471904954266956a66760fba
SHA1	d2f4a072dae3e26bc809fff697a6636b59e7726b
SHA256	9b22819b13a889951d85ba0995c74217b42153c43f46a49e7d785ac4eb2f1ae3
SHA512	fc6795a02000d1463f819f59816732db8567ecb21c2d9756b57d3df6b39b932cc4440ad9aea820b3fbe7eeecf465d34d6c4242524ef94e4e34cd59993fe5c476

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006C.binRYK

MD5	5bed61bba5a612674ca55c919350a90b
SHA1	80de752f799607917bc899e34e1aacc4ff131468
SHA256	6b1598b51916f0121344daea451f4d6406d77c25aa6eafb204153b8edc6e9d09
SHA512	1a10b531612fd5f9b1950ce8596d524372da7d4a76f5b84ce3becbf9820cf15b6647b2ac9482e96c6d213ae7ea5cb9f7a052f69ed3810f682f5be3f47edc2a93

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006A.binRYK

MD5	92e6f19d0964ddba9035d4568cb3f92c
SHA1	ff02602b0111ddca7466744faf8f21e440513c7d
SHA256	78ac8bf692075aa86791eeab41c4b2923dea2f4a7bcf867d7f0fb2b2333be9ef
SHA512	23155e69626284d5d392cea0950d66ef5e6ce9d64e94eea069f949a7febdba25a315fbb88a360287121c0f7985e4c246bbcc0e652a978f29cba71f4bf09cde11

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000068.binRYK

MD5	0d47afac8122bd8613a5f22e7b4b7246
SHA1	e4181a99c40d05ca4bedc1a834e568098cf9149e
SHA256	ed4903a4f156b2d04d8e569a1a5dad4182d0dc796fff8fa8c294a78140e113e9
SHA512	e501f066aee251624acfab961c30153b74ea90d9cba4efe4bb638802a000a93d6a96c64006e5a7952f15de3629ce1b79c7d93c5deeff72016a5844048a79b6fe

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000066.binRYK

MD5	4e74ff406f13bc892e21ae0a125235c0
SHA1	d9182ed053294b60bf418da06eb4d4d7ee29838c
SHA256	adabc8856a8cde83c120c8303795c5a25b597204dcc9e3b3144486a2b92e5390
SHA512	e7483fce15f48a3e3e4222cbb56fef8e274445388b9af3ed33b0e967e75d2c562c2d62213b84f254071d4871829a400c2ceac6b4600b0846a877302d39671ab7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000063.binRYK

MD5	90bd5b99d8131bc588d3cc7f5d818f29
SHA1	e49ffd043d3a98d3425faba004ea3b608270b3ad
SHA256	835948e5ad1d276a16898a55bcb9857912974385cb8121d8cc238aa469ee67dc
SHA512	dbc34e74fd01e9308957e611bd17c0ef1f5bb842861fc44445856e1f63a7f30d7e0b5b2829e059b275343e66d40f23e5246816e5b37c75c3198f6d1da4a10087

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000061.binRYK

MD5	75e0ab15451542f9ceceef70fbb1dd95
SHA1	66cdd3dd49d693f433193ad01236f8ecb50e814c
SHA256	b2c5d9fc73b254cd4daff955429217c9a45843874da3c9ab69329805f1370373
SHA512	5fc1f576cc4bd341ea11d6c95cbd0c46961eed9d5de7c2d371bdf9ea17842811f24f39db30b7f1121f1f6a056a216ba30a5d61c676205b5ed97ccb9f0f5775be

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005V.binRYK

MD5	accd95008a1d5feab827d5a5ab3f8654
SHA1	8d05639d1c1c8dc1ee67cfcc968f1cbb9ddb7a67
SHA256	b4482531a8059e62478ab5e35e3ef8b338755b86c128fe55de5c486fbe613141
SHA512	34adb069ed1fad0d691a848e9749dc711164284c5c029a063ec08807d2d7cf9fb17e719c0b7bfefbd944f88a0477f628e43aa8f6c8d0d8aa0d8b90a9b33ae8a3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005T.binRYK

MD5	5256b325b7af2cc5626b56c9b7a4e73b
SHA1	7e2cd60d3646a65d30cc2959d0f6fe5e124987f6
SHA256	7f6cafb49053a4002e83c47f59a8f6c10423cbdef1380b5c2715467c3c1dbe00
SHA512	d02fddb4f6c406a82af8cf53afdb016273282cf6f9c27de2f633bb69263f1d2578412809766c872c10280d33d225e33c01ff581c1da158577c8f614d2af6cd97

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005R.binRYK

MD5	1aa9f01ea19e6c889199a5c36a2d5c67
SHA1	07257b7a1dd4a797202cccfd3a3451787f656e62
SHA256	0365715e2bd67531eae0d3659204ac3812048990531687b332c88826644eda40
SHA512	89633a5dd485cebfcfbe1cc8664eae3050fb9a1db594bfc38d20968ef905cff61593801f42c23dd30beb31f5bbea1d6428e482f91735340740bc10f64a2af280

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005O.binRYK

MD5	0b3bb037bcb6a0c04523f5d068e78d2d
SHA1	5579f7da57918b3c378c0912f5c4c81111c89b74
SHA256	b193baf72b8ae5505c677a10d8553d648562ddc48cbd635b0861b548059e5ec8
SHA512	dabb2a2e5908fb92e8cb6b57ecd5cb1a11f22f93d46cbdac51e8cc7f44cfad7ca066833534aad23b6d69a22f4dfc47b86525d71cbbab435e534b0b157f344d57

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005M.binRYK

MD5	22c84079958f39b00dce770906d4c7ae
SHA1	3b1e5fe952530f3ef97822d6fecf59341a0d4031
SHA256	965437eb1ac48992c50046c3cbca2526b257f5b205df989acb2dd9d61b6584f7
SHA512	9a3179522f4999a545007741dd7fb9e5ff2408e8de8e2120c46b72fc8963875fd92d4a5f5c9e10c6eb903eb3c63401aeff77df431936113d93427149a5450d98

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005L.binRYK

MD5	b69b966c92c10f54e5407bb938c7c7b3
SHA1	e921602fcf9ad2527ae923eca04c28b39d82582e
SHA256	acbecedb7b7caba44c3b1278a37643966de4006e869b61fa2a01cd1dfe54bc28
SHA512	5af1d6d3f217b153b86fae6ff132a21b0c2c64393fec60c5cacb1cccdb71dd02e4afc83e9c7acb989745e5e0a264f3771a7ab80f187b3a738a147321c63f5603

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005J.binRYK

MD5	8d2d43d58e8024b58a280acc9bf0da28
SHA1	5618ee83c4d4260592655d360db7f493968cfa69
SHA256	671667466b1e0860ce1ad3b824151a61978fb71b6374e17bb7cda83fc59e97d6
SHA512	6b6d3d32ec7eb1c5a6935e722778dac6c1d21c6a3fee10070600b04a84c89a3b55ee67d9a691a12391c36589683a363af022eb9a80adbb4a75c222b1b9d9f1a6

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005H.binRYK

MD5	b9daadc447cd3dd825ff4c25c2c43760
SHA1	ecd6a0586a655e3af736afae0439155eae5c11c8
SHA256	ac9c63514456061b2afc55f5ec5efade0c844fa729d4de3d05617f50a29c20b7
SHA512	264bcc0d806de15fc2a39e013cf1c2b33f6ca95ef039d59325289e69917afa7aa8b26e652bfa5d2ed275405cba6a5524ee3e7f289efedb2d448dfef681e79754

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005F.binRYK

MD5	a5caaa6bf20bf9d626d942fa44b58be5
SHA1	d54d25c93e00da632de492a1b3e5277d5ca20948
SHA256	be72b702287f68772a95b07df3c9edbf52cc6d1ef0f005b8ab80633940103a38
SHA512	925e4f51ab912e9ae7ae5f4e5dba3338bec9cfa71b1174d86df1faf94f47faacc0a009e611356b4ba625303bad587249490004a8049a187c5f8c659390371f20

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005E.binRYK

MD5	06846bf4e877767b31c3c613996d2677
SHA1	f778a00c43a8ee8dba92e5a8956764adde2e854b
SHA256	29e426437b10844abe087a08952934926c0f317fe02e7298d159051886fc1fde
SHA512	70b651c30647190f183ebbcf2d19ecb6d7f3b8a8e7756702c3569fab5ca2e965a035984d37cab0e857ecae384240b8ead02c9cc615d7914952b03475d1f8261d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005B.binRYK

MD5	6bf0f46dd77860d031a07e2aa12565a9
SHA1	23697bdb48e6e092eba4d30e2c3eb4f8249242cc
SHA256	15dbe5df83eb34b8643476dd4802d3dbce6767c6505c234b395d34dc8c517d6f
SHA512	646f95133df0fb80bfab7192d75b5594b55a388dd2964747b77134ae70cc7bb28364ac5c33b9aba2d7810dc7d3ec1e6d81b45c17f841bbef6ce284f897a50e36

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005A.binRYK

MD5	b73a3eab348218bae54cbcaafeb943c1
SHA1	3a7281c58e7bf0ad6ca5967264d06c333c7615c0
SHA256	2cad009a82ae8f7605bfc3eb269f723e72e9dcc404133a6b22c66ff9c5a83d81
SHA512	06b1ea256a4a0e9e102af05d25df2db4e29366bb51f021088cbc1e104000ab53e18f823f52bf8ce025c21bbbd87f59bc63f56aecb5f03b383da043ed186ae103

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.binRYK

MD5	bb34dd3de597303ed70d5696e463d93a
SHA1	d7ce2e35e5168afb2476b5407170d02c05807628
SHA256	eb8eab9889e72e762d6ea2d0b9d42744232915593aab743dbf2bf0937a00ae46
SHA512	e50bb8faef0cb71b186452d27a4a437e95a705e65c09f55b11bfcadd025fa12a955b671a49c0a351686149bd18076902cc4438c94dfd2f39ada2708cb7b69891

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.binRYK

MD5	d5474d16ff01e79b674d32f3ad22c1fe
SHA1	719089c9ba1dd51b102bb62bd94f66f0d236edd2
SHA256	1ccad8e8b15c978a57624977d45bc927f189b494b20d8ffd02ae5a45da70ad49
SHA512	34623ddf093f5c2886adabd422d9a47532f762d91a8f9e3d37795c38df094a3e332892261eaf3ce06bad12dca8968b57c5abdaa01d16f60a9813f48eab0aec01

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.binRYK

MD5	c4696fe90c655f0167f5272cb8fc6ecb
SHA1	ca32026adc619028ebf7f6ec7323c1282cac86c1
SHA256	754b74e6b76f6afe97b27041afda538990e662b1058a77b9a25e634371f0aebd
SHA512	040249e8dff6aa3255709b8904a5fd21ecf408ac35e3f72ca18fc6ee784f1bda1f2761aceaf3d1d4832b3e71a37cba64c9dc0dd66865e501b83dc6f68ffcc73e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.binRYK

MD5	59f1cdd04c117d930a7ce71938bc40ae
SHA1	a87bc603f19f7aca1d796f05acf49138bb9f7910
SHA256	f5dcf4f1bda6e422902f49410369f8b8e89b60449cfe00026d2681bc03e9f250
SHA512	0120165a31506fe7dd1ea0904a175e9b654769657ff48d0b497f9df70de1c85f09adf2afe2c44a5c9279363f76f065cca106152ba96efb0b8dd47a228399e5ae

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.binRYK

MD5	c650e43b6600245e5099b796fc567c98
SHA1	6bfd830a25c6f7492252ebf2f101ab7e25fea834
SHA256	b55bc7b9bb05c6aa2ba68d2f7715130a294506b395818710dfe06d284d90df68
SHA512	7febab83f9742931208375915f2edf1561683e19e4e50a3f992376f8d08b12756e84f40ba703fd81a20227fe0b66a17cb3df467f08bd73435f98665fcab8bb8d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.binRYK

MD5	2774bc9c986206b6a7710d21043ff469
SHA1	f76b7258e1be559dfcb65481ce437c494778d33b
SHA256	a799e8e410b0c16d3213d96d773a64be435f09556d05af973d24d8ead8ce1b61
SHA512	512019deb7bd3ed7cabad0be65e625558cc2cb658413cfb5fa434fb576bfa08868c79b8896b485b0f88fa6eb18b7fe3b7116c1feb3594b6c73a3351f61bb9480

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.binRYK

MD5	6f237e556cfe83b78eb692f9eb1bc231
SHA1	cc368e21018edc4e8b4f9a427355e2138ef996d9
SHA256	b86209c99f0d16e7f3c69c3a7913d30e58f83fd854265e2dd78ddf8a880462ed
SHA512	c5bf6de0459aa0d60debbc96a1f19afc4272889f6e927f0871ed73269f70842cc26f7e68029776b4c29026108340b40ab1839f9f747ba3dd8db6251dc764d4a4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.binRYK

MD5	365d54923bfada66c318f8cf4207a447
SHA1	6e5c557e3906dd3d48734bbbe2690f83d52c15a6
SHA256	53561c2519e2da2b1a9eda230fc00618955760f1ea3cfe51e8c181668165ab00
SHA512	01fdce2439a58df1381db50400d24007f53337f8253d37f41745c98712dc6a261a977ea32a2f90e43f882bf27c3a8e8947c341e861bb10dce28423223f82538c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.binRYK

MD5	52cb4ee1469210ff852ad43fd3ab6aae
SHA1	aff861833143e69741aa626efd6540978454f2b1
SHA256	7962d91d95193155b9d2b741059304e693dc45e4f8eaa141eca0b35c8b16775f
SHA512	af8123a7297bfdce4b6d75a82456646c6fb41237d19ae7fdb4e9e949094812f754183f6bf59c2ced394257825457fb8ebf891a62e8c7ae0fdd468e6c125600e1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.binRYK

MD5	899d40fe9c23f3b695d30f4f26fc0747
SHA1	c73cd422166f0b6c35d01ef79aad4081dba5114d
SHA256	eaf0c51cc90382236c0fb9daeebbb43d7733afa90b8cb34473b5c2fefeeaf15c
SHA512	6813135291cab7eacec79842e7e5ebd5c811eaace4ead806e772be8d1df3d8df785a17f7934f00c45bce485aa08676894c989aeb022bc072e0f4e7e904d7a72c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.binRYK

MD5	d54d6812e68074f1254c71b9769edaea
SHA1	d5097f07ce897f9cc41c9ef17f368e5712c5f3d0
SHA256	db8c85e4fca5b952542dc4e0bac472bcaed96829962958c843173752ff3134b5
SHA512	7f1917604683839f0555c7523b5b64ef36b879247233250a837d4b4a8ee3faa9adca5153146516ee22ae7d6c753fb52a8a039721221cb3836ac3766a3cbed3d3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.binRYK

MD5	4f58d8de122e95d159b8259d5aba0728
SHA1	b23054fb1c80f0650e3db8d6d23e6ce42915e20b
SHA256	0ae617c4079633c9d27eae2697315942c3c51ce04204b9b6d89f1a1ec66389aa
SHA512	dad9a17f1d2e22dbdd98813a7287f34ba812e3e8d63fe38604e3b04b9b9a853d24922cfd639997c062de615c822b07cd254db5db289f807cbe700dc940f9ab8b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000L.binRYK

MD5	6d3c25ed26ca108cabcd7ec27d04da3a
SHA1	0d9839404c10f38bbd8fb886ab85ac0d8d1a8fce
SHA256	0fe7117f55b42dc304ac01a17680565896942999113764bd6231e339ffaefa42
SHA512	8ecf845584f1444d355f3f40aa7ef47a7df35acd01254df16223b8bbd3e5df7625b0d1cbe63a3d4b0c1c8a1ae41bdcce3a3eb46338adf7140730e232a8d75def

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.binRYK

MD5	3e862c1d112a06d7546103dae26e2559
SHA1	59322ba3293d167acb71407bc1d6a01139611619
SHA256	1257bf28dcd9914f3ca74e0c65033bafe560956632b90989104b13cd5deddee7
SHA512	e0bc524d5d9dc3ffe03ee8ede30522f7c0884f1e0d6c13c98e1de4ecead48e907c784f107ddd9dbf31a0ab8605ec3801b3ccb2f3c3e775f32d33864cd0e5b865

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.binRYK

MD5	6e34e42e72ef0ffd8d9cba8bc4db0ecc
SHA1	c704e390cad68b16e07ec1bdd0e011f9a409de5c
SHA256	d0ab76ebb11f77ad3a87313d04aa0c2fe0c3d85c284d000bb9a3452e7befb5d9
SHA512	53d74ce405556e7e69963ac09ef9d4a8f58c126bef8dd3896bc89801e8dc54994ac73a41a1f8f27a472972c99400be8eecc0a128db4bad11c8c04281174567d4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.binRYK

MD5	180d3ef92554ee38aca17eb58da7947b
SHA1	0d6341e8f73c2361110e1dac4ff53693f4678f65
SHA256	153ab0118f28737bff0d640b8fa5f1d8bee0966a0ccfb564bdf4de32e15ea295
SHA512	1d869dc3f01175f8deb21644d659e6321c3148d8974d8cc5873f2505718f5e508a05d88a861d7471a2be3b9259e7c438ba3e52b8efc4f356ed81b6babe0222fe

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.binRYK

MD5	5e03ebe9d1a7e6a9291227675d3d3336
SHA1	e70ffa542dd23867ebf0a6b334e2a69f311afd1d
SHA256	a407e522713ac77a3cc1cb66f676dd8d6f92814beb7aed540437c25f1d5f4c02
SHA512	58517b3a1ea9673ed6ff87fb0b74d85e34ab150da463e6772a9f899a4f3b510841aa49597832d5a2805bf4f6bc797e8d53dc930f42f0a2c4b73006208cece06e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.binRYK

MD5	821afd05fad32c2ee2e4ba8c4c70fe9e
SHA1	44f817a5f239e30c0d3feac6a69189f55e46ea18
SHA256	2d145cf8c126cf1373e325cc8c7c43d4a7d056e7a5d537b6a654e1fc7270b6b1
SHA512	ce1dd99cb06de1a6ce28cf2898e8f0e881cfaf9a1a7e84f3a5818421134b8a5074880d06fd36b8fabd0251d9f72b220037389a0ad113e675ecc2d0ea8ddbb0f7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.binRYK

MD5	c62893010f3ddcd26afaa92e8dc4841a
SHA1	f198740f9506f7a2abe89452a26c3df4cdd7342d
SHA256	56e2a0e332c7bee8bf2d272790ab3f9534c00277bac512e00f53d13c449e9785
SHA512	110486eafee10f70df93ff334f5ec3f13fe6d67cb28a761488a52c2f395143a4656b15f96bb8426dcbd662c476ce729a92980af7ed471e15ede98402b65dc6a5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000001.binRYK

MD5	e6178107e06f4871a2a7b774b6ed40dc
SHA1	e84fcc0bf80e4bed7b69620d2b0f5799d0fc11a8
SHA256	2608051e7958f6450215541a3f5afcbd3ab534e63f4d09b582f2ce63a4921d8b
SHA512	669e1c899cf06dd480d72eacd2fc830a55f445c1a8739cd091ecd868440161e803d52f36d0884556197c766f0f84c84c96a7f125d1881faa10e89d70b7aae0dd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000000.binRYK

MD5	172b14cc416e23e9e03c731b6a83173c
SHA1	cfd05c2dc7e4c0ff87faab32fd645fbafcefde0e
SHA256	aac61041338f06732c12d15c7a9236ab922893ba9cfea308a2f59ab0eebda40f
SHA512	64d7c990b4e6f5f6646c53e0db2cd7d7edf2fde97a36ba67f42f7bd66e073f5d95b1bab3a8d7ad77807db1954f5ac9500cd77cf1d4c7ae542f122ad821af0765

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.binRYK

MD5	14c4cb7d76f5da85f462be55442537af
SHA1	ed24cb5c74fa443f3a735711aa6cb99caf3ac182
SHA256	a6f9292c817ceabb1d4ef33692b0cd4c8f0344cc52ecb43d05b51986920286e5
SHA512	2e55bac396d26cb05283406946c4e32205d8f795c5bbb05f8802745e744bfef3179d7a13c2ebe572f574648e0bb35807cd597be847e65e2296cfb43751151fae

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.binRYK

MD5	22be077a4ad4b639e5ad470caecdd24c
SHA1	5755ca1448294062bb0f3a6022e01614dc7a8252
SHA256	6d045a0e5f508bffd5ad54de755446785f939b0de29864df8316d063384c8fcc
SHA512	83a9a4d800e947afaaddbebd9a1dd3311e92321d3282202c01e560f2a74c60e1d97e160ce26083db576ed6e8c336642e310c6b791b4542de610c097e1a19316d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.binRYK

MD5	006e35564edc65d169306e7403e1d793
SHA1	ed796ef4be12d2a207d91c2ce4502a7b20fbc58a
SHA256	069abd15da5ba0b8b3127357b4149f9f6fdedf4ca15476dcf3c11c8c74183fc8
SHA512	ec2f2fc3561b146b5d39cbafe6eb551d1e48cd97cef1cc48f2ae480897cb9781ad7d79a92bb5a09e5d5a2fedb519cb8eb057f9c933d7d5a390e100d5174fe2c8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.binRYK

MD5	4c69db7e0e2c2891cf92348f77e87f23
SHA1	ec0f53c45668895497272e9f2140c34acf18898c
SHA256	626b335edf0f61eefe1b9d0e65b08a0ecb3d20e006b2d3c742c182464b58dbe6
SHA512	975928bd10accf0dd6c6856b8f464fef9a0d07d20dfe8ec099310e64f6ce36bf3ba11cff01bcbdd15e0dbd7e3d6674515c23cdb7e43c23b4e362aec72c79cfd0

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.binRYK

MD5	6cd7feda68f72f50e1e1014d44607278
SHA1	1d2d4399a5849339517421e06bd64469637e122f
SHA256	e1b82b0b0473007357e92e89ee51d4a004dabe10ac82af09e886707bb6224b5b
SHA512	b80180ea56f00ed967eee5313f7f8891c0241bb009603df042e87442efcece05558397765de9625b00d24611313dc085616e00bb9c589cd01538c5ca466c0210

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.binRYK

MD5	b76b775d9364f7a6d58cc5243ac6a248
SHA1	eb9bbb21a5196362220b30ff81494269e3fae5fc
SHA256	f378566490c08956d72c089b9acdb8c18b28fd95280c9fcb1738fb85ee2b5475
SHA512	c18f842ec09804b6d5bd2a154a9643b04a92248c84f293fcd376c320bb805188739adcb521a633f09a209a2da372cfbecd25f834759eed00c8b47334ed3981d5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.binRYK

MD5	634c589cc4fd116a2bd798b9d270a027
SHA1	ed9d3a5e0de92d616c027c1cebeb4737c9df6abb
SHA256	d877a96e3e62f0afde2c12c1bdc74d8f8e27082a309a5fe8749edf9b4158c91d
SHA512	8a08b8fe3b5ef70bfaa15829d10a45c18601f680d2db0bbb7561c5c9d792f2ffe421403e747931d0f54a5b991ba7cc22fa8262ba51eae273fd7fc0fb32871442

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.binRYK

MD5	e2a1afd7aa0dd548277c48252ebf0d3d
SHA1	80b1ce6a4889a9bf6302b2c56a59250c2e681ff1
SHA256	ae47ce802b51e03fb78f6fb57f147ef20812acc7fdb5c9eb36871d5d5cbdbbf6
SHA512	29711ea61bf3f848623bb6b6df7327b802b0fc4d9fb7e7defc850d63377c87d1ed263e7d47feed10864405338268fa912e8ca65965d2af38f4a7c59597a987b3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.binRYK

MD5	ecaa1333e86432c6c603289c07ee1297
SHA1	a870698328f1ef20acf7dea4142b12e2fe81dece
SHA256	6542e749fe072e5403d3c2b8f6647fe400b01fb9ab478f2638668c47f248b54c
SHA512	0747a00c2ba1159814e5e3c94ba0da2b226a5a43edf0f8e51d34b2f78a99259b2aba9c6dadcd4482895c880068d1da4fc1c8c00a840cc93b038542a253aa09c5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.binRYK

MD5	7953319be5abf337b6f4b59814176a01
SHA1	db53b957c88c841f361ec29a91867a8f1e8788d7
SHA256	e1db27c6ea52a78e54b539f1c8fc75f6d0b1910b9a71ae807d21497ea819a479
SHA512	d78e95a0e542470a04c915aa12744b89d396d21e2be1ef4a28cbf872e1006b122ce89aaa72f1772b1a85c9024df4599752a7600d339432f956bb464ec7dbf0da

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.binRYK

MD5	cb09445e8825427e114d36bdfa8b0bfa
SHA1	ece905fae7ee3dbe9be6336c2dbaf6a0a453d520
SHA256	553f382c785601167ba77d6ff247be9dc1721b205f4fead8d9f6dfefd70689db
SHA512	57064f404d01378427301a6f68eaf051e359fbcfc1d83f5b5e5b91b58522391b6c4bf94a2b17d2e0bfab5425ce0e46b1de83d16be84eafc92842549f4832f766

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.binRYK

MD5	8dbdcb8655a33bb81838b73cd56502f5
SHA1	db2730e52a2c51efb4984cbfcf0c0587b849dbe8
SHA256	17af2ab2ff4cc99a4d44951a0c9758bb2f7c911ca0d84acd1d98697789bd1f4b
SHA512	bf06fc52b0eba1befb4b5b7f5299b3d9b25ef0d7961fbc079e23328cc9ab843e25fd3088518eafc0deb0db67d26d960b115a33ab4dbccbadccd0c7e8a88c778a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000004.binRYK

MD5	c2be6a15c3db525d17f07f96162305f3
SHA1	cb365a00d817f1737ef672ab58faaaadea9c0a91
SHA256	eea6bb431a7dcb4966ea5eef9b11ad7af5dedd3679e5064faffde632c685b905
SHA512	540156da1b29886a0087a2737f77d12b522128cbb0d6b1db3f35c68465d3659f9d48db057de1cfbbf1885b7483c0cd72fe040f6b4d78b59d102fb3a5aad7eea1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008L.binRYK

MD5	4e68a0e71d2cd957de080bbc76c0f597
SHA1	108456405e904a43c5cb43fa47d2defea3eee941
SHA256	5cd6b7744deb4cd2cb8ce964c6277d8b87406dd5ea05de122b887f26912b9af2
SHA512	268395b76c15ba67fb422bc73f6f34b7b1efe79fcc50c44d5ed1dc6a57f85c94a2883a731accfc1f87a7dedd65e3cceff4a90ec3248bad9b4168c1dd8dc0b694

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000075.binRYK

MD5	5de4fd87e84ad1e1eee93ed44bf395f2
SHA1	01766a70af984d8d0ec4efc1881760a666a11e76
SHA256	f78c9dc7b4fca8480a6411db93e5c4d2603a0b492b8258919f68eeb6a5f01d92
SHA512	d30c5fa1ff8ed2d7bfe73fd49b55a51b81c23353c888b9011f9d7c7ed3e5f4cfae8fe212c79f6d7421dc607c5e55e21edcc65cbf16d7b55ba0fe4846cc7d1f27

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007A.binRYK

MD5	502bcbe695830a5cf3f8b765556735c9
SHA1	b5ffa32d0ae8295086b8d297baa734312ce6f0e5
SHA256	cd401cfc915953639da372f0c9b2a587ba6f88b1bde43af41f49f82121f91325
SHA512	5743cc25565095d89258a5b33397f765560ee153178a711bec68fe4ec39a8212c1ac8a42432e5d565a8e874fc6c44321e61ec19f6ca58a7070efadc479a4cd05

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B2.binRYK

MD5	4747a8efe37930fe8ee44e30fe17e2c1
SHA1	a7f8ea223e32ea25b3621f9b6dffa5bfe1385e4a
SHA256	0357442cffbd8be84204d4bcfe505a97faf8df8fc1dae0e41e47c59b2440cc42
SHA512	13bcdafaf4f056ffdfa491c681cdfb1de0b76c99085c4f21162bf0e47c64bfadd2a74903570f62df545024485dc7b5781acbc18d821bd4891fd839968b56fd87

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BJ.binRYK

MD5	75e27887f94e35293348e009cb09e991
SHA1	ae4680a1675f6208f8b3a62870941d6263eaeaac
SHA256	865bb6b782a0135eac57922948dc2299e1188ad5737825bf81f966ed2873333f
SHA512	8dd0a8bc5c43c63eaaf836b4d39eddb93c17dc0b4c1b72faffea8736c8033f75576a6fb742c5386ac94b6e5a7f48019ba18d3385be54c5792028f9e19810171e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BH.binRYK

MD5	13a7600623baa544042ea4f7caeb7aed
SHA1	a7e3d16d7fb15cc94abb9d46afcf14f18530cd08
SHA256	86a3924aff56a51d94abb754798246d9c7393c6ae80305fb8be3e452c324d4d0
SHA512	ff16be86ca46f7068afe950fd7be064be6281b4407bb2e5d4ca1ba220ee08a758c5052191d053db5cd80b532bdd096e2fe8394f686c222ec2c260fd9c3cb5fb9

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BD.binRYK

MD5	ac4d2c696fc462aa8c95d1ec14e854ee
SHA1	f4385ef6d5c7ffe2ceb431de49b47359e832c2c0
SHA256	5ffe2ba0148e2a27b82b292a8cc530755b3e2aa343ce8cf2d17c1d211efde5c1
SHA512	7c3ebfa29e1554792db1daaccab567f30c912512233b85da7d97f4fde8f84163c22256045079579afa589382772673eeb484e4017348d8be31afd1c8e6e5b734

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BI.binRYK

MD5	d5eacf8a147c41805ae38cd65144f041
SHA1	54b1d4206d444114386084ea33a336fca12cf6ae
SHA256	babf450b109287b283f393181c411680a5c6bb4415761c68c23250c64c9a2747
SHA512	96d1447cb840dac5d3ef4c1316c3983357168e2a6cae17f680c6c657ece6cacbf7e679646ac74950d9518f8360e4d807d58c7d37460585b3702c3a9d23e0c0fd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BF.binRYK

MD5	74d47339bfe80755174b20a5d7e802b9
SHA1	84b8d9400b5528cb183054e4fc644af81b054e17
SHA256	8cd31dcd89bf2f8c23574d3097e8346102744b91c2c1ef383e291b98baf80308
SHA512	f9591418620bd21dc77e0766dfa8258a894952fc99d93ca819dce319957be19c30fd27635650afaec56d94e655d6fb2892e0d5d0a2de3b35b7054def44bdc2fc

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BB.binRYK

MD5	59c97a6b34e160416555fa689155cf1f
SHA1	60aed3f70fcb28d607ac82761b43253a385d6e46
SHA256	bdfc4add2e8764e4a9a77af32e7f6c565d7b5d51986e42524ba98d225b7856ec
SHA512	9f997171a939a2941edfc40263e71fae0db4312d0a4be12e226158713ac6e1a847b785d23a5651fa5f349fb45f34102c426bd246319376a88f3a5465c6a803a8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B8.binRYK

MD5	17b960cb0e19971f96fcca30b3353641
SHA1	ca2bff81236d6b44e7bf57a22389246abb5b0928
SHA256	e4b9ee1b838ad54112867307c257c72e429756337972c488eefea139e5c09cb6
SHA512	6a8a129f6de0072e9555a30ca94f714d3ce4f9acc9c085e947d35ef88213eb3e5fa03ca85d037ede46bb077549a066ce0fa1045f99c91ebd3c0e94315f138af1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B5.binRYK

MD5	e52e3ec2bd0ea52255da93f134338d80
SHA1	21c6d255ded8c13771053ef3f0a344de8ae56f0b
SHA256	9d1174aa43bbc67b717420b78aa302b5bc6dece504d2793c2742576441f996a2
SHA512	663f56a9b70ba063737893bbdbf46a47a11a69b47cd377f95256aa6a85646cfa2d0dc30e5e5094e8c57ef5f8b8c8bc86615d3c03c626bfe05cff55761b7d4517

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B4.binRYK

MD5	eecf1f7bdb32a1eb126c73aed1fb6097
SHA1	cc7622c449d59fc42bca66a9188cfb0e754bb6a2
SHA256	263e31d1852dcb6438d7911320ba627e445c05b2611e14d9f17159561b723ad4
SHA512	2b3423567503034c3c785ce65d2a7420ecf457cc452992b86b1597bb44eefce3602fd6758bda59cd2a65607acbe4bf12f55d8adfc542909496433a15fb022a84

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000BA.binRYK

MD5	7bc316fc09ec40c33907bb9612762cc6
SHA1	1b829a1d077d2c726795ccd80dee2d39d777836a
SHA256	b284aadc8cc31837b68e290aa1043cdf8d5876d8c6ec0a4093e92f6c1a5a4237
SHA512	1f15f7229ff299bb055682e68d5727931a2cc19b6614e8cbcddd076d7f4ae940d04956a8809e0153923b8d41561ae5e3efcf64ac02bfc1c8049c95cff8f8959e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B7.binRYK

MD5	828cf76a014c66ec88bf79ce60d66695
SHA1	c9f63d797af2a0ca5f60d6a662c7ef54547868ca
SHA256	fb527607ffdc48e853d78eeeae90dcab85b9bc79a791d24ee074efa6e748fe3e
SHA512	0bcba5e433e429d41a8384aa95a8c8af9fd6e6352e89160eb81da10fa8b437bd362261ce57577ed291cf8567e4822897998c8fb6c9587244248a5acb009798bc

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B6.binRYK

MD5	a3670381b2711d347f32c0691ffbe523
SHA1	9e0c5ea959b67077161238278fa87dce69e3c757
SHA256	29d1960691900f2c2c9b8b315512bad6b6425d7e2b90a825aaea4ecc3b94146f
SHA512	5fb6a0dfb5dd030696c2d571505a263922e1d148baf3a1679eee6f248e9c88b80a7d758dc5072b43deb36ee8ad210031cf0c435010146f45dd2ce9b6f6ba0824

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B3.binRYK

MD5	aa217173585af863e7510dfa909fc628
SHA1	c16b68738b46630e433e9e17574967e08986b71d
SHA256	479dbc1d2da9f92ab1ffad2fc20da1f9a9e6e2b148bc68b4188130a7d7d7bfc0
SHA512	8f08a3182438db422fcdf878375f472f06c3769ee233d003bf7434107ebd8bc4f363be8cc3267c78042b31d01c1b5e7612291cfa3c04f76ce90f9d9744308a6b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B1.binRYK

MD5	2258e050edfd5b4f2802b7befac77317
SHA1	f637c613bc909b37e2d1c53a882272f0b6450637
SHA256	941b79d38589959addc782777a6044a974ce8c6fde92c119c6fd6b911de083ce
SHA512	e8b4dc98be0aaa8c47a93c31a2dfbabd822c3b40c257fa9d210f5948fbd0d379056777db4dd63af36c84c875a7b76374a42727246a2c33361a25d9fbf9466c0b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AV.binRYK

MD5	ff4d79d774bf2523891c918dccc7787d
SHA1	eef505b79a02fc69832c22c5dd48da4b55501bea
SHA256	94f6db94be94f3e8285bb532f9599f02b632a0e4f65988e11d5750217c95ba51
SHA512	686b7bd65385972ac0735f5767a8e98f712f0b73904a55c7514a28842847aa2e33167ced5380003dc1839367f8952a1392784a387b77c82392d6729b7f304e69

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AS.binRYK

MD5	6b7860552e461d7e7c22b74f9621704e
SHA1	0d2b0bebd2cd7ab195816518fd820cb8b2712b96
SHA256	fdc1965c0c6adadd8a502a0c4962621204d213b67a212a88967485f388f26d12
SHA512	407594794e31a2486078a3c31da7e2650c5616c1c741d05b80a04a9c6654cd2bfdfeb30736679a8f2f72fe80cafbf537cc84677b4e7b0185a4466f48fc102aec

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AP.binRYK

MD5	bd00f74f98be8e0837ff0857d944d150
SHA1	f59fe59ac6fc6455b049ac297300df7c6d503b18
SHA256	0510648436f16f02b9704722046a6dc6bddc08c7d76339b77726a8999ea3790b
SHA512	d65707dddbe9a3e8fda7f2f5ba0d27245af88e3e0d27c4292de5fd0516c96868edd8c7edfdefbe3f6dd4841afa0ec151f21208c589419b4994c7841542e86a9e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AO.binRYK

MD5	728bbaf1c05e09e987526e82d81bf3a7
SHA1	b9843e5c73460b219e06065d9e75c8f5f8bfc2b9
SHA256	7c6b5379d452f88df8ee68c60720962ae0cc5b296b6ff39ad235baae81c00651
SHA512	3a10a87dd6a0c1eed9590358d4316067a7e930d452f47c35b6618f70f02561659584acecb24f3ba41aaf36a6b5c5ca0cffad940e93ab5e2b70424e64ff43abd5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AK.binRYK

MD5	049c4df46c6eb169e19bea166bb03327
SHA1	7351fa24708120138d144bc55fb87c8b7a2c7262
SHA256	033f2824a0207abd47358f049e0f8cf733009f932cac864645b2279a73d54be5
SHA512	6c9415e14c5c25c4ebca37afd97b73e7f2b4e80e494050bf963d572c5303810e7eb7f4f14e0b9126dc5466a5914bc8c516aa8ff45042a0fc191f49b165834fc1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AJ.binRYK

MD5	daf8322d6fa660cd846e5b018577de9f
SHA1	cbc01dc291a14b411568f70cda75b8c38d697006
SHA256	688423749bbd59f78e346491c71df2ca1f3ae3ed0a6e1a7bea2bfe04d7f9baba
SHA512	659d04fe86a7021d2fa4ee1fc2d52d8d7d8c4ec9090278a9d6eb9633e55f272474fd8ad6aa610f2797ba3e925d28459ae5bf0e54db32a6b58a8eacb4a08a6dcf

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AH.binRYK

MD5	0d2de16774fa29fc81b33a9d9aadf36a
SHA1	951c7544d1ab99d6af672cc38079a5984ce56440
SHA256	21010cd3ae6319705e25e0a67e30fca0ee574e8117c362ca069f9a4f8561e635
SHA512	6ed820638725e7070a2671f525b72a3a928300913d8c12c5ca0adb193461b661cf2d264311c1625133c1a40fc336298abd4db44560838b2d0e96ef6f26fdb3cd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AF.binRYK

MD5	b00316e249292557dffedacd88e30780
SHA1	cfba98156b008383710781d78491b4c908dbae35
SHA256	c92ccd1a0ee9214b32f645a99373c8ebdc6782f54c29952a8cb6dc9f7603967c
SHA512	a1a018191fd3ea4688d12aa5786b0d1379484f74d436643aaff9789e7ae6bfdd5596169f98d58e05b5c93af160d3a1c3e40e8d3a4b0d3f97835898709d9516e0

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AD.binRYK

MD5	651476f1a1ec4a4ace21c20666018511
SHA1	ec392ea76018ab947a723cd26c4720a573470fb3
SHA256	e863bb855619a26be0491b3a467ac9ba17e4febbae58d26f63e693053d34e2d9
SHA512	2b8e51b61d6af61bff8643b1cdec99f679ed56338153703853012737c3dc4a8db56d0972fa7528eee0d6d665e76d947835ca2a9d095fbff61bd7f37dd262fc1c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AA.binRYK

MD5	793a1a4ffb5326fa008916a45861c76f
SHA1	5dfe5b0a63d56b1ce121bc72422737ae2f25cb72
SHA256	9710cfee273aa2936f6c281a78b675ca7f62ddcb8fcb86328256f39b870fa7ee
SHA512	78e57eacd8863ec7531d5158a001d445a03256ecd61d51e757e2766d2d5c45a51bf4d5b7f0250aac7f20feb5e78281edb3f8aab96657dc4f29885140bfa49855

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A9.binRYK

MD5	e639f5543bd2ce50af9ae1f6c05578e9
SHA1	7440a57b02ed59659e0258962333f60892afc98c
SHA256	9f9072f2e5693fae9a02563f03013b45630355d33ffb8a031aa9192d4f52ab04
SHA512	0c6ca2bd4bb221addc2d76f4bac0088263d8bfa396e35cb7a9a07358d0e3fed8bf7f057bd5ec21a822dfd5a41af8ca5e4ef9152c93076be08e98eaa706301314

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A7.binRYK

MD5	c27530eb6ef4126e6107c81405f363e2
SHA1	a7a9e95b804c26f77b8629c69a00a248b0578950
SHA256	57208beeca3b2ff5537d2ca2eae73cb9f272ef50e124ef1f129981bf24cb82d5
SHA512	67c6ef7b7380d85a53ac45bf1794277d7ae161b9eb28395b45342421608064f7392e446971f6dfe97376459d1aec1df216ebaddd8de7cb01039720f92496e596

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A5.binRYK

MD5	e546bce719c15a9f407a28b3598db669
SHA1	aba78ec64ff634918417d4c4a2a642adb95dde7d
SHA256	81e36f51528f8c9f7d158ec1134e41ea976197ba6b9f0bc1c8e31066583aa4ef
SHA512	8531ca20af5af71d6338e82bcf0399aaab53840bfa76a1ae1f938c481594d724b5c0190557ccdf431aebd71dda0f52d7bacc72ceba5cbf1ca57c84054214e3ed

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A3.binRYK

MD5	bea6a3c46a15d2b8fde67f5d5c339bd0
SHA1	1426eb35977812a1a68ee6b65170718d7c4cc3b1
SHA256	d9174e27ab56a58568c55623aac82b5440add89a6a96db1120f1fb7be0284457
SHA512	72727619373797b1be33101a314e2d4074cc8fe5b26e1b27ec0f639ced7e9e824694758791b8a697450a9dadd002f59ed8175a6734f587b372a61a3c1211a3a4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A1.binRYK

MD5	ae81bb25105c110d962a5a1f727b4989
SHA1	3cb163764ab36385a60df2f26c65cbf76d1fa51f
SHA256	c29b3c755b91e13318dfb25acc8e9a89f6ef09abf6aa69aa7b161474064ff997
SHA512	3a884233a47f9f2926985cce02dce36faaaf7f8a3e4030e12faca5b5d558d9fc5f9d244cf0bf85c502318a16ef5a5c13cbd55f0bff34baf51f0342afa3254c63

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009V.binRYK

MD5	5d0db2c9231425de21cff26536d75ffa
SHA1	bed033730385699559dc36bb3fe4408b015c1f42
SHA256	66b3390590c2b8fcb511b68381faefe449d55341331cf8aaac5194cdbd682c46
SHA512	c3298bf03b4833450713245c9db55295bac7aea2a2853cb905dedc34aa1fada56cdc8da71a4715c12462dd405fb41833a6072c5f2e9abd0d5fa2508e49213eee

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009R.binRYK

MD5	be4249fe291d619799c4871c66695c70
SHA1	3add7e6c20456edb830168e02731ee2a67cb3a17
SHA256	2d42e9a539a6f4bb247f83d0585358e72fe6338c932107e6fdd2e176e927da5a
SHA512	59b94bf5433a25fffd415aab3ac267bb4caab957bf06e8c0a3f882af1eff93c3ee036a9d54f1bcff56cba3a850fdd521fc1e5d8fdfe7f18b467b257670ce0c0d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009L.binRYK

MD5	30644c40c190b63c63b8512453f92543
SHA1	6cfae05e4cfaedea0dcec16ab16f63e4f90ec3ca
SHA256	d4a6b6f0437269aa2a5294da1d258459016ea29ab7c9825f989dc702a2f83bfb
SHA512	782bf335461373f08821aa927f25d64f7a2b7e6ce2c905dc2388f4ca6e4d7ee47fd6a3f62eb11073c1c40b936eebf27e39783d47f301bbe4321fdabc17d28b04

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009K.binRYK

MD5	907f86bde57b3e9b138372d735f2d2e8
SHA1	25a3100f4f67a6fcc70bbf164dc2280579091c81
SHA256	89bf1cd77b941f34418dd0fc0a3a3dbef0c7707e49d38f9730c90c15e76e1678
SHA512	df5c75c4f7da12d30961a2ac0380d3813a58bc4f3370b196b6902f7ae115b6163b4f2d7ba1be46e201e81654b8281701cb1caed7dceb87bf947d034b8170f0b0

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009H.binRYK

MD5	934836506135bae246c7c4bc542067e9
SHA1	561b15f1bcf260d007b033a251fdffbe97ab3290
SHA256	fdc3c692bfd6add0440e0ac2dd93b7b913b9cf5b3d9201bfb7768b0012723e24
SHA512	29771a6367b39c256e17d02cd81286d9978bb0871d99a5e325a6db74c2d0ae94da1244e71ab811f3667c16ae201f4fe5725174efbffe13fccbc1f11633416f79

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009E.binRYK

MD5	2ba4e7379fb803c952479fbfa0cfc9d8
SHA1	a6a14da80c65177f446439cc485345d581c8cb91
SHA256	ff2ce032be01c3d7cea7cd6a05b00c225677d3c441c3708e1ca6cdde274b19c2
SHA512	8838344479e7943b72209424ec5efd7dabcb70ea1d991a56b70d83503278fec3b22aa66b617e8104d43873de859f95af5714a45eb418cf7cb808f24d8dfd86c4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009C.binRYK

MD5	655ee8edbe951cb72a2eddb8ac275bac
SHA1	845c08971c297c8c9339c8b3a17087e0a5eed8fb
SHA256	10d9aea44ed50189f54989ca2ef48a4ec0366efb5873357017f40b0c52bc30ef
SHA512	77a3a32cb244f2bccdd5fec45eb9454ac8f75573731e048af4f498b2799dc0efc2911b3f1f135cbb62cb6a1eb2534324fc4dccaa3b52aac0300a9229d4025434

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009A.binRYK

MD5	f4215ba9c388cb9f7610e65746753c49
SHA1	b3a6048c90ee12aabaeaf98ae7e987063a27679d
SHA256	bd558d0b705edcc4a4464beb6968f2bb0270528e85bd9c898e1dbd91de372ccc
SHA512	13c154a69fc58f143f2ef255662fa4ec27005989b609fbc8f3e939839fac809799ee52d2894f645a4ddd987bdb3df9cb2b8a6fc44797ebef7b446c7341183786

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000098.binRYK

MD5	447f80f26ffe4d95b75107f9e277d9ec
SHA1	197e325ea7d81819fe1403df746192564d9c43ca
SHA256	6cfef452e8ba0fd30416dbe0fdac39df3593647ecafae8dd9a03d80525edddac
SHA512	9ec94b043fe732053e20ba10446e4b35a249ee196fda7cd2bc955d1ee2630ad56ed9399bc40c2f8ad9c921bb879b2124c751cc2ba7dc67b21714a007c903a1e6

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000096.binRYK

MD5	0ff35c375e568ca8a23502c62e12b615
SHA1	a41fcacecf08debd99a5cf454e3dad9e577d3e9b
SHA256	b72b95d76a93f58bf152ca2f9e5deddb9e7e8f7f374fe468c7f3275d2b5d73d4
SHA512	e00b7eea944e0960604347f5131e9935deb8e9bfb7fb2f48c3bc853e46648a4e4165f5b4cdde343da32fa03c7b76cba1c3a6c203975ca8b5077feece679c35c3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000094.binRYK

MD5	8eb695ab110973d71fc09ac94bcf073d
SHA1	8f314826420b2cdebfb45db526b99752263903e5
SHA256	1c14bab25abab698dce6caebb4f587648313f0238251cb1d81a571dfd6a253b7
SHA512	61237fe324e76514c55f5b3cc480cae9cd5031e40dcead10bf5439032edcee9f6452b11a7472ca9a7804b6668eee947bb3b0da387ebc90861105b43d8aa207eb

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000092.binRYK

MD5	d6cdfb7eb594a73d5936707d0d368a15
SHA1	9c14e814b350e4a8929b78af2d684d2f1c3307c6
SHA256	48b66981892379b1e47c9f868a48b51f010ce200f934a227cab11b9b430d6c29
SHA512	13a5a67391b3850fd42294b2cf8bc59bf82f901b4ef1bb0435d4f23bab1935aabeb3e941e6402af55e639a2ecafb5cfdd5d1fcf27f04eca83aaccc3b58d88886

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000090.binRYK

MD5	693cfaed45bc2d9869260bdbef1cfe5c
SHA1	c0dfc103e4d08015f1f504499c1f7578a835ec34
SHA256	2ca66d453df953090fba4b522dee08f5e2da91a2058aaae6db38e48d149f87fc
SHA512	4ad142fae2ce692f6a8766603e51c173817bb1d98a83152d4b1d09ae77dd4b6ddaaa460eeed2442a764f488f6c12c0cf417b797d1e5c6c3c1321cf8e90dafa92

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008U.binRYK

MD5	81c0411065482b57dae15cd86014e469
SHA1	7d3517d02e6e89c78de9d74f78a7919bcf3753c0
SHA256	9c8ff144ed163ed8446490e10aebdf737da35a006997ba75cda30b018250b32d
SHA512	f138869bfc2a861b11b421c425efab55e5a67df4920c6a92ff2f0d0006257be967aa8d7a0cbb42be24fa4a2e7eda1573a63bf95b18f46607d2137ba6a06f2f83

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008O.binRYK

MD5	e15d88bea3f5e8197da20c64eae3e149
SHA1	4abeb2b10bf9a6dc0bb309dec8e462da8397ed4c
SHA256	5bdc48840f4cd9dfc24205f25d7c704fc380e8c392298254e414ba4cdaa3e7ff
SHA512	2cfb2d594e9b975d43893cc06be0bf60301359c4260df2543764f15bc24c5744605f335c713a4963d10d6cdadf92c6d6790f0a3346094b766e234bb3e714adcd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008M.binRYK

MD5	9561612fa6e6101e36467cd82bc99036
SHA1	aab1451003b0509e1c94c50f6494c2805fdaa2e7
SHA256	5d9ad2ceba77ffe75c9fae10a17d69fc32409cc3d205d5c721358e0fd876d473
SHA512	bac2def684789a3021bc96fbed03a404a7a832cf5e7a80713187d7718b911e19e9cbe73e56a5597538f007e1a1f342116b5ca42e63ba5b91b447be4b43071b55

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000B0.binRYK

MD5	4e15c95ed1320bbe46bca8b2bb8ebcbd
SHA1	e1a42cd90bf1e4b91f5fb8d2ce891f17157c12df
SHA256	08f240e1bb37c34368b5eab74cd58adfc931cdc593b551a4985761271c16748b
SHA512	925ff595566fcb756f2efc8e9fc72595c2696c8999f6661bc9ab622c94ccb07c7b71a2f0dd70c0bcea570391e53887f1ded8e12cb9f5210ccfe8475471cfc9f7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AU.binRYK

MD5	a0df020024bd837d9c20e3064aee7c65
SHA1	914feb707372cd6235342756826ca22fcb6ab9fd
SHA256	7ccc86a004b215e9362936fab64f127a5617a9c017657001158711ca2c634dbf
SHA512	2a703e7e2a78e9c14f5f8f93dc4113cdd8d035da811177fa1b9309626e55e37125dab9892c66b95e5e8159c2a14e02edef86cb8249825d98b97f11931c7fa6bd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AQ.binRYK

MD5	66e2114b7c3edb538ec689b244cf9b3f
SHA1	571372c6b1d2c477331cf913952608b8ead09f57
SHA256	b4770279191cc41219c43af39f5a416d4394ff660b64a64a9a5ad52b0e55a3d3
SHA512	a48e0b9cce7cc4b7c106ba2753593631891a9f73f1a8dcc09e3a6fdf1ebea301d602d988f941efae6e99645de3ffe0008f0451c27f5810b3793c1f5342f52ea2

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AN.binRYK

MD5	cee663531e637810db26717cf08ec04a
SHA1	a5cf9c4fe306c7611f672033da2e6928cc86add4
SHA256	59499e6624702ef12eb775473e417fa86edcbe8c4888f8e2951528b68907d677
SHA512	a33ac692b3bacd3c43383694d0a32cb6488f5e9d8b7cbf359d72990fd9ea1ef49dbd9492052a5d44a921de08a357c10602e32f120caa7e37b95162e088d4a9aa

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AM.binRYK

MD5	2e484d0ffbacfab1937c510c62e134fa
SHA1	5ec15b5334c30a9e7e68221fb8533dc9dd5a5420
SHA256	f56749142d54a40c63435a99572b76212a1ef0af3b1a2a03788e6b23ce761565
SHA512	37ae71e57f51f45703b6d33d7abda7e1b2062675cbcf875320c05296b74dc21b9540253d2323cffea732503069be63efe621d9d215e37e150be19ab74ad33028

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AL.binRYK

MD5	5ad1cb02cc7178c73127201735c7b62c
SHA1	58ea04ae1643c23690fae3604b8dc9edeed77ce4
SHA256	53b6cc38e0b21ed55c2bd4ef51f6c0166af9c55208d6a8b410df1e0da451d588
SHA512	74ec44504032c88443e3e1cbca25ec0a78b97db069eb34342e0d6ca0bbc3d0c3ac4338d5c97d8d2a0229e63cd8296f51e934d16f5657605456bd6ae7a9fb13e8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AI.binRYK

MD5	3276d3d2586398473483b56beceb4fe8
SHA1	643176a22f0ef73bebe64c2be6822fd9698d4895
SHA256	cac71e7c25379c8753e4bb89f04653c5a6df93ca71ffddde062cf65047fd53cc
SHA512	7a507fe39ae74a1148c93347652be73719a381cced291a2c801ab22cc23628bc64f8b7b238ee3ebc98e4c9cb05027be1b6bdf8c8925b7e5f40f5003b6d4c2959

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AG.binRYK

MD5	e1e741cf807e23f65bb186d2deb2fb0f
SHA1	0cfb29f401f6e3fc62480ba53e5d65c684f94a39
SHA256	f1033aa232be7f0315f9797d94a26114d8feb25d2fe5c1c8c52cde5f94a93ba2
SHA512	3d0eeed7fbeba97a7a9bfde1da5b5462ae94bb5af8bf9a6525f3269b1e0e57802c381e9818618cac765765d59bb5e207cb071b10988bbf3ca7ffffadbc23fab3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AE.binRYK

MD5	9c96a767cbbb14c4e423a5c91c3d3e83
SHA1	6d9a73b33d86db25b83ea52275280f16bd47a64b
SHA256	f5e6e7a5be014ae3c1c02ffe3d04befafd8b9274698b7e345aa8724caf64534c
SHA512	1e35904374ca31066eaceb4b5f9e0c2104fa1ccb541f84c14550e0bea9ac8df73f4d2f7a308b90538f7625d8508032a27b11a8e9d5a5ee3de8f5ed6902a68c8a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000AC.binRYK

MD5	94f5076443f9cb9114d8e23375b869ff
SHA1	e1d46dcda402c5384535ef3e50e438bbe5d576d7
SHA256	92ce7776fe1654a52310d73c7e625e18df77ef7634442879d8f06ee501286d8b
SHA512	4bb2e0a6c84207d9191924d7e9c7445872e51700af5cc90dc0b6a74f0ec44a2bda9eb5d73dab5c8c5513f132e2db209f5bebb772f755a2f9b519e367ea431edd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A8.binRYK

MD5	14dde5a4c6cd74129d7c2fdddfbdf7ad
SHA1	f8c3654709cc25365fdf96ec9f9bad8dd7264ce4
SHA256	305e136405f01fc9ab98ab424d70285ccfcf7eadce4c73fa9933bcd3e80fb1be
SHA512	c198b488c243d85e9c7b29468890717e3b1c5c6952c84c7c0348194d5d2417a46119b8913cf08af5deed9a1ed858836cce560eec3e683246c44054a70125261b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A6.binRYK

MD5	1b6c84e0bbada828fc7d8223f14893e8
SHA1	c493401ca391abf53915b1be42bd5eb78e66c77d
SHA256	217de2048aab3c12c0f858a7be81dbe67d33d080aaae55b22bfcbe24fa2d555d
SHA512	c12c27621a7f91a6978d498a76c7e9f63957524aeb1a44dfeffd71a6a387332ec545e0e5d12fc25dfc5de329d992ef245ebe8be858a60ec0b3fe66a534207f07

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A4.binRYK

MD5	1a13281ed4649e217dc6e23891b7f21c
SHA1	e8bf190a055b66d316a43828a36e5d1cb0445920
SHA256	9a81cc0cd518f48f146a30697c52f087313f91ef5ac33c09cc0d1a31519a109e
SHA512	d7d80a35ead5422cdf8c0bf243147d4168f87d2eebb6d5c84a8e6279b18d52b1c4580e557c6d0f87febf65e246c724222286bb32d8282a55ff1492e859a6f5b2

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\000000A0.binRYK

MD5	534cf5f50326bd96a0c7d4b30cec252d
SHA1	25412b12df19cd8f217309adc902a1f44a8e0570
SHA256	e490d6f1f302183468c3566d69e31df95071f4574cd51a13d75591e4ba31dd88
SHA512	778957c7a34662e682dece9e608546720607d8e0b7203b70dd0e6b079de775375a1467478cf2b9c1b7b0146a471e19df1cb2e8fa98d9550c1e3709c3c3abd595

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009T.binRYK

MD5	e553420c911dd246954920c636e0c243
SHA1	d8a673f5892d0b8435e18e88caabb5a18c7a3d30
SHA256	f209b56978a13a40905faeaab0a1054736cfc1748f2dcade5d2ea78887f18259
SHA512	f7fbc7a1857eccd5994cbd8b699516d3ac06aaba9217c53847ea28be0076d3136b686ed84be970e69ddc7642324c00b1e13ff762a0878bc70ada27806c785291

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009M.binRYK

MD5	1b1fd1694bbed8ff018f71d7b4a346d6
SHA1	2ce9303ae3ed47d71b3d36b03444ac24e71848b6
SHA256	80902965b0afe114e697fe571d43e47970fbe5d89ad7ce62c1255091b5bccac8
SHA512	ff936f87c4de9e2cb66bc4d514ab682beb8b0f666bf21da8b51a833f65eacda46a3b2b36d6cef53c9aba26aa88feecbc1c7137b00cea9350c448d58b3d9ac9ce

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009J.binRYK

MD5	87de55216a4f165488a27a6c5c9f685a
SHA1	3f7ca1d2c74565c2488ebd264aaf4c7208a5c59e
SHA256	86ab6421d18cbb7a40c274f14a15a55ef3db10d9f76ad610ead807e60c52ddc7
SHA512	850549947db4424bda0ee113a846482298c0c4d8878456a1c5228b5363ce2b5230fac27c3d8294a865507c8ac831f20468feb9e401759c698c44da2def7d56ba

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009I.binRYK

MD5	f1a0c68f1d46f54961674f9f00779376
SHA1	ac7141e5d1c6397fc37d69f583aa79666fec1659
SHA256	a8f1d6ff481f5e8f5c04b0af7d791674075bc0fc27c7ed9917d93156af366121
SHA512	7a721f5e3668f4a6f87632f5f12609ef691344accd99a79045eac83127724799fc034b39097b1c6c26296885154272c49c884d4527723a3e2d518b30b308d45d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009G.binRYK

MD5	f6a9ef354636e23677ebec45f5880f9d
SHA1	f50ea130677bd2d66e6fb31c8fc5111b446ffc97
SHA256	ef8f8b116d10bcfbb1f0676784da5a41d70622f100df4e772a215caebd572ef9
SHA512	bd6a3d287282427a8eb7a4910222cd83b1a09edecf2bc056c7bce270fa6c4eab23752c4abd8bab861cc2414eb8712ffaa7ad67575be3076d1dda9f3e1318e9c2

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009F.binRYK

MD5	86768226d03ee260f59e322863ac1af7
SHA1	2d8053e238064f94215ff155540c5ad30cae72c9
SHA256	8273cae56aacb4e94a07d89158a8c93f8afe78d005ed0d1e54ac43bd89bb8ff8
SHA512	4e6e8f9ebd65c3c79044fc920f070fa9df8493b67566187357885c5ca69e5ba7c722d969a745b3dd732f4995c88845191c8870e90631bdb8bb9039edbd6d8729

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009D.binRYK

MD5	470448f58dfdd4b5595ca7e4862cccea
SHA1	997afb63f6ebf630107d32c823f43dfd406460a0
SHA256	7244d2ffd8b53d352f45aa3666f21383c176337105baaba104123428a36c5e9c
SHA512	5854851b15fbff1c741813dcd3de4ce611ce670709742192046ba26a50dbbeeb9bd8b5a57f1677e4be53d57c0521419890da4c6b23157903feb95e158c0e4888

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000009B.binRYK

MD5	57f5197abc8c2f46d26565b371561719
SHA1	ee260a07e923de620d5cfef9ae00a812944ccf38
SHA256	fca65c685c20e92710257aab46c5cbc087caf605c9b9376b8a0cd5f00e80fd74
SHA512	028cb80cbf0b8842b711d696b77534afa12508e35d4c2fb02ef373a59d924b68437f7f88aaa95c7b52a91ca7afe21528235d3976fbfd5de31efe0d07d3f66b1e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000099.binRYK

MD5	ff09008d188949dee342e068e77f8f6d
SHA1	607120ea5f4f47678f15af328160ef1e57c1475d
SHA256	30643e464502f0a141fed2ea20c9032b7aad603914cfa19f76d154639ececc25
SHA512	0c6fc8ca03553f89b819b98be383e1f6a5210e047f68a7dfdc31c3267ccaca18741e8d78dcb807d7d95acf3de4a58883765b4c781b278bbb8606b53ba8792118

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000095.binRYK

MD5	7cb0dd58ba3e6772ddda512ad1350f53
SHA1	a7e893cb79162396ed5131c62f6d0862c2140472
SHA256	3d06e18959514b11a458f24ff41bfaf61ddfd34806b2d4c658d2eb83e9a3c4ea
SHA512	5d2a07212b011be53fb7ccb431c8871af702ce7b296c8fa291348e8b4d943a849f723800efabc20742300994e9f9f202398dcd68eb004cd8cc780e6f87678f66

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000093.binRYK

MD5	5b799966531c98507bec54da23a76277
SHA1	a640c3f8d29991eaefa777f462ea68f8a207f252
SHA256	b88e66b31df9d5720a988b40290a1075cc1324a731dbe2bbfe8241cd113e1561
SHA512	f4deacd4e80b74e7f4947f5e077d91cf91605e9c52e649e74cb9352c0955d122f5fcf1dac2ff95a60a025a6e314d756271fb08f0e2a48b8091b717560f8d7489

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000091.binRYK

MD5	7ed1d0f0b5a041ac6b0f3aac8ae39af5
SHA1	fdfb4dd06c1d581b66d19775a115f8790769d04f
SHA256	d0e56797913b297d37bd3e7152e2db236f121c525955b2f5c3e6a6d2621d37bf
SHA512	df40b2464b7e8bbaf731cbee6827d1ab74941bf536e8d455e69e59805b8faf2592d565f74eb91e55a25459374fb9d4ba6cf9162ac732052839fe64862bd346ae

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008V.binRYK

MD5	87ca3defe453546d664df39c39c40344
SHA1	c2d8f185c71102d440160837448643a82724b014
SHA256	5da9b6555fa7907fd7cf987956552ba13903c094a7e6af732135fe96df5c5ac5
SHA512	880a52f68007b6515b4034901a29b7a605a76026703867eb189588814c5e34b2071baa2064654b88e73fd0407421b2348a3dab7f6a26a7cf711b533f880f866f

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008S.binRYK

MD5	189cf77ef5a3a86f4f7789f4a3d54905
SHA1	97394b3c433960ea8ef304ad4fee5568e13c40a0
SHA256	575bc4a59543b4d4aabca480a730de0dd48ffd58018b727e49e86149a2a410ba
SHA512	5e22d03833e43817c69992a91693bac91b85418e8943f5b5605b43b1df44dd6ca56fc71f2c74a232d08e6d93e268d6517c5ecb2c9604f416c7d32cbca3e5b2b2

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008R.binRYK

MD5	5814b62c522134f5e65bb686398715c2
SHA1	cc804a723848a1d19853dcc25a761f75a1f9032a
SHA256	973afd925ac687b6df1900cba47a5ca2dca2365efdc7e818ce79ac7fb5be9c57
SHA512	5f2b1567a02a041ddc7c1674237d83649ef4e271cd258459a12d6d47fbb0ef206187cd1894638284857b3d889113ed7222346c0d19c5ec3171dceb1abc9e416d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008Q.binRYK

MD5	3854caedafdf84125117f5f28d14e5c9
SHA1	eef3a79a2939c78c0513179ff557260599a5d3fe
SHA256	f25c03708d35543cd396ba89ee5518a5f690711fe51390c9167740d88071857c
SHA512	ed5e3d2ff76e6b0580a6eb86d7503e17241d5cef9bc196860c85f579715123711cf0c0d53f648d2ee89c0217025a4e73baa9c53c4a6782c5c4d6a2476402ec67

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008N.binRYK

MD5	6d56a2f95678c627a33a61b2bc20b9fe
SHA1	438672cdfb0d73f1b23e79e623bcbf6f9c6e7f9d
SHA256	1953733f6b26289bbeae8a669840f46c3211518adf7cd9f092a9ac0aa6030a8e
SHA512	03347fee82ff0fa2eadf18fd946614d0165fc92ff6fb2a0599b5d45edd51e0d63ef39bed82d528a47c34ec4407255f2f69207da794c3b939a9ec75a807bd1e9b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008K.binRYK

MD5	f4786e8f2d57dfcdf177ad5b908aad6b
SHA1	b649c03aad92125eae8faaf0cafb70a7f9dc250a
SHA256	9f7a14ce154840c8d55cbc31378ce454cc0517ece833ba91e8c5f0fca0508084
SHA512	919a9b2828e281d8c9c870563bc33df1ea1040f390429e4dc19500664e41dd026b7b640e7d069dfa46363e9df12910dc7df74981b284255c4fd1f49eff664af7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008I.binRYK

MD5	9f862a856909f1936903c5ed81b5e71b
SHA1	c0e6adebd45ab0f820907beaf72ea415155ef658
SHA256	5d73db0e99d721c9a6210f6e383327a817666746d553f7212391bb8321283438
SHA512	3686d7035fb149e324d75377b26fe774c1664c5d67c3924d69d4cedbebce1e74595c7fcfdf0b17f765ac9e08e9aed6b76a9aca37b54793bd3479c06c4c033d54

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008G.binRYK

MD5	3f481d555735a517fad283219afe8c27
SHA1	fd1c4cc3f740ebb4ba53623dfcac922a84949fa6
SHA256	51b5abd8ef8c92609f0208c6b02f1d8e67607db90cad3783c6ab01cee0ca5443
SHA512	5f2fd3c6c9da1e85413f16c09b21ac45bbea8a0cadb7c1b7aac817f8c598d9e0232669d8a7147c8736426aacde56eff9ea887c3f7c8a68ca1a968e85e9c734c3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008E.binRYK

MD5	a4b2693193b9e6d0c930f615fe59e7a8
SHA1	214a812e2c0ff7c4f1095524f516edf770fd470e
SHA256	15581ad8a29f952c318c8408ed9d971d8e3be62c9a601cce3445d6b7b6c0d5b1
SHA512	34139eb5f83184e481093d65debbbda9f84d2b2ee76bcee10ddabf2a61b25c4fa8609e906bea8e469b4c9641c0197c6362d0585503f493635e518b77d04f9dde

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008C.binRYK

MD5	c7b4b4aaaa914eafe85c62d0b22dff05
SHA1	236bceb31ae805b1350c40fcfb0e4400f0d1970a
SHA256	00efa33e23e6928a61953b9c03a7cba1592be37b8c80b3f3a5b6b4ff8d75e098
SHA512	f4e51b33f7c1edf0241c788519e85bbd890158d59fc0471dbc4f82b235689b5bbbc868e937c0a521b53706be980df082b0695fa8f4dcb1a2129909b6b04797bf

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008A.binRYK

MD5	21f604f6485cd781ddef62b21f8e279f
SHA1	e2af33c7393ca4e103fe3c3d08f3087890616de4
SHA256	970a7bc504eb1b6471bd41e3dfd62acdb377918d6233271f000de3bc55f6206c
SHA512	5794635c8115f24f4d82a3b404d30523d32f84dbc41e7bb8053ab82922f15d408011d34ccdff2079092dfeab0d5b7968c1c39efcabcdce3f4ef1362faba9df7c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000086.binRYK

MD5	726fddf6727a4ea112ee1989396bd43e
SHA1	244b072cd116d0878f2609095cdb067508287865
SHA256	e0d6b89aac44cf3b8a8c93d676b682d4d19ef49974c9042dd9f737dbd3dfa7c0
SHA512	6384bd0143a4be35af2016a39d0c2df09d6bc19b8afe4f4bb187f85ddefcb98947cb51bf96ed2fb015f7f4e1a52ef5a7d892ebc6c05e76b87e728b9b26133551

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000084.binRYK

MD5	4d889237beee930785db794f941f1b89
SHA1	de08ef8c238b0bb31da9aad3b008c3d85909a22d
SHA256	1a3279a2460ca8038805f2fc43cfe36d70ce2c1905aeab81305716b2565a9d50
SHA512	fbd0c96c64c47772a0e1f55c55624a9aa0cc1f9351575c0baa7d22c4a8c864ae1832ef758a3b1ce886d0c4fe0f8a0ac1fbc784dd0bcda00c7506ef8e096c0840

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000083.binRYK

MD5	5705951bb7d5d05b5b0dea8694185bf2
SHA1	d7e9a0fc90f0a4a3457ae2a67f5c60e32ffdd491
SHA256	a3e3a53e9054cfc53f9dd29fd07f2d7874444c3b6865b9367a81b51e270a0f29
SHA512	8d389add97d5954fb58d6445255a2764406b853901038be46558416b00d49248eab1b321423acd126a6711faa54d8a24ef266fae194064bfd40335f331148723

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000081.binRYK

MD5	2b78a2da3dc7b7e078facac1f1e0b21a
SHA1	6e328cf734924230c9db692208196a1b877df61a
SHA256	e304ee6c773b034f097fd3b61b1ded1f22503fcd20af389bc424bcbbb4712966
SHA512	f34684a5d866974829a50f2f314265ecd2dd2d6f34d3de2b03260338f3919dbd0bbc20a2576771cee80a0aa294254d3f1ea2f2a6bae293b9f374bdfbe364d7c3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007V.binRYK

MD5	e4b67f996fa198083cbfcc0f55cd7d1a
SHA1	3aa7160e9ce99e6e3294ba6f56d832d01e997c93
SHA256	db0ec7310dc7076cfda2f20cf0e354ddd267bcc24bc8f5c872b7d0d11d531e80
SHA512	1b70dfcbe6a1f9beb9a9c572c1f579ba2ef0b660ac520a5e6cddcb491b668bba8bd9fdb2c5c94157b83c07110f02573e103fb9b51db4c4076a4f247ea004e68c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007T.binRYK

MD5	4a4a12786d46dde12ec61c6ae64adf98
SHA1	b7ee5099a37b650b780599f602ad093b5fa93b46
SHA256	bb50f656ca877cda8c1a0e1260781dd16e91eb6892f72220045fc9a5fbb70d5e
SHA512	00802c9ebd137d9679b5872041dbe2180e641bdee9f6ccafffebcd89ef25c525d40e3e58d300593d5532c482ad0f480a2a41e9b7c29b948cf21158db547eab35

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007R.binRYK

MD5	42b5e18fa4643006441953a8665fd4c0
SHA1	95ed729b5ca7967ad248b1b07761d375c3d1af68
SHA256	5931075bf80240513814d6dea7522de415fdb7a35e51c9b3a2dad1f6a1d4b9ba
SHA512	477d7dbc09254196cd3dba876581d7e80603b24a4f9de7e2bc45ee857115d09bc9114c1502ef75c1b0bd837276977ac95147ee09a9db8999317ac4480921b764

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007Q.binRYK

MD5	9d7bcb7fbd5da9484200f69eb7086cea
SHA1	665f7125ecda867df7cbad840ddbb3584e1a4b49
SHA256	00dd6dd5d7b794e74460d1000be1e6e8cdaa69850642001886de471e3bae5e60
SHA512	1e37a80b6e61a3857ecf78f0253b15b0f63f06ffa00e7b35fee0f581f99ab190eae5dd5fbf59adde50d76b76b28a6acf23537aae42a0418c4dfc9803df8cb8b8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007O.binRYK

MD5	6fc3b1eb9d3f870d138f241110254a8c
SHA1	aee583ccc40d24cd0abc53fb13b564a60faebfd2
SHA256	3b8a2b0d1c14898e95c4bd2899b12746a3db32d8c434ba8a2e4c5911219c3aa7
SHA512	fc876b734ecf21f7611b4190297c03ab78bc221fee5a2509a75d35b869cf964e21ed1cebab96da906904b503320dd6558f65ef165cbe2df69c697d94365c8e0c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007N.binRYK

MD5	54dbe70869335433fe4bcf8e548fbb61
SHA1	a773ca227f5fd8e5571af561cf4f0ff293783a0d
SHA256	acd7082fce5b86b2677bff9c2c931f099f28f57a525c884ede36dbcf6b14d40b
SHA512	a374e731b8609a5e22a00a57b074ec99f6cbee133cab8682950b849f3eb7c5b7301303a96e059d5ef54e2a1e60d375c24fc59804e593fec35a39b3033efa4c8d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007L.binRYK

MD5	8a6fe8a4634f8399ff6591c03b9a1a39
SHA1	4038ad70ae338db7bc4586f8d9b4300336ee1ab5
SHA256	6d343a79e636fa305d3df8275b661d307c94d128468c087676560760fbb7b60c
SHA512	98592ff2b16b7f6edebe84a9771cd79ee8c8584d6f843ccb2cd212d60187d88966636a1031fa23535be409adfb403b8f563ecfc30186780be952ce59f0961f13

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007J.binRYK

MD5	274b90ff824c31a5be5c881d68063405
SHA1	d22190ca33f7c8c8355784ac3aa490f3e2c83334
SHA256	0f9c86156683e08ec49042802bd8f94a27a8d4a6785771d08e6f4c7a98086401
SHA512	34a595919baacec0fb70fbb9d7631020952e0b14567a84b3ac969b1a44bffbcedca93c5564ab13bc328d5ad80f143b099b882064f91e8960258cb43e2ee4f162

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007H.binRYK

MD5	b490120ac5f0f845cb94dbdb9baa813c
SHA1	0dc114b4f48a5531e80bb66824bf87a91a58e975
SHA256	dd57616926ca3136b4358d2e891a8155bae3215559b3aea0ac39991e3b677b48
SHA512	6ade072976b3c3673b7e3d116c0cff8ebfe5bbba45b020162678104a50b96a660302a5c881ee4c0b2b2d236979f73dc07ad473fffe06a0cd8f959199db493b79

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007E.binRYK

MD5	cef44cb751be01e1762d1f927e4affca
SHA1	b012545e1180c1ff996b6b5fa5634ef661147bc4
SHA256	aff29660e89d9d130cae0c183b4dab43bd12a70918915663b09b13de6aa8b620
SHA512	5b0f791d490b73da6c66f9e6b8c596f71a1d2e19174e8b2dc5549d70f05367b628998e8e38b17b06ecf35c34f1619b2732f6f3b38b11f31d32545137a2451606

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007C.binRYK

MD5	fad357731123577ca802fa096bab6799
SHA1	25883105274019b624e12063126b3db408839ab0
SHA256	df6728df49925c1736f0d09822a28478a1818a5e0b6ca5a9b94ad281624e992f
SHA512	e08961ee2cf6ed26352ae4709200b9afd831187d525244bf1b7b31305985fc99edeeaa3f1a29a69c7d0e3301866b54c6a2426d61b22e5a15d8ef6bdc4ff704c1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000078.binRYK

MD5	9a74ce2d49bbf3ef31a04f58de13853f
SHA1	7ce43076b58b7f091204f4707b2c0fc8ec336497
SHA256	a5a131bef18aa9262691e30200354a641640bf92f694ff8875bd82e2fee19a50
SHA512	ded42cdc720fa621733b1e0aad01c85b03480d93655586d193a5a323e743e72646eb5653db7d64609a4b72dd895bb33fb2c81f3ebf0162de7ce1bba1928191f9

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000073.binRYK

MD5	1c3b041a697c77bb7d5b782aa04ed949
SHA1	1796f12fc868a403b4029824ff038959dd167aad
SHA256	6ec96e119463f066faadf16789eefd8302f12bf79fd89d3982ba03bb80665028
SHA512	2c71fae55056167d16fc746bfedb323279adfbaecec3ff7578fd3faeb4a8709a57fb408ab5b6141474f91ffc06d493676562bce9bdcf2b4a68e601327749c556

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000071.binRYK

MD5	854c1444e196e1bbdbecddc8725dc5a0
SHA1	89e5e60236b7c05f10509b7e40a654ff3a0d78dd
SHA256	1f377aa1c5f0e44b568463b250b65d84361c17cff73a4e34de9ab24e88dde44e
SHA512	191c875d819550370e37a1282d3bde3e909c8565f12a3f04b0bcc4afb000d03b168dcb6c916d97d8654ea547deb973f83dff5c8d70cc58b990ab15741ea93333

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000070.binRYK

MD5	2155acc5a3dba94f71d50e648883cf11
SHA1	d0c37fa1cf585f1bd9db40af45bdfdca3ba9e36f
SHA256	3106f050f38713f18c6f99ebb3d114b368b55967761263dff9c177af21552c7b
SHA512	16a7de0e2b02ef2c7a1818b153993e6a700c1b80ad34b2152cc2d632afa99f3fa57942e1fcf626231cb3b0fa4f0a1510c794c6cd89157672032078e4d68d5bb8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006V.binRYK

MD5	83cbaa02fa761f34a78941b2fd06379a
SHA1	f9113260bc40e8c5a3daa41cd8b56578808e4e47
SHA256	314fb5f9c8e11267257c205206eb1c9bb4bee8f06a2ba0869855f3ac8df179cf
SHA512	1a922e976d60d6dc8b6f5e9e5fd24edb3c1658e97e4d3473a1dfb18c50317fd8d4561b17acd09a9dfb2ee1e8e3e562ef1537d21e95f364c43f92077c45b32819

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.binRYK

MD5	b51f67103f7b628fe516742ec942ee27
SHA1	244d881d82ab2b5c5e934a9321ffccb567ef47df
SHA256	1f13fb8848844f95aed18f893a747e37388065789dac85683bf233e4ac1c5f76
SHA512	e0d7c25e958a7655ed80247b89f121fe1c4c0e8a67adddf851499d6d77c54ebeb61ebbc635b76d605b38ea6def0342ba24d94d1795d05a25c510a2ec08c83ba5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006U.binRYK

MD5	0ce79d3127d9e6db1725f77b8e00bb5c
SHA1	37bacf9c868bd6b6ba9e85d2f059e260c98fef3c
SHA256	845cb8323e5d9c1dbdb6dbb66c49e66b491701f588c06fb0576e29018aaab6db
SHA512	bf56734047ffe3e8e65439e387a4c2e45fd986eaa9fb8768de58526f967d7a787fa1584a94f4b14c1efed715bf8f0b8d221da0a7faf0819733fe533026daf70a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006S.binRYK

MD5	e9fcfcfa8b7d768b1bb4a6e7eb33d7c6
SHA1	9981c8e1651405b256975d586ebf93a95fa9955c
SHA256	3e9dbf84bd5d962caee1e931db8187833ad8300fdc482503d377d2668ca2d41a
SHA512	80c8eab3911cb4f8205faf480a281c090c44e03cd74b03209cba944b8fff7cc592dc650dcc787ceac430c4262bd29d37a23c5a6964d4b615110388d50fa7f490

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008J.binRYK

MD5	86fcc8192562d4b1c65204058eaa2392
SHA1	315266d5036866f75f02bce07fc7c3799f24b79a
SHA256	ace776b2e4c3d383e0b8789229fc1fbfca96653926038bdc6232799fd2041b74
SHA512	f3e981c6ce634aa7e950662eab010fb54822e9b97c7747c7a7a59f48d170ef34c52fdc6caf78f3400cb8130622af78ff6c9796dd4583f2ffaa98423445b611d8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008H.binRYK

MD5	58b74b05ced16801070a5a694af86ceb
SHA1	eb0886e6a2be3f9182e08362433bd533173378bb
SHA256	7c4897e33e99c0eb5f5ea34101016e12eeed0eca79167c4ed1da617cb26ea275
SHA512	65f0d36f31f055914e6f10d2464600a5087abe4940d88e2f78028945d46744f155b8ee271e8bdd7ba1694c23f2ebfb4db51aeaf744c159c93c63a49562631799

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008F.binRYK

MD5	fc19b36eb77d64c1aefcd7cf9faf69c0
SHA1	01776c7bfc4d1a4d8f61594483e1c2e93d812df4
SHA256	dcabe9d5b4ff5ad329351217442084d59b937af3253bb9531e08f2f28b3d1e92
SHA512	550a5e8d7f1f78b0344354bed5b885b216bab82bbf0655eb032cf081df6b940b7c92608bddfc5a117896400e47b8ea83e8ee03c0cda65de4261c05fee5f83f6d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000008D.binRYK

MD5	f0f2d737d6e46e23fbf38456811669db
SHA1	9c6a09a09d84eb29ee6505517771cf6fd2c02eb2
SHA256	620568db4b5b048a3f14a1e64f42e1eb422be86e0f1949143345a628cf0e47b9
SHA512	e164600a706de495f18e6c751fc435cdf4daa9d6cadac636cd3ddf1fbac73e85f151f9f2424bf925dfbb0a8b0568fbbd15008625833589769ae570f68f5d0b09

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000089.binRYK

MD5	d4522869b1f9edcd94edd8c27d15c014
SHA1	12408d979e3e9e66a9ae871868604b1147754cee
SHA256	17fb9df9e7373de1ba1786dbc87e9dff961d20708a5667b5ea9d9322af20c314
SHA512	0f273c146947e6cdf4adb23e57a8512cc8a634fdb4339c5bb8601a848cd0848d0a3adbe31a4d9ea44389399f71f7fea743db90b0215db16fef95e45ee6713448

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000088.binRYK

MD5	d185940098a27c0d21f4acb2658b81c8
SHA1	ecbae3e73f82d26bf31fda52dcc2fb3eca2813f6
SHA256	dfc946594a123341c69e59f0fd8425d28725b6af73787f81da3ff573e00522b0
SHA512	5c92af699aff3d8cafcb2db9eb54df0c57f7b0353dd5be4700ece15edff9a567d217a7f91e4010a412a8267c437e5a09a52d38e5e1f8000eedd0d57433cbb082

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000087.binRYK

MD5	1c5f76b0cf30f536965477770ffe8783
SHA1	94ec1ad257d559cafd89c218b2e429c0bbc3acc6
SHA256	9bb22e918e0bcae6397e48ca76c0289fc10cda371b55a32483de27abff2a9880
SHA512	9c1ec53a49448314916d9be3bdcc82c80f3ce6203cd2bfb31c5a0f787c6bc83fb734cf43e400232c8fa4fd57b628859ef1de0527381abfc3302fbdf4e38e6e92

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000085.binRYK

MD5	39f1d65daab66901642ecf49fb7f9230
SHA1	7d34f6a054e455a5bc6b9aa36cf7bee9ea1b3ad8
SHA256	cababe2e7ca915b419de61e36fdd31478201bee2da2a099c57d845e8fed4c1bc
SHA512	79a484517ed013cac4ee2329174d3e0417c17f29b025e705404a57fe3e5e43ee2b597aaf854b101623a4edbdee9247067dfd88461244b385a66303561404e205

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000082.binRYK

MD5	1600d8b6c22836b16596e3962d24b52a
SHA1	49e0ed4b539106a33e21454b2d9dda694c929098
SHA256	22351c44a3e3c4db8ee93a2c19935b200f28b5bce0bc350914176345f8d567b7
SHA512	550d4b646f4f11f21a807c5184c0f131b96f691484939e670461622f4014b77cdce43c2709c1238c517358c0f12f4ed1d860f87d322d4c70ca13e930062f746e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000080.binRYK

MD5	df3ca03fe0749e7082634ea5c0ed0083
SHA1	76eced273a128c50c7c4f73055b5781f788c646e
SHA256	62ffca5d66d1b5ddd28e2270ee1b16805152b005be09106d08f3dafea2dce172
SHA512	3f11712ff832854c137b780bcbb00da30ebe1d537e78501cea8cf69e73f9ce0c14a416d67feb2cf2b3bcb8af5cbdd8357a344910cb2328732812317f2d34fabf

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007U.binRYK

MD5	670047f6fdf8a6e39b77e9ec316c7d90
SHA1	47af64096258074a1fd7b207734fc4ff7a40a8c3
SHA256	2df838f9a8fbdcfdac11409da9bfa3919b33fbbf77837ea6bfb68648905814ac
SHA512	431744fe746324bb4e5971c67379573a47afece88fbb86ae4fed0b87ef5601f19aeb8117050db28e0464b891b6bff5ab119ad0b32706605fb19ee0ecb32ee68b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007S.binRYK

MD5	1a4ffda9d5f71d9bb6471c3b4415e9bf
SHA1	89af994c4ed1c762ab34bb47b3340b5fe346e9fa
SHA256	386e0094006504de9439e95f0dc2450fa0476776df567fc4a7866ceeafbc7943
SHA512	1128b621887d76a49407e93cfceb1419d77ff01106fe1a092c25f578d8ef6936fbf2e28a091c8c10275adb29cc20d2d3c802ce0a47d7acbaebe93b1f7c717880

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007P.binRYK

MD5	f6c6dcbb0a50a3ab42a7f14f3429a3fb
SHA1	6d7e2cca6982e07fbffaeeff4849b5d43cf26d9d
SHA256	1528ad034af0b8b8c092e5ad519940d5eefc9304610b558785368df7ab962662
SHA512	beee4f78f239a719aaab04637ffbbd14beac50983a43e9d001664695298f4be98afb3493a7fe6bfd4a5e57205292d75595b51dd224e5fb2076e3f5acf5e6ff49

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007M.binRYK

MD5	e0837712bf65fc74fecdc3483ee9977a
SHA1	e4cdf5a99804e0cc70fedbd8547c6d3637202476
SHA256	efa5cdd80a8f7cba4ac277ae7b5dc255a7a4199f8701e43353223fe5cfa951dc
SHA512	1dcbeff47d95e7922fb229c254eb70360b6b9935ab624009c71b455b6fffb9323a1fe946df24d516057f0478d4bc7d75f5a37c8964a13dff368cb08ac365fff8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007K.binRYK

MD5	04274ebbdd821c8d23f1b7408d4da497
SHA1	c1f7fa55e30e8b10111299a79d58df68c0931f87
SHA256	900b2219056928520ce01874e21fbad44af2ddc4947c15b0761e19f581534224
SHA512	23cd74c668f1c9df470efd63cb4bdb3ac54ce0123d39d177e7aa11b3a2d061503625fae506fc983229edb1b7f9d8b1ae870dd9c04ded5bdf1ce6b46359f14998

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007I.binRYK

MD5	7b3229be72b0b17a69a00bd97f94408f
SHA1	08dffef70559bc511b4e0322bdf0c335d56bbe8a
SHA256	ca383050814f807d9625568b859aac37c07d5d14a1aa0215883e38171601cd47
SHA512	6eca21bd18fedba6e236a9d5cad7c6fbada8f65b536178204f2e9ce510c5214589cad8c845c2b91c402132f7ee13c8c079a024848e19a81147aa13f5c034d48d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007G.binRYK

MD5	934aded13cefc258b9770158f1119205
SHA1	9a3fa9fd82296a5a40ec78d06c1443f1010a7a11
SHA256	811c7b643726f3da660f2f16da9c50d7f1a9e29745f959dd4ce8392fbdaac651
SHA512	dabe5e028d36cdb612b7bcdd3a97904a6345ac9af5bfe2213e21750ee908ef83d2c03ecf953474ae6dd692fb1dce15aa4fb7d29b88643ab8dac12480e3e3dcdb

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007F.binRYK

MD5	982d6ddfa9c78cb3312bd41d93736016
SHA1	fa6221ba8194bd088f7bc9cb9cedf89e09195743
SHA256	ccaa7e4d06171ec549640cf89e761182a5aa7d0cf0524b729eab1db59b2711bc
SHA512	79caeb0baf8d443f7f8f41edb67ccf682d5a3e877b20b4d6df6fe6ea42fad4a4014f75c1c3d5bad5e71dfc5937c8cb32674f26c7186ad8c3248c11a4cacc9d84

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007D.binRYK

MD5	abc2665d3638177f431039a6d54f4b3f
SHA1	31c5863e5a5f387cb2b0f2bfc9a02980da216da2
SHA256	487294d60e4a63d615193b58315081a6dececed6199190057defeee01e0b2475
SHA512	bf730d7790de90cb01461d38d70b10b72de835233ab5b63ea52776b785a1944fb20c9921e9b237040201b67a643fb1e4b28a33f11e0661304f77d8b39c214df3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000007B.binRYK

MD5	ecd79e2e086c95cd365ef008ca812467
SHA1	7c1b54abd868bad67c55b5c3c2e2fcd2ad05d36a
SHA256	b55e4ca5370b2323a40df1c014d76a014c49c0d21d72d58624684b27bb5b0e7b
SHA512	d7014fcedbf798cd16465e8132d25870b46858af4f5a0109f909ea7f1f196b99c0943b5678308c803fa2d804b073172c38b62794b905dbea451f62e0a2f370d1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000079.binRYK

MD5	020f14f3430535ff27cd7365223576d9
SHA1	b0b0a32e9d66e1d92c5b4898b5c7bcd858822ded
SHA256	e5a4c0a0eadc70bc8d1058f5ac5fdd473239ef7236fc295730df60145e3073bc
SHA512	1f37a5d6daed2c1a9a5d3ecfeaaeaa8bfdcb073b1f0b25bededbc744bccfa8102a0ac3fcd2b15068cece62bda5600e69e49bb495a24e17ed25673ced6a410671

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000077.binRYK

MD5	ea2ad778a517823a4610820ed9d46635
SHA1	f35ca6617c6875962c0eba238d1a0a99ada72a45
SHA256	506d01b4f3c1143dedb82e8876e80f6d79c27e1b87e41226e4c9594ca4230393
SHA512	9257d3aaf73ef029bcd6f07b82c1a334c3d07a9e3bfd93a7a12ed2bf27ee12b8e288503aa72b3e10aed40d9706333efcb8d688925bc4de0244fdea6241fa9f82

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000076.binRYK

MD5	691642e704949af6a668b8ca8073ae79
SHA1	20eeab19d0ac422a951e911aebcf137fc6a3a804
SHA256	0bca08c38f7a62e2082c08e6451df348e3380aec2815f94e8df1488fb9370483
SHA512	7e235f7e1d53b27e55c97e6206014f2b3c6cb0ff46a50b94a527d44144067a8b0b924f068de927f7e750d5cf2aafc58f27f27406c89b3bbf32b9b796a889d3e7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000074.binRYK

MD5	164c0713aebd2e95295cb3d47e3a63ed
SHA1	f8aac1488404cd1e7166b906f46fce6f4ba87900
SHA256	3b83bc87fbfd2f611ffd1880b49be65dd8108fd504060403a0329817cd63c646
SHA512	d830ac520f7a46330023fdb87e0065dc747afdcfa30c672d2ff9bf946be09d01266019962a6fa21e6c52e07a70455ae1163311433aa53e110d2eb336d6130bc8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000072.binRYK

MD5	8a380c8d6740817ddcddfce3a63fe435
SHA1	9f61fdfc979c76b0739da443309ab57368fdb407
SHA256	bf859e845c3b27f282ec2399aa48e7a44842648f4517f3038f74e709dbea3a07
SHA512	2c80071d5750718ae3ac4713c4b9146dc3dbb07b690b09181dc2c96d2afa487868d19d7c73da15a1b9cbc69cbb826bdaf3ca5ded3b9a3ef220502e7475e7cedc

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006T.binRYK

MD5	36929d78a0000a5808a2d5ba41477761
SHA1	528501af60e4c1cfc008a08d4788ab02763bab06
SHA256	3aec4a1c879ebb9ec03e5e180f47d00396a896313243415d7aae3d98cbea8167
SHA512	d011df1554095a51900df44048d019ecd26cad6c7f08140dffa7fefeca3b731254ece37060fc195f930978fc53772dc655c19bca3b91414f103153033ccccda4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006R.binRYK

MD5	19036a0e4f9c87c428f23b4ae0cbdbfe
SHA1	a87b84d0571cc13ac81cf3eb9db02590d7f38f04
SHA256	40f2896c91acefa9ab13fce3e338b5cb2c35150339a9fe8999e47760d82b303f
SHA512	2b6ed7a7fbc6ebe0dd8445a92da93f540587fb4ef58c832e79b311e347a0c5bb74001ed52b21d6147e08d11593529173d913c00ee3dd9c5b69cc445c0f4a3b86

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006P.binRYK

MD5	4fd80bdfe7dc7f4ab8e8dc7f282917d5
SHA1	9cde21eaf8c28cd06b0833593063ee4c99a0b4c9
SHA256	dd6578daaef00cf24abeef0e3ea1064fee732e78657a63a2a203baf08a1c211d
SHA512	fd204158acdb4119878012407dc69b297b1ea74ca66a56cb7d79f83f85f60a2d5d5a0f64696fd80a80f543b50fe8e8c63be34f6bbd3b4652d199df437473552d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006O.binRYK

MD5	0b0a795e030b744a2003501178f6231b
SHA1	69642dbf631a7afe010049b4d3f9a74373a33548
SHA256	7e67250f7c0a6df772d6d439989e0a726625e775f93b14d2db28a44ccabfb4c9
SHA512	3e1a9a26e565c19cf4b67a362fa311a04fed8215c69461d98c50994c4db0ea8286c187412c6ff2d2cad667693b689fd23282d9a7517fa7f45968c951d7898639

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006N.binRYK

MD5	1ba55d282479346ef3b4c71a20dab50f
SHA1	504b60fb00fed14cb59a6cf8ce5469378d50643e
SHA256	4045b2494556fc7ea442d48b41ad0399bad464a52a65ba02f4b8757dc645f1f8
SHA512	38ba1d602e40e30a33c928633520577fc732664cbfe53c0a85c93ac9c95032ac508d8e3c87ee068ee20058f4e7ea181e6257be60a3a3e26638ba233a176515ce

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006M.binRYK

MD5	83cd5d4e01ec216ec65ef23472d0d286
SHA1	d60a518310477b05d6677eb10752308f765c46a9
SHA256	5be8442d00b917558977567295eda1edfe972ef4f5f32f5484a1721072f6e579
SHA512	45e0a0ea008fcf73acc4369f0ab83a0048cfbc07238ddf3d97e59999a650c1cc231ed22ff18e315ceb7d6c16827a34e666dfb8f0ba818d0c553cff06b7fa6f2a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006K.binRYK

MD5	72928e8dba2e0a217b2b07f99dd246cd
SHA1	6c9dcccf6e44064b786c3b24ede634d2f37ec774
SHA256	9b69d492406e350dcc7a008d137474fe790fe5a0a15f6a784ae1fe85368d8e49
SHA512	8136d53675f4cea8400f841dec08b6bcce10f94b1dcede88e8219d0ae34b20362ff749e814aa123c7683b8beec16d44c2433416e0f1488dbb4db317048c4ad11

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006I.binRYK

MD5	6fd74c568ef92cfc1ec6e871a9f4f5cb
SHA1	8a355690735437cee1aebfb3fcc50655e5a16f11
SHA256	64afe6aee8be07ab94309e4d963bdc475c28f7db250eb88c802730918c2b81a7
SHA512	b09fd4a991e03152e9b6787986b305f11921b3a4c2e2fc10ac62a76c44946a80217bb7cac1b5ad93adc0ac5f166fbf3dc13d16fd2b52da6e4b9c3bd12182726f

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006H.binRYK

MD5	86415968b548f9cf4c7347ada69e5eb7
SHA1	0032f534635162f4dc70b182143f35fe3af4ef45
SHA256	724a54587487e95bd13f0f35af095c891e1ef40dda70cb1a71c93e7896762b4d
SHA512	22993a0b82cd204a681f6b94e5079692a8968dd7f60f7cf315d833188b02c08c950ca85801d7692d71b45387f317da05b17fdd15a8165484b152bdbfbb797561

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006D.binRYK

MD5	4ff2dedc2b3fd919258cdb2966c3c2e7
SHA1	e4e631ba31d7591d47aff2e6e1aabfebd9d58bd3
SHA256	a64c47600b0b50666ed178440bd767a2e9f5819beaf22443e517edb74331d715
SHA512	d4fd38307d92c76d8b20990fa9a67df8a9b8564a31eb6498581751a90ddbf99cee07520e4f0db7a42dab2fa10e09a5a7f2433bcf076d63df7ba4e18099134b26

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000006B.binRYK

MD5	c050d689a9d37413c5cc5e7a1b418933
SHA1	e38f9f7c12be403cbefde3a38a06a776a863b158
SHA256	04fc819d40652dc2c36e685703dbaa81732e394defdcd8dd5f887769140e7b76
SHA512	66f6f3ce8f5d81217722b476c357bb52d999fee4ed3a90fde4e6b4fd4cf06ac7bc528db9cd5de277566240fce104006024a970bf6648e84ad2a1e11ce6835202

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000069.binRYK

MD5	900d0358fa00812c8f2b3c9a64e66d63
SHA1	c76ee984968d7944bbe2d2d573c34b700ebdd08f
SHA256	6b1a20516681ed38291d91959deb572338f3780e4c68c769ae9b7ad9578609b4
SHA512	25d56bf09affbe668da6924f61bd2aa6714ad50fb825c5c5f42fcb8768ada0ec69e33b157df50e717ad7d99cae959543c4b2687ae888593b52b4158d7f9f537a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000067.binRYK

MD5	c7a941d048bcf039bc6315cc4a8f4aeb
SHA1	ba6e4bf6a7838cff22ca8eb22a82b0d673201c17
SHA256	772b51e789d26c8d8771b9fbe68bc402dcf357097a550d6daa8b531aec27d8f0
SHA512	4abdc7cd26b0160cb381eb60543e94fd152c4120fcdd610c46ad5b76edc989b9f139cbfce323a517d852238c846cab70bacf459e69059530df780eb2815e5428

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000065.binRYK

MD5	cc701cb3370957428ecf0a6279348a75
SHA1	88de59ebdf27f5408209f9228746d6a8d0354bad
SHA256	74fd8389f1619447964dd0528c2af4a5b1fb86009cc98fb5b02a628189876e6e
SHA512	be226c9deb001798d160df3da5ce29b2f013646b58146e3f92a74150972e2cc7802b220fcf37f22016a2615e8d03bd165514c077ffd623d4b3aae083ee3caa1a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000064.binRYK

MD5	f99823a7d22e065d732fbd5fdd62e9a0
SHA1	9f74ff53d6496e12f5efdaf56ca36beebb199a69
SHA256	d460d2ead3ab43ad95b7a6c915eda8821afe9f695bff280f1fa28581a1a1fd49
SHA512	5500d726e5ad70c9ee0e5dbf451fd8f5a975ee6992e437bc59a0fc33886308eef201f8c4fb65c056b748c842cc0919bd9d4d9576446d8d28a12c96c64aeb6393

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000062.binRYK

MD5	bd0f5ea23772d5c5ef70b6bc40fcd5f9
SHA1	9f8220ff84ba964736c9f050fe247fbaca7bb63e
SHA256	ee5af1c5957029723e41617e9d30d5fb24fd84c24068943f75bcc44024650651
SHA512	01e981b9fe3da8202237c8258ef74f32e92ff5b1e7f35bec08b8efb20999a5944f13e2dc37ba11fb8d5a6c48f2724e4cc31d6bbcc79d4805564b69243f95a692

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000060.binRYK

MD5	e6f4a04ca851f7ef3f8c4df6415e8210
SHA1	fabbadf1933282fcb68898fa24c29f14a7ea5382
SHA256	93bfcec07caf3c3a21bc0b54a8fecabdfc466edb5c8a5432bb103e4eb070d87a
SHA512	c631ca763c01254ce0eb34dc3ce2f0a69c3b25789f9445346d4a4493d508981ab8d41e5d527f44c176ccdc3bc362518cbb1ff5db8d8cfe19ac58a156995d9043

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005U.binRYK

MD5	534b41b4ce3eb5802ede979d7ecfec4b
SHA1	deeeb0abc441eaee42525d5870d802b6e6f8a8e8
SHA256	01eccb8a392eb66a705c7b98aa76e6f10883d49714ff30433315e97284e1144a
SHA512	f2c89f3b844243614239e89dfa4959adc9623efd5fbe971317eb4d5a46074f58293fba48bd15b9296b0ee82e3bd91ff3899fe79638ad614c912c13c6b066266a

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005S.binRYK

MD5	6e6755b90b2215934b4151224a202c67
SHA1	2a803d1c869ddbc055b9f848272e7fa0c62159a1
SHA256	8520555fcc2284b194e0e1a87e322495c85c17361518105171081a4d20e9bd83
SHA512	774f5719fde9d446eff59ccd1d42f13569f38d5035adf0354ab41fd6a6aad8971eec2a0ffa0075e9b270098b0a531387215940973739c052b14306eaa50a40f6

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005Q.binRYK

MD5	c0c7404b73ee0c50ca655ab324380a20
SHA1	5d191dbafa18276b65dfb942b30a6ffa2ac1620e
SHA256	62fc656a04c625845e6213f69a2febdcf4bf43426d36d638e410e06ee047d590
SHA512	70ed58044a98b9b9b4ad725d28a7bdfd2710858380dc6ec6a35daa7bf3b3e4674a5518e8a8562b5fe56dd6938534ea9313f3c954478c2e30511627d5a6292447

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005P.binRYK

MD5	21a849e0a6b5006280daccda78bc2f31
SHA1	9696f2d919cec1d3ba29304e6cda336365040a82
SHA256	c5ad24d9d6766ff086a0c45cae2ed810af2507a6887ca6ba19ebc1e8c61ace57
SHA512	6c11c10d51d0911812460abed2bb2473c46677788514f63394a41438b690c360cc698e440a502b3ec7ac3da4f7e33320425782634fb690f7111a0d32e7d3df2d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005N.binRYK

MD5	5c1b2ade888c0149b22ab3e643dc5f1c
SHA1	de30416088f66950b039cc9a27789eb628bb18a0
SHA256	31b5d142a19237c51190248f5e6250d7c25de8cbfb8ff6c192a262009afbaa06
SHA512	89806ffd06de0271097903ad9cd021e61bbaf32dde749646722af6503f93c874ca9a88ac54e228082943c4546884db3d636bcf494351d6f3bf191a22dc2daecd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005K.binRYK

MD5	a35adaff5c22d5640c04026d18ecd42d
SHA1	f1dd4ced1d6d269fac7136e8d5c991140090e0d5
SHA256	7b855c8f589004d84ef671dea22dc3ba55cda03f787948244f18f59a74c77c86
SHA512	f29fd44c55c5cf306af70653ff0e28224962e2df599f44bc16fafe4e7948f2b4b85e507f2a5af9b23925becdf19704bdb643acceaa34b825dd5558b1f2efab51

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005I.binRYK

MD5	ef2f6761b81e547b9872cfafca037a46
SHA1	f22108eeb9bc80f389a81c6365db10efdff9d436
SHA256	0cd31f125e4d39133146e554a24b445084e31d4402c14ae89e60b5ec4d743959
SHA512	300ccc3186cfb51da14f84d8dee420ea4cee92177f8ec57aef1256700e8de31057cea89cfab9d613fbe049889a99d299851740d984807fb7fec1cb2aea366239

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005G.binRYK

MD5	238704a5d6d95117fda93af4f340430b
SHA1	4bc85b42daea2a835536eb92a2879c8cfbde357c
SHA256	39aafda87df282999d10b1daa043b3d4659fea0b75bfea5bc2ca68351b48e5de
SHA512	64bb92957d0ac053125bc21de85d915ff00ed719377a24d185a91f6c74b605db243cff1fafe4d444dbfa9d28f75a3feda46fa17c2601d30f5d62d3ad2028854f

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005D.binRYK

MD5	682bce92cdbd1865993a219dbd7538bc
SHA1	f91952975efb9ca0ac5bb4156d9e9f522498b647
SHA256	957a6d9508f2943e3bf8108514ae59830f67279a82f1c1926033356d79d33476
SHA512	50738c41db5aa4190bdc613f7aad90f9cd88fd7d33c8f2f6eebda68e8a30a6b86c50dba8adc2a462010f4f5b328be8404265ce4b051454e1dae652848f3509ea

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000005C.binRYK

MD5	97a4f6e636276d3844e1d64faa7e7bc7
SHA1	c3d1cd510eabe11b9cd4ee9eac060f0621c6aca2
SHA256	163b0e03d1a08a92a7c8c1b58d511f5113fe4f3ebf9d06eb79f33761befbffcf
SHA512	1f049ec5ab199ac299e9d4bf11c2eedd085e88c6929df968778de72381ff877a2356dba568da929927a9051c79c213ecf95d784772bde2a85d4a6d85e551c8ef

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000059.binRYK

MD5	295d1d34e4a07b25c13c878685999775
SHA1	e06f1c770fb84ebda31c8f99e42aa900b686d2d1
SHA256	b00a7ab8e297ea7f2959bc984595bfd8e01c370f44b807d110808c07d5eb2c00
SHA512	c2bd63ffe9a891524a525154222fd324a5c10608d1eebf21a4323eb1ff47e6b3b17effb6928d5af8df7a42e3ac7f572c2db003fc97fcfb687b2c4a613095ef31

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000058.binRYK

MD5	824eeea33a487f71eb1e77f7b85462d7
SHA1	bf266d002acbce11be128cd81efa889c6d697337
SHA256	d0ce422477c005d785ec3ddda0af1a05947512eb8de40065c762186c4b284b16
SHA512	761a303cba11d4570917379db9f62a8d1903ee35cffcc89a5be7788cf7e9b90e14d44c4721d5765ed94d82bf662ecde78739f4844c909536ef7d6bffd91135a4

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000057.binRYK

MD5	ce9cd638ac161dca3b275735880541ea
SHA1	4a5038b0e78e06784fd44b6f4ee028b7ebdf2ff7
SHA256	9df3a0d59aa30a64bd115211d51f9125e6ff2a83cedfc7421ab14b7c991abef6
SHA512	f2a05a1eb0d7a77d500567fb0fa79899584dad8a0ab1baeb7680d1dc5f968cb6b917cadf11e982a2c245d016ca855b559cf6f43c05cc6de6a90a8564e9009e31

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000056.binRYK

MD5	1fba5dee678c5d15bc1ea134c566aa01
SHA1	56347e74f2983a08b06bd292d423e7c955402d0f
SHA256	22b9a2464ad0c6d1669732cca5825a96cbe71bced4e8f6a307217814dd88dcf3
SHA512	3dcdb0f2d8d61e425882f4e6cdd0fa0510932a1bb135173d9bbd797999d4dc84a517eaf71616875f3a879d11e719358dfcb4962bed13a829d699efface2697b3

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000055.binRYK

MD5	72611032c8b2b89c8b9d62ca8b2e63d2
SHA1	73da8a2b3d399e922536d57803ac849b95bb7bb2
SHA256	94e427c9ef29e70b706b2c6756fa1a58191c5958e1308cf437ab7d5c570ac092
SHA512	eb007e350fb26860f3fb24891165e240cb9c07bad7b94936068d0cd0be18e91588f1b69ad5d65463bc296f8fed08787d97ea8daa856e03d59f493cafaa99d5c7

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000054.binRYK

MD5	dfab4d1b35c8331791f9162cb72a6906
SHA1	ffe33378c54ad7890ae2762d3424685d63077d39
SHA256	8cffc4d16192fe93cebf7fa54b4269a152bd2bbc466d5fba0941e69c8188c6fe
SHA512	15acafa0f19ed54dcf1b10ffe818a7d30d465324538dc9a878c9b05a205436f687d9904cb7f8ad170fbcef2f506d20f2ffac5ed2b5c1cb1048992f7fa529b518

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.binRYK

MD5	29ad85e807d551a910c0a1cd59f6432b
SHA1	130289d72f30febf0ccda7cdacb1d0c8304f262a
SHA256	5a648cb90df44ecc0abb0009cf6ff809254aedb5bb56eb5dcde52918fde92cdb
SHA512	cba9476d1733236201f25e163d1d874c6465ad1aa54f0cd2c43bfcdfce8bb2873bfd40952998fffdb88c4461696cb93369a988d45629f2aa8475a291fa27ad06

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.binRYK

MD5	b559174227f6359c27a7399794a9b781
SHA1	7c31592044ba9aa02dbe2b6d5c015bfae6d4ea30
SHA256	6fa41e2705df2f46289e14f8bd47cf183c04831cc0c28ceeb245d4fc4d6a21d3
SHA512	38d5dc748c112ac27da7490d5a73410c6e000eb4c936b24d5c378b5fb343db15867151a95d0a8a63c76b93899c98dc39bf8df6e573779a64605a09a9fdd3a150

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000050.binRYK

MD5	b2f50aabf4ac00f3e9dcd1fc27d74362
SHA1	3b11c1fb31f191eb11689d17c89e42c9c5635191
SHA256	136fc95dd3ab1fc2f6295567d1d987c61cbc8742783923b86be5690981e690f3
SHA512	06fc6cdc981ca93537c9ea5e205e6b57e62faa32de5522783c7d79fb00ded10f131b6ccd0f34d06b5f53d78c78144875cc11bb1aaa618365c9b421d1eee6abc2

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000004V.binRYK

MD5	737cfcaee20f9f007346246a1a8e3ae9
SHA1	34ae0530889f085520fd158d332d74bd3b4269fb
SHA256	dfdeacdb030be1b75a8142f50d909e4a02c2959e00952bb5bfc5320ffbe407dc
SHA512	26fe4bc5053e516c3de4eae85419aa2e966dba910dd347fc4d4e12313fe2ffccaa7b3ff9e8f4e3217ee3611f5f726e020d268823ef297507a3da72feca857d74

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.binRYK

MD5	06ab5000615cf1f98fb2c0db2d646915
SHA1	5c3245183e2302247c91241ad11a09e72a93e8aa
SHA256	b72fed9f08736d634cb0c89734be2ce283554a1493cbf2ec6039d62dee309a69
SHA512	a8bd4e3553a0b4d0270d7a1a2b454dd891c78b5a1e9395e86fb4ad1b3fcfc26a6c10d555eeb5447325e07dd657ca1d2cf8211c3bb66e25ea550958175711f4bd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.binRYK

MD5	8667073eb64baa620ac7963ea898d375
SHA1	de65a240d12e5b7ca1fcfb1bb33ad0ca4d0c29a8
SHA256	d7cf9abec48145699f8adf7c54a991c5abbf3515d164439895a8818f7e4d5532
SHA512	b3307ae82195064f8b3659c86170ec8c94915a4a6bb7416397c681afdd44e21b3fc8c28fe23519df2e89548997ec1332e2896c698abc016fdcded9f832b201db

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000003N.binRYK

MD5	3d6f7a60e6f4e440cb245cd7dd6d3c01
SHA1	e0de52050173b11a8e85dcd9c79f91bf8f84d533
SHA256	053adf751470c5ff2f44ff8ff8a8a1c5955c89c115e2a02e3fb34ed325d1afae
SHA512	337e5b0adbde477cd36a85982d6223b6a2616b93adffa4a248025a6f8046e1969535e414e18cce61d6c91511df881ccac8edbe1a1aa007d87002f620ef235456

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000003M.binRYK

MD5	220402551e9f448b052f6656868aec31
SHA1	29abe47c92828bba34faf625e81a2448c34566d6
SHA256	1c8f55e28f06763750226568204f8c4917c0c72d82c88025836ec96ab67cdbf1
SHA512	7e609f12ff56dd2100ac55eb5862f8232e1e799196df652a6b2409231526ad06ed3e423f0b734c380568b1143b03f18f085855d8fa953b80ca756a21562d7591

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6TQEXKX3\AAehR3S[1].svgRYK

MD5	180472813eae70576b54d5087fb6c40b
SHA1	3fe8ae63a88ba4e9682b9679dc41b7b6f1224272
SHA256	1a6e6a07d8664be85ca8d666f4cfc07a41c02fe29212c1d81aa68bbfb9569f39
SHA512	a3e0fbed903ff7c903056fa0b31ac946863f00cf4468bc48886a9f11103712c86500fce5dcc8a6dd47357a32764771313d56a82115b44c0e9c489491ae698c69

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PGYR01BB\favicon[1].icoRYK

MD5	8bdf286d26de55b5a509cf4eeb3cdeab
SHA1	09aa54300a57d1d7d8994632339fcfce5fd106ee
SHA256	288577e2409573797872bdbefdf31b3010a12d8ed69b6f3df463e436a37aa42d
SHA512	12a5456f554e88aa543b1d72e79c960f5621705a619442481a450a24c0675737bc3649a2b22d2c79bc3bdef5c1dc616bb6c5f3324ee3ea325115488d873a2d77

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\0000003L.binRYK

MD5	fe336a67b26271ef54e3ae686c210b2f
SHA1	226dcc7a4acc39c8e371a01d8b879d0979e9a4ac
SHA256	db1a1a6970800d38383ad8bcadaa5497f990032627367573f3927364a5a9ce95
SHA512	c5c7c1d8160b9bf2c08bd379dc5af1f667ee23623de9f348a319bf567eaba7a072f4db2275b770e410b9188b9848b110c4699f1d266934cdc44f3eaf2522e925

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.binRYK

MD5	6be1cff97417ce14ade782c28f36ce67
SHA1	4d66302ecf710a635ef30ec05706b8f10bd86e6e
SHA256	7ca379443ace4e64d016aa445cbc6159eb679d8700a1df34c6a7f920efc6f0a9
SHA512	314000fa2c0be69eaec91f6e14aba880ca7e96b6e434d47628f5e0aaaa26199828d281c2c07eac7cf5f29207b612dba7ec1d5769d798f60340cbd6400ca56de0

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PGYR01BB\PreSignInSettingsConfig[1].jsonRYK

MD5	74399fde2feca2b054c4d4d503744236
SHA1	1ced1f6c4bc7b4f632c6a58a28aaafc06a676238
SHA256	8d5d2ff440c985e603d1d517d9438f076d3bd94001383ba82dbfc237f49e5835
SHA512	522144919a06c6b5d55cbb34e224873ecdd4d6927ecfdd728d79b7b8f75621ee91962fa4fc5f46975b0af90fcffa03bb24d96f28a2310efa599808d5b0232582

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0RV7W6KN\oneds-analytics-js_54b1724af1b05e2ba3db_en[1].js.RYK

MD5	3aa173363fbdd512edb681c1060092c7
SHA1	7246ebb5bf6467ee014fb606abec65a1aaa2bf95
SHA256	b224a34c86a4433b506abaf6fd911142a789097e426e23e02f463aee0aab9591
SHA512	d3a1bed1912d2548b3e0302952442d5ad25f1b8c0857174bcd6ab49d3aafb7156e89da50f23346b8b803a927ceab0fe614d5f118ea47092ac1dea45deda1422a

C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00004546\09_Music_played_the_most.wpl.RYK

MD5	e477f7a4e48144fd61381afdee0c8b0e
SHA1	ccb0d96232bab68546ef66c0109af556bc10490a
SHA256	4fab37640642736150eb5bafef34c8ca52d611706a92a3384bc5ab8c2d799c08
SHA512	d6e719ae9f7f830752074b9854df56cc32e9c536d9f7689b6a55af1c88911c72b4fc0729b843fffa71f87e65921bac1e20b33c2fe953baa26d871558459cdb5d

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\qml\QtQuick\Controls.2\ScrollIndicator.qml.RYK

MD5	ac693daf18dfe25efd21c76b220b6b6e
SHA1	31140b16b34a281067b0a2fd061a2b8fd69ce4e9
SHA256	1cc60e8d3bf743422a017eacf206355920739cfbdf7d686b8ad8736f531055bd
SHA512	e5a571f78719dfb4529ffc392bb9ba15677590f07e26265ee00bd4c56c0bf3edbe116490c06e480b6b44bb07b66528f323f2b1e7e13997323bf216d03923f95c

C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat.RYK

MD5	0d4dfb92f05ecc8fab2b3a3c578132c9
SHA1	36a4add8197481618967daf1f6b1c89e145131f3
SHA256	089ce7405be869301279643d2e6b3891920c5d1b81a3bfe946563b1eca96a489
SHA512	1d3476f01bbc6bd963e30c79cc122b1e7e9ca9a65a3c33663bcd063193efb81bf7fee64d8595b66ce34eb3de3d2da5ce541e519cac147c84adc7749b2c0e4fe7

C:\Users\Admin\AppData\Local\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\Settings\settings.dat.RYK

MD5	122ee38bb4e2d2130a8778d8e596aeb3
SHA1	981f44cfe0230a3ed174f176054a4f26b523c89c
SHA256	bcb1f1d18e99e894912feefcb9efb2fabbf4a2f1ada9606e0f66b49aba183645
SHA512	b37bac20b4b74540294360a06fac68f6928bece6023f12da9dccbeec0d5e4e14836801abfeda559a1843dd0e401779b1432022677f8b82b8c7dcee5afd55be3f

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240508103709_001_dotnet_hostfxr_6.0.27_win_x64.msi.logRYK

MD5	fe31d5e49beb68037d40d2b3165bf858
SHA1	c45591fe1d62d12ebbdd1a7079e99c782bf70201
SHA256	8bfc9c38f976b0401649cef447daef91cdcca6ce36421c5fff48a5736c929138
SHA512	f3bf526a4499e6e416261c56ff14cb0be2a4d9afa020de8ece36bb5ae695e09fb4dd1fbf654196c57a6fd20bc037c4816e4f299fc95eb02f7e5512ab90d47892

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240508103811_001_dotnet_hostfxr_8.0.2_win_x64.msi.logRYK

MD5	7e63bfefd1679b61e0eab37c017359ee
SHA1	8bad5ae6cb2955e04f106d061851ba5b79a18626
SHA256	8c2aac5407465b7913f5ff510fb4437b9fe6996605dae9ae138634f583f0327a
SHA512	f95c4b79cebd7454e11db7685114d4622dfc2d7319a34d1b6417418b83f8b24c677c2452f9e89059b444f0fba2c2ae636f464986575fee8e4a6fba1b26d1e255

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240508103811_000_dotnet_runtime_8.0.2_win_x64.msi.logRYK

MD5	e9d68d84931ec09fd9e0e9a1f6c7e358
SHA1	23ca5080880a971087f4a556a3840fc05dedf3a6
SHA256	263c2dda4f58984be298828365b8bd389f72feae16e1e6c6b29598aa09a9fbcc
SHA512	943ce3d0b7c4dec3c1aa8defd522cccb208c5a2ec6072f95c7e986374481425aae6af81b36278d3b3b5a9073bd1839bfacfbdfa58dbdff098e30062b3738f554

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240508103748_001_dotnet_hostfxr_7.0.16_win_x64.msi.logRYK

MD5	d7478e4937710e4d633f9f4deba8160e
SHA1	c6b4b95768a413e84e4fe9f4c6ed7584146641de
SHA256	a1c10d0453f912601db3fb19edee49ab80d490ad339888a34a6742ccd8f449ba
SHA512	2ef457e757db5c4c53fc5fd9d163ef4e59055c2acdb708f4c1eb9bd00ea9e2eaf62e2eda1702d8f46f4be4b167f8e0ee9bdadc7aae037c162f7a9b33fd0542a4

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240508103748_000_dotnet_runtime_7.0.16_win_x64.msi.logRYK

MD5	51759f87401998ba38332978a449073f
SHA1	35f6f589494f8f836a653b2162e215fc04bd5946
SHA256	cbf1798558ee6d200db4fc1884454b1912e512fcf3014036fac563f273212a75
SHA512	9525aa174af5478b8fa9c587eb4caf0e1070967bf11f81a6dc0bf2bfe8fe98734b975ad56cd323ae0f60c34f728405f543d4d1650cfd6f7510bc9127b85ce8dc

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240508103709_000_dotnet_runtime_6.0.27_win_x64.msi.logRYK

MD5	6562dd24a627c0b4d0dfa19ae6f125d7
SHA1	f97806dbf01c7534c62940b97280032dbb5662a0
SHA256	2e88c9f5b7b260c123e3b8a3ad33bcba641e05652138a2e13316303f791f30a4
SHA512	1b57d4c768f286b559f7155244d7304de7b56d3c6b6ce1bc0a6ccb1d62aea174f617bf4d50c2012545d59a0f95d3c9d9500f693bb1b9c432583a1826c7b39cd3

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Shell_RunDialogRYK

MD5	c938ec6dd9b4e94fbb2899133765be38
SHA1	91df56691a36f076a3e1b82f86f209d89838d96a
SHA256	1387b4b7d2552134db3260a2af4a4fe5086c3e165dcc5214db87f2dc3f9c6af8
SHA512	4846626726afa61d447c005e1fe029d73af3d10072957ae25056a8345c674da38377092a672487546e16f38355129f3925e4f91fa27bff3e481c8f4373d7bca6

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_InternetExplorer_DefaultRYK

MD5	25ab3b06eab85b797690a8c18fe255f0
SHA1	8047cfa9d6deadd9c0c3d8960cdfa3ecd9e5aa34
SHA256	d8d590102dcae2e3c7975d5965a9a43f3ba883fb93d2180f6ff3332334dea20e
SHA512	5b635778ee9a7a5895a08c959f075924326a4e9982cb27948d572e1f9d8b5bd0bb2951607d37a1b96c3f1b8f64c2814214aae893e37bb6276e412d346db72507

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000163\1715164415RYK

MD5	8d70bb0797f554ca101e5145b015c88d
SHA1	ee48c151620e8baa1b74b44b0f15e9fa5abb1f49
SHA256	cc2c901624a1b5c01cd9661878c6a86b8841d78a3f970ad4a865f278183e77ea
SHA512	8c93495dd876e933a261bbfa59c79ec93d1b475ce4f217286ecf2aab9d905f8ef509a6c986e5d4c429a8c378e478100f98b9c44719b0cbb46aa7952d709ab2a8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000161\1715164415RYK

MD5	5691b89d07614472531359a3e8d32ad5
SHA1	ab01ffbef5881866f3a2ce1db339b10ad66fd789
SHA256	e74d1dd76db08faeb684e4f6971c8bce23e9269a937470c4adb72c595d5505cf
SHA512	b7f5cb595f56d55a2bb6f23d906074a72285772ee44aba84f027fd0345c8b01b4c1632b4cd121edecc0d1b7b226cd0c7aa05a685798120523de1147768e017f6

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000045\1715168856RYK

MD5	41d0998d30c835969d631fd2168eeb1d
SHA1	e3f4dbf688c6e13425e29210d80f7ee34d847cf6
SHA256	37a1127b3d2b0583a9af9bbde87c830300e2c2888bfdce2146e31839d8e1a6d9
SHA512	1e7a78338461b45514996c582eea893181bee72d3dc22fd394bc8207034d415bd44e756effa10179f3423309fc32536c8245fa81b500b849be6fb17a3cca5d1e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{67e6e910-32e2-4184-aef9-eb8f26db7908}\Apps.ftRYK

MD5	02c25f548f4a50868b50d03a2c14cccd
SHA1	b84fce89e24dcfdc88b459e27d28c86665a47b98
SHA256	0c332fcfccda11618bff94eaa15c7fbab0d937314b06562743ee59cbbcd78816
SHA512	0ef147c9e06c4e997ce8e1a360266e2c04bd01ec9d4ce00447a56e4b9dc88c1c8df849f1a45658d61e5e39606cefdfa1a0dac55b7d0591873a8c823b62c77ac4

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{1cad32d0-8648-422f-94ca-a5000de845de}\Apps.ftRYK

MD5	ce1020508603bf282188c02b3cd0b60e
SHA1	643d83d458635cef603077f72112983816dc8cd0
SHA256	ffc5c6af58f2264e98edb030630dada9dad444d4e7ab7256a8556f1d1954f2a2
SHA512	10244caa33fab23c729d09a0414bbc9aa61fa3f18e7d35b5f61da67b0d380e25b6ac44fb443e14f19c14c5bf2fcf22a21906626b098f3713b091e796c4cfe69b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_mscRYK

MD5	dbf83aa90b9997226c6e4b951b6e4f0d
SHA1	3fec0568d8531a15e2808e3109de04d41ff33e51
SHA256	308ef35a8debdc9eeea2f1d3185f3f6cac481abc0e34631e5138cebe6c700ef4
SHA512	ca6341c5226c6aefc1d40d48f827a4ffa58c188b2f7d88c16beb288c9acc563a110393403c69e17aa9a531c6f911977c8a95b3f1ad3e2e112cc90ddfc79d488c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000165\1715164415RYK

MD5	c2866151c1923d1414259a728774027e
SHA1	122a457b58fdce357bcea2d098d6b993772761cd
SHA256	ae664b2189f7c78bf0f0ea32a18d8a2fb895a0c995abf1f6ce57b186cd3af2e0
SHA512	cac8d46cc82cee993228c325c9773499ac1937711b67d1211f0ca12f829eb86a8ea70888126a2c14887fbd445c5fe4819b673969d2d75df3ecd2823ef4a14bee

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\imprbeacons.datRYK

MD5	c45b7dc4346b05c3d328e1742292f14b
SHA1	3ce03319b550bbfaa25059aae5fea9336d5154b5
SHA256	5eacf6ca6094ed908116cb9e3dccc7eedfb0cbe07c2749e5892a6b15df36454d
SHA512	92a59484fb45bafbaa08364d937f353e68a8ba588487c70d7b803ed125bdb9aa4e5c67beec21f8f43b44aeb37dca7d752318a43641de33b419fa6ed7a8451bab

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_services_mscRYK

MD5	2b89e239ea048c5077fdc520ebe07dbb
SHA1	317c460bc7a9f07a0623fadf3a7350369e62bc84
SHA256	889bcab969e689c2f0fbb7e37bd8c97566b8de171cb7fc05ddf5012c0449fe7d
SHA512	dc63f0832b8a7168895ce2f1a4efd2c7116f2af8a041065195cca6120ce46b08c124fde8d33de53a677caf8e138cea2ddfd3a18f968295812cb4397ff9df4433

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{dc042909-0a5f-471d-8ba6-147c25761d64}\apps.csgRYK

MD5	80641fb99860a6b8e3d2d743f546705e
SHA1	966c4a9482ae15d5a9456a5bf8fdd04c4566c3c6
SHA256	c73214b845473fd3cb51ce61cf9b031de1e558ee5e0b6e87e2d2c33c045a38bf
SHA512	f4c529b79f7b98b69d1d600f2eebc95fd7a719558cc80fe8d3c65db96269b53fc5ddcdbfe46d3fa920c5a6aa3e735ff53f6e2db71eabe8ea71f98b1de487e345

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a51683d1-362e-4cf9-ace3-edea80deff49}\Apps.ftRYK

MD5	0593c97fa29658f5b6247f0481d43391
SHA1	fc65b39644b340303d6a1447e400858d51fb51bc
SHA256	a08aa5fe720441c8d7dc04e739505ffda3cef18091b156c18ff0a2b672ad1c22
SHA512	6d9a78cae2902cce9fa4a1881c635e117f1c277e2021b9d1f94e96f9827848f26654cc6d153ecf1e99e2f24fdc8695a7fefd28fb2e299fa01137372b9cb436f5

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\314559\imprbeacons.datRYK

MD5	acfcc716ef0c885bcad2fb0445a46071
SHA1	6f86b3e5ffa596cebba773ec7fc1fd195857ae2e
SHA256	9be94e8bbacff2cd4f2ff7fc468c8bdcfe598e0724c2949de2badaad9e0bf817
SHA512	cef9a2187b72105f27951489fdb19fdcea46e485558c54b16f46d44e9bbd8eab688da7249469d79fbf93e118e52fd42931e26ccbd7ab9ade096a3838f0a620e2

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\340d23cd81614a33bf7ee3491a0efef1_1RYK

MD5	d9d65e5bb5c955dd5376354377065010
SHA1	02b5aca8bf174c47b7215858a2dd012dd8011f6e
SHA256	6480acb157bdd2b1d25832b2679ecb852d75a27885c3c9cafd8b46b9fc81bef7
SHA512	6a5a76256dba22416ec629e580b45df5631b7435233e68820a2f36efaa8df89dac52d6d4da2b57085ce532af5d8b8073fa4114260af87e7a795f7086bb8f46cc

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{dc042909-0a5f-471d-8ba6-147c25761d64}\settingsconversions.txtRYK

MD5	b36087eeecad0218541135d485d631c3
SHA1	9e3e22fb184b4721f7b439da34108551213061e2
SHA256	29ad8ae1f12e96891076ad89a495bc5690c693734157bde652d259292f18c0c5
SHA512	17577b3829c5f12985b913441ee8c31cff8abe1b33aed82e174ae268f36fa6dfeacba700fdd4ff6b081c88b53f2df1ec2590511b2640ffe230aa63be5a96aaf4

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_Documentation_urlRYK

MD5	666a0610f094882ad32df44a9ff9e228
SHA1	bf20e521ff796b16362f3c3413c5be297c1469b0
SHA256	60589483b5f91c4cebed28b6152d75d30e0ade447e2ca781e861f0751d45cfbe
SHA512	e4d64b3db4a2c6baa549444e7d2c9f4b6cbcbcc4674f2a8c0b12c774e9fe8ad739f23185c2b8a4b356b867a3dd932d423d54341ccce53ada72147a219e19772a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\da3547b377854429a132c5a20bff701b_1RYK

MD5	e9705c52d6c13097fc609161ece6ca68
SHA1	aef3766b20219650d8d37042ce92e670e5b85666
SHA256	103863bbd197ed4b504bcf3d7ee2cc076988649459240ee396cdf9a75c9e219b
SHA512	620dabb5f77f0a4cc14b053d93e24477b32030d680ce3c05609bcd7457a754f772a9b0a99f9037a075ad10c950e29b9eb9f62ba6137eebf44a037dce32656f7a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000045\ddf3188aa465479f9f94e56ba14758d5_1RYK

MD5	58b7d6309d71ed15c499d3520166d613
SHA1	960ccce80e43e1472249c8d1ec4d064cf8b0ecc4
SHA256	bcc8ac2a9f8ef608f699c25096740fde0e6f2d8785d5505a7c2574cb4e781a5b
SHA512	cf76666ebcc8206314caa272d0f2d90926e351ea4ddcb2511014cb50d538c4136cfa258f539c7c930bd0331a1de38f2bb4d001d48a5fd1115355ae41ecd6c530

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\f3b6f1c1295546cf880263886f368e51_1RYK

MD5	00e764123b1dd087088d4ccc17bee9a4
SHA1	fa3de498ca2715e7291cb4dfdbed57652774f473
SHA256	5dacd316a2e135c9594d4a1474dc47f89285d37a3be6f9f5e95c16bddfdba068
SHA512	d4dc966778fcca6b39a52111475a85368dd507cbee010d98bb42a6a7ab160f0d3c907aa8e7f454ac8ec984b66e6cb261a52d72db18378bc05eda806552ef520a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\windows_immersivecontrolpanel_cw5n1h2txyewy!microsoft_windows_immersivecontrolpanelRYK

MD5	d433ae4e9e9ea86c17ca523ca2af5a5a
SHA1	c86b0445d97ed61447b0d8882ec481ded3571b33
SHA256	16488a90ee5746ae25a7e6f9588434176d71af3cacf8164098cac2d34e6ca143
SHA512	caaa2b7c655ddfa9bd7759b4f061c22af3e61684e41066bcb5ab4e5457b5c3617e35810c2297907935caccf44e1729ee773fc974f54ceb30c69b4827742cf371

memory/2620-21812-0x00007FF64C270000-0x00007FF64C5F9000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\de45915b4af60a762f0b2591d5295287ed7981bd2724e477804d93701911b09a.RYK

MD5	d2821aa78e63843f7d79cef1abb55c8d
SHA1	1488acb4a09a82593c8a24894592ed12a7055aec
SHA256	ed467ae888dbf6a911a0c3409cb2df58880ad9d35ce14f193eaaff178913c3a6
SHA512	6fdd486c22ce90b5aed728e45e749ba3c8bf6189d27ab023aab60157291a6883bf613980c169a007ef1a7ca73a8ac942ce4ea6375fb635c8f908712e2bc57092

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\70ff3d4a131ad5bd7be00ef0175c91a5db687ae5ad4c96d06a69d2085a72ec4c.RYK

MD5	f781fabdf9e0e79bee8d3f8dc8ffe2f2
SHA1	4724838a375e342ccd98c1693c48927268be021c
SHA256	6893901a9633e6ca2fa34c73b5e94c4f5903732534ff12d98ea8fa434e2f7137
SHA512	f4f42a1da1766c3a39ef8672d4924d01b2b9209f32ef6bed60048518b97a32e1eac70e4141a5c8c70550a7a1b0140db562c1ad03142e09d1a02f38a42b26d8d3

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\e77c06f3a15ca12a0b5248a3094fb6601e94fd2ef31e45f689d3957405469d86.RYK

MD5	4fd55bced91ecd0094f3d6a253522283
SHA1	48a7a4ba97ea4596c2564822a0300e0b0fc0bc44
SHA256	951dc5b2e1f53536d78448e9b411e3cdeb942c5e8121a8f5164164d228d08f48
SHA512	02b70a7fdb5ac00d49304f298112f716a6b0d5d5f321407069f9868aa787230e6def12216af8624b6bca812fd6c2105dcf05ccf530652283072bcac34112f46b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\df0d0984d439371960407f90ea85fb0ccfd3c500d5bb9a55eb375305d2a3b0e3.RYK

MD5	9f9a722431c136e97142e255328a57c4
SHA1	ec24c5208a4e066a02a3c02693f2f0ae18393d0e
SHA256	0421450201ffdb1546528b2e9f91de9b0e7073bfcf845687305d5e976a70baf6
SHA512	d5bc6f486be4ada3ce5ee8592eb7a2732021743b32b10ac1ff632b976ea82495815fbfa9f8cd411c671b899087c326fc6b9e520e7816700d98493aa488cb0245

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\db3e2a0dfacd9c43e7636fedbdb46e65f90a7e290d4e40fa97f28ce82e35f6dd.RYK

MD5	1e67d29846a376aa6c69f311574efab8
SHA1	1cd47602a0f4982347770cba2b787b7de6606aec
SHA256	d1f407c839bb091158032265815ddb643cdbdd3cb6ffe26eaf464e9173dc86d1
SHA512	6e796081817b5322a2669000ac3066c3aa4b4d74ca3417f8d3d95e1397e44ac8fc7fb0bf21d72047710434860e0dca3b3a2971506c88ea58126249c90dc426ac

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\82b2a6e3845d7882014a9163a68b36151d22befbfbe4ab32fc70398b51a2fbfc.RYK

MD5	bfb27350bd6650ac3f9de00d7edf35e9
SHA1	3353e7ba84cb7f832428d89688ed4c460e1d08be
SHA256	5ce699b9a932f26ba85c410d59280b80da9415eb3d1556f9d9732a5dc9274ece
SHA512	6d05b6ddd8c3af5882ed3fe50444f1ed077432deaf29d764740ce083366722a1f84a8a4e2d29d9818790b3a87d73b24fa755a93875aa52a3a625de792e3dcc39

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\74a3fd35b829e52e6ca53adb996dd9ebc370f7d1d5f6ad09308d8fbfac3ef454.RYK

MD5	5c73e24100cd453df0cd004af7c13930
SHA1	240c258d9805148c56bc2c32df593bbb019172ce
SHA256	65fb90b3eb9ad2dd6efd15245ba3c8b8e9f710a85687f680d3905f092c5cb18a
SHA512	312160f1dbb6c9369e2105bd5f665b72457a3db29b07bf1137802939720c93fffdcd061e02ffd6d1b8cac9c9182cf8205e1626028d455241b105e8ead382b335

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\33c9ed0b9a711e2c47ff0001a48e51910f0c1d06706e44cef8a0f1849232750a.RYK

MD5	041bdf891a17b138f10d5b10d0b671ff
SHA1	d33322855a8db85b1fcc758e3802b97c6c10eba6
SHA256	72f4a21b1f8db602c69511e14d18892cf6dd0fd2b3b4a490f2c4aee7e3df6005
SHA512	b3684623f2adcc7573ea9f6f6edcb457a01903c204dbda7cf6c52fdeee3eecc9094afe68ca38312a28affadc81eba6106dcac31147382edd0ee5225f4bc5a1dc

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\2b6ce3bfb2d3298c3335f5b0922cfdf408ed43bd685ed194ce8dbc9f50339e97.RYK

MD5	b557d7b2ca90db2df397eff049a0a168
SHA1	dfd4864b964b2d5aca8a959525ab5d047b0331cb
SHA256	59e831af22d17e8e85f8bd0b76680ad075e1b628b6edbfa7f6a6d408bed1f479
SHA512	33a82ed747b8a149b192aeef581d446b9a3296f72587c822a691612799b2f65c6cb76f172ed24deee6c2dfd85166e8089cdd1f5b3a60e7482a7b33def6692fe9

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\23b0b99cf683073623dae791bd972cd3330df7677008731655e4a278fb35deed.RYK

MD5	548db3b7b8bb82e7d54bae61b2e301d5
SHA1	ab584a2d9fa430d7b76b624b8b2a6bb42a1eda47
SHA256	ce4f8c65887a18c7b73a4c9f9208df9494afaff1a9af1a9ffbf76a5f981b315d
SHA512	54ba228732c740b7a88a937938cbf3de335159bb4fa22e605b9595ec4c3b860088493463410db52461312293de1d6d1fce4c1e131cbb02b6108abc1e1bcac1d0

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\25b2fcee4b577958f2189d2620b00bf863fcac8f67927d11a92adafbe4ec1887.RYK

MD5	941b0e67a3cbcf2e2cbdc271031239e2
SHA1	b641756f7266ffe4bd3e4ebcf116aa31a86eaf76
SHA256	d00cba132339ae9896660aa609ff96e5fec04d23e0ed475bc504f201748a2fa4
SHA512	48e78dfb821bb41b33dea05d8b235997e36ff71757b6c42b276d83f1f8dff30f6843cf91c1b4b53dd3d1098630fbb57d0156cca35ab6c2abb6b5993affddaeec

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\02d10d8f3b2550b1ef1c26446560bb701c8a38270558a230195db09392dbb207.RYK

MD5	956ceab7acb5ecf4599e5ca2fe114179
SHA1	3671c7f8ca0addfd4c3c7644328dcc3ff4823412
SHA256	86b57a768525e144873357d8165b8bda706849d1f3ab9f7de3e847823c1ee1b2
SHA512	ee908051441c25ebcf623be9ca159f969ab0a18f0d954e37fe1f8d57e59a2ddf878a024542e2afe04c0ea40cf6a435713b45f62862057cadf25a42ca84b3340a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\6c2e94ca6e5e1623f26b6ed0943f5fd3da7d5aa44703003f51decf8a377497ab.RYK

MD5	94f516a5bb9b1472d0d68b5d65489362
SHA1	791c731c162f2d85d9e90e78744552cee3f159cc
SHA256	67ca3271687b293654ac1db015fdb4c155fed66df8efe8e449abee0334a0d2eb
SHA512	5bfca949abed452ac8bdafaa08bbb18a0027047321158e3d924422ce52ee79f1eed1c00366ec0f157b8a5f2ea60f306cc501e3a2b32b885cdb3bd9dab97862bf

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\6694292562b8278f722fccadbe11f33bd66a4e3eb075a2783d9a5c5736738099.RYK

MD5	812750cb393f222ef966c324949d46fa
SHA1	a826a9f95f6c9a7c16488cbb664e07cbbb5863ef
SHA256	07b7183d8cdd86a44e8fe437a242edc06e4b5c3137fbefa93f5474f8c382d441
SHA512	2e183dcfcbadfee4c6f7b879a763fcbf8224609ce0a71c989a5855b2497f9e1828b1ca37927fa2928ae0dc05a454098cd56d37d2e83b28f5b75e8a89403cd553

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\653cc8ceab0512ee708f220e332011c37586cb12371c91665b3e16828b9347df.RYK

MD5	a5f6fdf2705717ded4fe3b049e0ee010
SHA1	0df6c9a3f4676994c00ba2d1a405547683f9fc5c
SHA256	f0b6f450ffc6002f76037bee330627d905afecc541b8c68bf5e5403e6472561f
SHA512	0ee2fd6dc6cf578632f00e345d49ed8690d26aa829982359dec09d739e1eb3c0e3850b56580d7e6de5ba57f7456477681ff80c3daac05d87076ed0966442ad79

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\4d37196bc735aaeee1b7479ffd7be02fd8efaaa4175d538e592c451486a1643c.RYK

MD5	93d469fd6f4f6aad59df274f6a6fcab4
SHA1	a06b9bee5fc31e56ddb8fbe7a00a865598b9ca19
SHA256	5223de48542b4c7c098a6839b3a9f3b088426c8b9450f00ae8b478716ee813e6
SHA512	21b29f22cdbca62b866d3df879f84c431b785cb8cb74811190f95f91049da3ad5ff6b7cf2e4e9c4ad930a72bef3de575bcfdc8520803bd40832c9d8e4259bc7c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\43f590a4e1c3925e7ca4f328bb0a96e53c3263c7b970bff556a1264954e67d64.RYK

MD5	21c32ea712e4fa280171eb5cf9f48886
SHA1	b975214763e6bcb25dcc936e0e87e114c5bb4cfb
SHA256	34ab7c0d482e169e60ef499cae32bbd67651c16be7a0144e4ac733004ec56328
SHA512	fe3a623aff2c339e093134c5da3c93ae00c9567e7050d50131a65549d65db13ab56287ef3566165581104b14368368380c584a874abf7417f88a5e69a78260cb

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A.RYK

MD5	f6d0f3733e87ffaf270baef8eca4795f
SHA1	1af481921d8aaec5a72f46691e1a92863289d6a4
SHA256	c15c2eed5b44d3a3869d632a9fd0b76c989101846313d20dd75e9319df627cfd
SHA512	43bbf9e42f6c803bb928904343649797bd83a7d6e4bad59700b4e9b04ab2784ff5305521292b514706a7ad36d4e7463c4678e77b30172d7bf796e2105a04d74b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53.RYK

MD5	9585cf6f9d3a13dc60960569ef695fb7
SHA1	e74200211cb5e95b12f5d36c164c8ddf9103d9cf
SHA256	f1d24433b6957b102756eae41fb4fc018206259d76c8a7f4b5259446b30caa59
SHA512	882f5faf88bf5598333d366d5564ae7276a6c76e5d075227112563ffdf5c15367cf65a999ab6ad946a8b18fab298ab87380e1805d887cd19c50ff3420bff9ae6

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A.RYK

MD5	52df3a2381b5a6ee8e7e6a6e8322a609
SHA1	f1255c3c4d2ac92100f30a27609f86b8afb3e0a1
SHA256	66a49d3c2074ae6ef76bd989b578dd5ef6cbd39689b109d00d538144dc1ea806
SHA512	5a1cebec7c5edc4c02d4388fba86b2499590248fcfbbe406c4bd7d2ab386f7560ef7b9818cef3c521bc61f45a65aa3658298938c9059d665516c87587e5e8570

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53.RYK

MD5	f9fa7ecb5a5bbe2fc4e2252594b4a86b
SHA1	ca421ffb6c0f5af2d85fe169a6dddb4d6a5bf4d9
SHA256	ff76a8395fa512a19ec4c4d0787f1bb8f86cc47b77ee368b8d16e35f91461ea4
SHA512	c0c539620f0e4847dc9b6256cd135962a0a8ba3d225d51b522b0ab50924c5e3453ef79799ccafd7c9bd91453ba652e25286984182f03cfe7b832d982bd66c2bd

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_VideoLAN Website_url.RYK

MD5	5644217211e041fb52bbe1bea58b8eed
SHA1	8a5aaf3bdf1daedff8a18b81d9ed0e0d8cdb5c19
SHA256	9e5febd21f9b9f82ed552e757259d274c4a5a3a5d62347017cb4d5162cd3abff
SHA512	b34b1c92706cfa1af277126973238fd2bac28de39d4578da916d9e35a56c675be67469d0cc58932165515849c168c08a5f1e4a7e7211bdc277be8b6e6afa47db

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a51683d1-362e-4cf9-ace3-edea80deff49}\0.0.filtertrie.intermediate.txt.RYK

MD5	7d62daf5ed2eb3e6ba954ac442d64b4b
SHA1	900df0bae1aef9ec7f13335cf07a5366c3c4fffc
SHA256	0638127f736ef37e7393ca244f62a47251302690ece87d8037d0ffc7319f6405
SHA512	faf5086100771bd0daf3313f7113fccae4f7c8782ded4fcfdfb49213fec273902e22e6f7e03c64bcc8cd0fadc6fac340071531674a9ae74262e81ecfafa23845

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{f9cb7ceb-dbf3-46fc-8f32-f243eebcb148}\0.0.filtertrie.intermediate.txt.RYK

MD5	759fcfb96d3cb43595e80404b21cc659
SHA1	14d99cc0bce08b6c98acb77b4d3f953cb384dd19
SHA256	1740ae5c5794ab3d63958dbee52a55ca9b9e119afd4339c51c34a8dfcb9de6e2
SHA512	dc066c3b67d60e2649eaabf3cded8d916bb7d95d4407c7fb1a7feeedf6f31e0c5bbfb14ae1a05ac8e085c344ec9806f3aa0c357debaea6a84d3fdde120a4ef8f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{56b5bf38-251f-43e3-9708-f4a07f2c7d36}\0.0.filtertrie.intermediate.txt.RYK

MD5	acc8a08fd4d3f8e922e4bbd2c5bcc696
SHA1	144fa90be98dd0e335d30e379432b93c139fd05d
SHA256	7088e649ef28736cc5adb8aa93f5c1f0edd56cf58c32d052856faf612bdd70fc
SHA512	c7b4bcfde01514fbc0363203ced872793adc0236fc8337e35e4b76ade8a1c07de28c652748549a039bd8d694d45e12db7a1999a9e8fe5d88e7eaedc533ac2f45

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{1cad32d0-8648-422f-94ca-a5000de845de}\0.0.filtertrie.intermediate.txt.RYK

MD5	6ad9e101d44d8bd1f906dc04b20512b7
SHA1	49b08a0f95638054060c6ddfdab55fe184f833ed
SHA256	cf03692938dd4a9b89629f26ab111c8d3e3e22032de6f5227332ff192f0d854e
SHA512	58acd2a1b9228f59e56230db444175874f25edb3d712702d7441f7ecd997665fea10bf145494d7e110ce874706840ce309cd59eb95407f3d94fd8cfca1729cfd

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{67e6e910-32e2-4184-aef9-eb8f26db7908}\0.0.filtertrie.intermediate.txt.RYK

MD5	67a724b5bd3c9b120b5d925b5b980614
SHA1	cb487c908a05affd74587869f8e4b100f2af34f6
SHA256	718d308f60ba418f81137efcd521c2c77e21c2c0bd731b49fb956294727076c4
SHA512	f84508f2d3a0b4146d53a6f1681911ea8f19dd37ee6e840f4e929122afca64490fcba3655c73c821ccc73552c42b31fd1f23c7d7b21555b0b31368e41e52dc76

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177.RYK

MD5	c2caeb7ef0f5321247d276053ceeab1b
SHA1	44c1d564a720283af548eb6976d485df89d9ffe3
SHA256	3d137df8965bc14559b4cdbd8afae931edb0e327e4e9bc1da61f72cc719fa6ea
SHA512	d0a406e5c427e3e3fb9288690af43d1db0d21355ae61c6839cdeb082a1cf532c91475bd9f585cb0a2a806499368d846c03798ae6c016ed1d0f429c46d871310b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04.RYK

MD5	16dd4e74cdd5ffa8ee607c247119fb1b
SHA1	4830ad4ad4d3e3fcc10d734f4bf9cae8af2708b6
SHA256	1e68a0dfa3f437c1165f39c3140b5b859bd0e98745a9c3e020d747432c559918
SHA512	611f1d1383d0a05724435c88b09c99eb0f24a6e54f98b723039e8db284145014cc11f64a675163e9713afe4e69ce8b005b7582d1f6542fe40811cd83e2a2fb39

MD5	7e1f8d76b56570dcf9219001e1c3a80f
SHA1	7607ca168c1290e1feb16e34bdef1f2f1a3f1795
SHA256	009883cd0f2b7c2ca828b89f3b51b8f01d8c6db31ed95dfc78be44ca731d6822
SHA512	93f925968b217ce1805686514b9fdbf3ba27974ff96ca63cf4c99071663bc3d5f5bb940bcfc0006756048acec16796c608352f05447dc75ad1e618fba7b96f53

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04.RYK

MD5	da9619cf63e007d2c24da445a16b4e5c
SHA1	39965e844788208d2e2edb3068f441c158d3a0e3
SHA256	574a660a9e451770965d9b0da97586737e0441e7b50842a1f26fe0aa7294a121
SHA512	542b1ac4ff9faa87c301d17a14152de379599362b4734e9c11abac3574099b303b10de706472fb09b6bf6dd3068ccb63fe3a7541d10bcd5fd9af6ac9ba19fae0

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A.RYK

MD5	4d8bd002855b310c523439715be89041
SHA1	1cd267700975e43a7aca73adad57eb85cedf711b
SHA256	afabeb76f4bff51ab6e660abae913102f8ec55fb3fd4711e3bbaee218e6560d9
SHA512	bbf86322db1767550709971f3933c80ef495484b53bc822dce6b720200747e5f161e3a32d2f2a661f76c024252c6da55559df6c2f1c8ff0b31b13ca0cb110bea

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04.RYK

MD5	6b2938d031b01f3a33b43d671d2bd5c9
SHA1	54a15c9669dc1697b66b531164d86fd2c45cb296
SHA256	3fd3f53da5973513aa7d16919aba254fce3bc31a70b9e88428e68b25dbefa35f
SHA512	f654cf668c0b0f85ded07c6a6e1c90c5b3246a07bb673afe8a03a21045e2fa8322c530e0f86d69b55c3501e29986c6fdeaf99ec74bde7abc7ce0cae0eb3ff3fb

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A.RYK

MD5	cff46da98f9e52795cf5320c7b47b28b
SHA1	ff2dc291bd9c460629e2164bef25e13f74b817c9
SHA256	015ecb1026acf7cba8dda5b37a61d7920f979831b846f5748889e750e6ae0850
SHA512	c4ec93cc51b48fdde67e1475f9e8af71b1d95a8e513c506cc3a5a2b351447add073760dddcda5c715a78a42a614bce234a68263f758b855fd471666f65ca7bbb

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04.RYK

MD5	7f2a67efa5dcb6480d674bcd956bb7d3
SHA1	58fd33af08d1a2ebc9953c7585543fd03f982d42
SHA256	4f24bb57a50ffefb3ba125631dff884e93461d514c004b628d7e18178e3d9e12
SHA512	8161baeef81e51e7048fc90ae89f53afcfe8dcad399931ec31b4bd7ab108a15d82895c40fae0fdec098b5cad2ea8bca7c44f3068579aee6b0dbdadc4bbae09d1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868.RYK

MD5	91880bbbb85318e4c16ff103252c0e72
SHA1	0b14f47711465b0a64fa41592459a1ce4bf7043a
SHA256	cae82a59accd505341935d3786e782f3575d91abc45650da491a457a2ed13a5d
SHA512	52cbcda049cc2d4815d30711a913288bf0614f01c028cac11e2a29175b1175b314ca163efc776902e2a4e751cda6e52327b3a87f4caaf8ffcbe8c62f4fe4d700

MD5	8f8729786ecd8efaa9fed1983c501463
SHA1	f2a9b6e4206bff8d7c062dac4ba8c87eaa5bd007
SHA256	75403f5256f20003854886f70d16c08262c16b9e4a04a2779d35ec61b79d775c
SHA512	14e48fac378efa05eb44d7a60f72e7ebd61191230efa2def3329cb3b7bf94d6cb6921dd805900ca03c64a7ef82663c58d05bbea85cdeb5147b634f3a97436749

Sample ID	240620-pkx7esxblh
Target	tmpz3o4tlol
SHA256	795db7bdad1befdd3ad942be79715f6b0c5083d859901b81657b590c9628790f
Tags	ryuk ransomware

Malware Analysis Report

2024-08-06 09:20

Table of Contents

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files