Malware Analysis Report

2024-12-07 10:00

Sample ID 241114-pw1rpazalb
Target GK6X Setup 8.0.1.exe
SHA256 a13032054265962b2faa5f557ce83045014b450a4343182fa50c578be8f00e68
Tags
persistence ransomware discovery
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

a13032054265962b2faa5f557ce83045014b450a4343182fa50c578be8f00e68

Threat Level: Likely malicious

The file GK6X Setup 8.0.1.exe was found to be: Likely malicious.

Malicious Activity Summary

persistence ransomware discovery

Renames multiple (181) files with added filename extension

Renames multiple (148) files with added filename extension

Adds Run key to start application

Checks computer location settings

Loads dropped DLL

Drops file in Program Files directory

Executes dropped EXE

Checks installed software on the system

Browser Information Discovery

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Program crash

Unsigned PE

Modifies system certificate store

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Modifies Internet Explorer settings

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-14 12:43

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

151s

Max time network

162s

Command Line

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe"

Signatures

Renames multiple (148) files with added filename extension

ransomware

Renames multiple (181) files with added filename extension

ransomware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4050598569-1597076380-177084960-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\electron.app.GK6+ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\GK6+.exe -- --openAsHidden" C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4050598569-1597076380-177084960-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4050598569-1597076380-177084960-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 4824 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 1464 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 1464 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 5932 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 3800 wrote to memory of 5932 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe

Processes

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe"

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1752 --field-trial-handle=1860,i,13939210734837608390,14035708424201505120,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --mojo-platform-channel-handle=2184 --field-trial-handle=1860,i,13939210734837608390,14035708424201505120,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --app-user-model-id=electron.app.GK6+ --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2424 --field-trial-handle=1860,i,13939210734837608390,14035708424201505120,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1268 --field-trial-handle=1860,i,13939210734837608390,14035708424201505120,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 104.116.69.13.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\264d807d-6156-4c51-a375-6465acfc884b.tmp.node

MD5 83c6e16078808b94dff5686aecf119e7
SHA1 c0e4e7c859f3d4a052a9338a9052aabc1114c457
SHA256 f1a0786629d4b767fda448e1501eb44254aada2d2a4beab5bb9f231c19f9ac02
SHA512 213deafacaebb78a7fb9139ff98d93a8fde569cb6abdc3e2926384ca97d069702b2fe0d5606626634b5ffa940dfe5a6c5bf01febb250e9559474bcdd42929867

memory/4824-7-0x00007FFC2A830000-0x00007FFC2A831000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\50904efc-a942-48bb-b852-a7963ec1006b.tmp.node

MD5 e02b8dd62465b60e0e3d21c229bfe0fb
SHA1 4d39a70380063d41ce75e0f29cc8a5e18758b98f
SHA256 a7484ce78716fd576685c9ad3573243915c87c604e6476e7e22c83e6c3635686
SHA512 242386e4432b798728ab521c885a5ee2ffdf202f312a271bc6081bdd2c5869b86408cb43620c7ce123513c1f694d2aa018dff4cccb49222e20091fb4b5af9222

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Temp\d8e810fe-f0bc-43ee-acc3-dcced869bf4d.tmp.cms

MD5 9ef9343114cf570bd008b97b89d7f195
SHA1 729572caca273d9a3607e4e811963a0e1c1308b4
SHA256 a33dae0f2fd67e050bfdb1fab62b7fadf66dccd94e5ff162e346d907693b2810
SHA512 c56234ee60c3176b95a1784c68a42c3c58a923598982b7e6db056bf17cf9c6fd020a646a935f5fae8d3aa0f9e71d6698cc17ba3da4d5b2632f6b5166c6d597be

C:\Users\Admin\AppData\Local\Temp\d720e4f5-d657-4d98-bc73-cd054e7743e7.tmp.cms

MD5 58a90b5e6fd8f22f140dfb8dce257e82
SHA1 a9966b0f80a6db0153dd011930245e0a2dbc9f41
SHA256 8eab484067790790f71bf211b4445cea31e19116b9baf7dae810baa258f24286
SHA512 8cd7a0684cafde09f3166b61ca3139d55dbde6ec6cd6b6544294fe83b1ef9b0c2368613d4b94e91197d1867d8344c17fcdb04266ea47821dfe005affb75d672b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\26E7B56E-E955-4607-9B11-C4522CE99A56.cms

MD5 214f4b460c70671faed160c0b959f8ef
SHA1 4b5f024e51bc87b07afa472ce8b74779936e846d
SHA256 3b5ef59a04da1e78553c0a3f2e98a51f772bf14ecc15d3a7494a8b4973ce2ab5
SHA512 c6cc02a934e5afb5a8df6cd0a12bc24008be48a890a7fe8eedff06d82de7fdc2a3a6d198f7ef2f94ef59c2f89e8d923a21d343e0c1d6330e38c1a54325a201e6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0A95F28E-B5CA-40fe-AF1D-DE50CD6563C9.cms

MD5 7b48b0326007d6e24143c4456862208f
SHA1 d29acdca1cc23418521f07caf3351b0d1b294a8f
SHA256 8ec50e9f747e8d2d85027f13c8709ed2da87cf22007734ae81f23f99fcfa2dd7
SHA512 8cc93074179a29c75b1729648ad9f0db26ab38bdfe603aa29ca29345523cf9ed108f79175870f295e7b612027c2e0c5b6e64824d11548329a3ca1482b4e072cb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\112EBE2A-4356-43e5-9228-1F05492DCB78.cms

MD5 54d47344b978e4569e16de7f9771b26f
SHA1 867abbb957cfb55d8bfc5100a775d0fd6e660295
SHA256 0583c6338c59bead64f46711f3dc0fdaa7968c587ea2b5a109fffa270b2c1598
SHA512 12aa2ef0afdbc3af2a05d8a225f71d12c524ccbf53f0cda627d21b0d55aa72fd8d1193a6aac92ea2595706558a49378efb12dc13cd96ee5c76bec13ff84fde3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F2C08393-F044-432c-8C0C-436DE1DBC948.cms

MD5 e204e1438b5a3992db73055d0a7fc06d
SHA1 2f0331dbebcba8b808cb56b6ebd702c70fc13d47
SHA256 0e89b49bb1e41d1b8f0eb43b7d338b29198eb80039e2bb0b6683f04612ef9e9b
SHA512 36cc6ac3101302599869da0391fb02877b9d73ed0da561ba6d9eef10aee6c0c9d6fc2c54a24439351d4c8db73ee9ca3e387acf998ee6ba7e8dae411dd1a827bd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9C5BB1D6-2421-4100-8717-593C5C74E230.cms

MD5 dd116109cf77f52d72de67cbe0b2dea9
SHA1 ee746b18ffcac160b55d33f6aa1a02510f7ab406
SHA256 948d53af74292a1d05b03c260f0348fc9553d676dccdfc33a37355bb17209551
SHA512 fbc62d0787c9e2875420119345ded9ed221dc53675149d8e2acce946ddd9dea939a7bbd9957aea917970e4d2591d7e43d4d39f7608cc83d383b0db1749a1aab6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9878D070-EF62-4493-95F2-3B115AC94747.cms

MD5 85935a1d8de22e627e3f2f1d99ae6236
SHA1 04fa38e7888ca0da0b01fa1cb97cb43aa4c298ce
SHA256 c2c2141bc346d50eb86258ca9622e9646d074b141d86c31270652b031051486a
SHA512 ed2ec4383698679456750330f67c17adb1cda57025636e51c31d600ce84b50e9b87c91ff228baa5e11537e1dff9d5912157f5ae13119a39c2bfaf39aee288148

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2E81E591-D531-4ae1-8FAF-935EAC4B1630.cms

MD5 a543811038e269bf1f3c90b731b59d92
SHA1 4b582fb080dbd697186c5f2875c9490013fea135
SHA256 583376588657cd760f2cebaf15af2d7c10769dda1c88ee5e7b343087c24b95b5
SHA512 3c445df6d1e953d454d486a43d107b9997171621f7b29b5dc19bb13213c1189f59ef0c49367b65626317ebbde5e84c09212a915724a90abb104f582ee115816e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\11859524-DC42-4fd5-8A56-A0FFC66F965D.cms

MD5 a008f27c7cb9cc98d1faa83e45aa6715
SHA1 cb5ea0316b3e782e2f143a16c80d672b761afcf6
SHA256 f14284bcf77e7f6ffa050023527b9f61afc92ea786ea87bb61eb958bbdb9bee7
SHA512 64857d844aaf23dd6698f46698305a85cef5ddd4d059b1abeb5afebf2ec275f12ce8ef388195df284c5e750c829050b372bc30ba869c309b6939e7835d035d4e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9A3793A9-013E-4b34-A63A-7DA572985CB4.cms

MD5 263967370ebe4d79e9203e299108526f
SHA1 9e5cbcf5e6fab95f619bb7b3214ce6329adb8e87
SHA256 d9b0ea42edfc08b1a3d8468075a87ce46e100535335a79ce63dd2970cd7c3cdc
SHA512 2bcc246206f590af2622f16100376d2e5ef72a9dd119cbb5589d8e12ecaa3bd65ee37a9e3c8cd2321e2ce3189f01875a77cbf100a60549432dc841fb539fef65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\482B5EC8-1B2E-4a0e-B2E1-9195E9E8352B.cms

MD5 26a85fe793a1723ad5bae43fe837f7a9
SHA1 79b2b3ad602dc8a4750c0aea90aaa21adf97d76c
SHA256 10ca9e5b6bc6fb8b87b2be7111fd14cea9332abde81172403b700f08e749a894
SHA512 e9ff651083a9d9739bb6090985e1accd631665fd0cc6f50dc5be684c234b5268fddd23bd11733983a3028af69742cfd64e94f4bdc55e22c8881078b5a390a85c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AF3DF062-72A3-4958-BA22-D3FE36386D34.cms

MD5 15a5ab4a5d0713f5690562de2843f893
SHA1 7e260232cde3e4c8ec454169160a3d2f41d9fc95
SHA256 4061d15ccc46dd74c4a1bf44441ca984407e70a25c69ee2aa7c7cd3ef16cf98a
SHA512 f2b07c627fc440921096da0c27ecd26c7b085e5555c4177ae2c470432112b1f76a7e092e5324ad89ed9ce09430604ca116a640b61658a39f3a1f729b1282952d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C0C747B1-A6A5-489b-83CD-CE3777F47553.cms

MD5 013e9369f2f7bb1b8e96669289892cd6
SHA1 14b02ada923fdb3b44898c220efe9a29ed7a681a
SHA256 96a1c8d9465d486152cb8500718af86dd68366d3fa1f188f97e67e6826a43db3
SHA512 e6435324804661a4b1150e5e44d05145659e0cdeb19ba60909889598c3b5a7afc63c2ab8ff95c3ef8e77ab81ce6a0025dc99151f742208ae38ff3cc858e73100

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AD537001-8B84-44ea-9B31-8A2C0D42B1F2.cms

MD5 91848bcafc65d8f0600b8cf99cecf1e8
SHA1 9fe224969d197f7b2952e5177f2535088b983f5e
SHA256 6837b94ba88f9523c41a4c2a8f466d3b389a5d517224b47a8fb0df0bfe468f16
SHA512 90e7bce23b1568315bdb6970f1bb92b3faefdc492b4a4307f67fa556d6f3e73876588e354b537ea435c9cd4ffbf080fd7c5c374fde6edb0c4e4c059c321b04c7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3B3AD8BF-62FC-4a21-980E-BC84715B3EFE.cms

MD5 6a4318716b47feb90864c45e539b74e1
SHA1 cd40c87af584e1d73bb50d91a6034e3421fa0e65
SHA256 2b5ab7db14f26898f82761470f6b4ffae2d0960ff151a289780d1fba2b601215
SHA512 8283c0ecd5f7d6e3ae565922f5e91dea9681b21c7f4df521ec395a28b9ecb3be49cc40f3ac1b3725c2ac49689eaf9c4c718b0629b8b16a8f505c2f3a7de38c11

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\24722400-D906-49ac-B7D8-5F5A83E6CE2C.cms

MD5 13a607857afe72eef216e576f6e9b382
SHA1 f45683cfdfe9ce956ddaa26fd1e87eb3355bcf08
SHA256 66c589aab9db82da9f2162eb612bb2955e97888ac67121ebd3b4c75d5a39eef3
SHA512 d247f83dd4ac02ec5dab884e67e1a265e2b9cf62f80a44058ec6504ec0d8d67c5e3cd2260780e7f2907478b52912cf4310da34d634c9b1852825dc05124fe59e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\732DD357-8070-49cd-8B04-F671E320A354.cms

MD5 a989c84457664b205403276a8d718bd7
SHA1 c3328edf83a9c29bd37c9fdfe18ebec4e03c3ccc
SHA256 4afae08fee281194b37a4f558211ef3545eb0206c383fe246b689e922d4b4d77
SHA512 2e23ea583ab9d2de213c571b1e7ac4123551d073d672f851d5939b3928eb0514c0e592446e7befc7a77d9d7f96c4c4e462fd0779806adee84c2f60397f9c61df

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4810101F-E0DD-4ba9-98B8-9351C8F558C3.cms

MD5 6a47630011e6a5b8c71f73c0f131a967
SHA1 543a044a5a041f640bc92342e2b8804faa6c726c
SHA256 13bcf6338b19a322b2e9b892a47a5483c84deb428bd9a2e624edabda57f10fb4
SHA512 9d488f06f08f5111881eeb3a214c040074765452437663c4d5751b16767519502dd454cf2b540957428527dda7ea5de1db114ca5ec323f14235222a0cc29cc45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A3A0BAC7-27F9-4a05-A716-0030363F1E6A.cms

MD5 800944aa227d47d82fe4508d97ffbcf5
SHA1 a48cf020df5f994c2b5c95f17506f4ecd0cb8204
SHA256 c4489e5843133a0720842f3e4da7673485f45fc276ebc6cc6f50b150809acb19
SHA512 02e0b3293a1afb84bcfcd24df7fb4551e3593d153874af25e2a272d76b5f15fc293ec6bb6df7103e5e171e694e2c02dbe47b8179d5ab5c905edf706a81485059

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2AB0AFBB-A0EC-4878-8F2D-90CBA73BCE9D.cms

MD5 4c933895819004f78830019e17254f79
SHA1 0195ed6493a5f07345ac846358eabeaf355a94fa
SHA256 87bab2e8fb8a27954d404dc86680eb446558d7aca074f2274f2631cbb1e36d51
SHA512 d336fd146112f87b860b3212b97a9cdf4b2b6392b22ab87db61322f3b32e16a67bddfed9758372cad4e65192dc6dafc0a5b1a2b34385e8c23ecc19beb71c187a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8FE9F857-4658-474c-A552-17D94B0F4DFD.cms

MD5 edc7a0efb7002e049252c2bf251edd88
SHA1 11d1983fe3c89ea736a50d595979cc3f45eb37b0
SHA256 3de47b81f924150aa170f193f864762b54b440f31c586d729253669fb1d8ae50
SHA512 36274c3c3181022e5cd6fa9155f74666eede8b3b63a85d498657dec828ff1e83ff1ccfe7401c08ac1c632e9de94b94b8614bf88b911db4c3e84772b305537b4a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FD5CBB4F-F62B-4a27-9093-D7FF33CDB7FE.cms

MD5 b26acfce540a5071de6bcd89e782a840
SHA1 28a408292fb93a6e0ac2e089c8472e724f7c72d6
SHA256 7462482476ee12f9c0ec2a143e1e8067f2286e908b4823b478566ba02677a407
SHA512 7737e1296d952e317fc3f8f866988a7b6a64d45708e3ee860bad849f64972dc31c502d0d3a254769fa5ed6a277f3ac0faec835bf0219f7b9175d8dd1e990db3c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7405B67E-9290-4638-8EA0-F7D14B18DF4D.cms

MD5 2d89dfe16a1010fcd04abcef5503fec8
SHA1 a7ad63ad6a98c3f5c655b0b6c53f38eb9e2f1429
SHA256 c40ff589adf58f225117bbaa5c51c85891bdfa0a352f35b6497dc202deb7a32b
SHA512 87d4338c888b52be960d5790c8e6d3f624c9c1c38e0e730b893dee8ca8e1dc0ea307bdc02899c8baa6a8ff19b5cfb67eaed7972ef3d5ccc4064b698455f1b6e3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8D2A39F5-91DA-450d-AC3B-A404C9529257.cms

MD5 64d0a691635131e05a6bb32eebd29a9a
SHA1 9b6bb5648a5d58bdebb85bd54cc9f765eff8de97
SHA256 7e12e1990f93dbc49c0e00562348c769a31d2fa415d12942302f23ef2147ec5e
SHA512 7b9fed1be5f83c50b59550a0eeeaf786e617f81a945d65c928b29584290b2fe4642aa8e5190fd781dbfc53c9a3e29733eff5c2e8932a6fa211897e0256c2e5a7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\67D1AAC8-403A-48e7-9580-39D3CEDE7661.cms

MD5 3ee3c0c9a0f7d1f1025c0c85da8ab676
SHA1 b2cf4240c437131b13e5a56cf4ad2fb5d5ab19c0
SHA256 56bc627f7702b9a3eba0e745021458f43951f83704e30035585aa0358fad8f59
SHA512 49c517bb7e068ff916f7e87747b81ae975146e4a7464c243acf79fa9ccf3c57dc7840f794af370898a0559c3736c80ee47dedc33244aaf1a0909bc819f882ee4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3BB7BB93-B51C-4d8b-B0E9-77EA04ED5E67.cms

MD5 00a8568ad902655c3edc65bbf00111ef
SHA1 1e7ac030cf25732bb177381ed236f27b097ca0b1
SHA256 ed28a48f77864d752268dcd30f1f5619026f3f1ccbf8ddf9546fe1af40c3432c
SHA512 da7e1b6ee9e1b68ab8341e109e90fb98149ea5dc3caa02c4e82e640cbfa00bfe5f3f0e82a0830acfcc4874145e2f1a9cff5618498b6f21d9bdd6e99c052caec6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\787E8099-A3CE-4222-BF92-40110FA9EBC4.cms

MD5 3cf4b8e904502535903fc594ab2f9761
SHA1 34d02bc9038bf6ec77d3d469c74fb0ad93307208
SHA256 9b888dcf3adfbd1f2da90380e802c0945aa50f57f57d749ffa9da7453e46bdf6
SHA512 4109b24e4920c81629dc22a3d62795e0ff388afe3b4faa1458c554c5a143a91fc4046d23dc3be2a64ec1fd62abe34e3d60a71c239beb43dd8a41b3a98752a8e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\43A0D8E6-68FC-44d9-9333-74EF17264A47.cms

MD5 9bfba87b500bee66d047132cd753f8ee
SHA1 ce5b73002e2b8c1a10448a7d73ba52567d00b6c1
SHA256 9e80af82c13fe53184427b91b9e4403586f16eb29181fc686371d3359aafa783
SHA512 6654189632a3578a5a184c6c9ba0712e9d92fce9707670c3ecbbae8658caa7fd20fe9fd7d56c6089f7a1813beed659ce9b73d03ae7aa87bd37630e7bbecdb2e6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0236C7C4-283F-4adb-A5DE-319D6F5239C6.cms

MD5 8d567a77e3e3f1e084ad8cfc58dd0bc2
SHA1 8b94cda26de557f8ba6b75d45646aeda0d3724ff
SHA256 e2b51a9f951eb840b7288ec1a6585d89e6a70e88e572a1cf68242164fb3a923d
SHA512 ae56d21164e1ecfae87aa09ca598c563ca6c9872eedfa8cb9c3c1b7ad93eaa3d2e3983ed584b73f0a63323ee22fd3601984dc4a1b5be1cb5b19e27b28179e394

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\431FDD28-09B9-4658-8F9B-94210EB69C5C.cms

MD5 45711a14206671f748f0749c9475731d
SHA1 bc13bb8062e6e8250b09aac53996a70901c5b555
SHA256 ba19931c0dc4a4da29b10584f4ab6ceb1a6736d873dd3ca434da7556ed34ae6a
SHA512 268ca53360b19b72d065ad3e35b68def238a5713d1679266c49a33a0a53de35292b59582320743c8f8b965ce809ca87a8546930ceded9c750e08ef5df29c972e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2C08EBB4-6376-477a-89C0-B9D0A68AA051.cms

MD5 c0cac5aaf07fea0e757aa8ee1f34f8e3
SHA1 f591de3e69f38d21a2bfce1e8498682b3c4bffcc
SHA256 9a2b7659ef77037d02aa74a92860a4d81432eb14c99854933ec697bda1ba5eee
SHA512 d2d2445567906b4bd044ee9d0efef056aa1c6454a3be134a89d9606899a8a7e1c3690816eaadb0dd2160cbabb4676a0a2d37ce8c93a61d3914a55526bb3f516d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0CF669A9-C7A1-4619-A0CF-C939B8651ACB.cms

MD5 61139e2a36940ef022d19f4ac1a76a0c
SHA1 8ef9700f764fff6408e5fc183811ffbb62fb1aa6
SHA256 c13544d1d821787fceb18f59257f8acb6444f9e3332a5fd69932a76631982dd1
SHA512 94a8933f8ea7906811ad97b785ea82342b3723ab5a81615a38a8e444731d63fd4fdba8c2d4b015cf0d298dcc6716d480ad167ef15d2adbd1560a29c4eb759875

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9F436475-F346-4c6a-B195-A571B7179643.cms

MD5 f7b77e165166ed958674c65ff0ec9bd8
SHA1 6c5243090adbf25444c185ae6a524d25218c97e1
SHA256 19a27fcbf9000a73ee300acbac569d697c02da4aeb17f7ae3121d9b4fec4ebc0
SHA512 40d1817d6d40866374b9ba867f80fdc9c9637a4623ed1e01a9b49df12c462c7b3e559e32a903daf5e2a28ebec2097f844e0b99bf470f404d1333deb29654c3c3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5B355B19-8B30-4566-AD5E-5E4E5CAA2CE9.cms

MD5 580cee6c83d3bd8436875cbfd1430113
SHA1 c7bced33b82851597da3996ef5e5f439b55ced26
SHA256 93d1d9cb5be1d9afd245c490cba62d7e57ea99218c34f342102049540f17d576
SHA512 e232f9a2c63a4fec7da794d9344732a0ad9ccb112a885c69ab407e226ef7287e58a5a665b69d066d6d2accbd90c098f80c24e820846558014adfd2fee98a1761

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CBE4D18B-08EB-425c-9913-CE559C48544C.cms

MD5 14fa53328c2db2aa2cf1e9c8453756cb
SHA1 d7b822d5b66cb0700e8e508e03ffa0a3221f7f6a
SHA256 fffbda69e8b20f11320cfb710ee4b59ce490607a025f81668e89b6fcbfce3e63
SHA512 c63c61423af6dba5bfdf200d16b0c89a6d23adbbec691da336b4b4028b6ba26898280119b8a7d94d8875b27e7686476649f348865c2a15a4ea4da385dc2caedc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\354485F5-C056-4814-8527-5DADAB17BD70.cms

MD5 8817e6371f43ea86e5480444ab168221
SHA1 eb0eabaf34abeb303949b488d56c4bf11d9bef26
SHA256 995c4e1bea25f6e330c09ac953b06c0878883767b2cd0c94fc6d48ab977b7e7f
SHA512 354a72ac1aac8d9e61dcfb671b371ae3317c464963305725da6abac7b3cfafde03e757073cb6cdd1caebe309e2cb8fd313401a0d62cfb3b0ad2d23b5ddaeeade

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\488ED063-45A5-4471-94BC-3C4CB5B07913.cms

MD5 2161df8f175728ae2ed811e5f47dfd04
SHA1 986bb1059675afbf2fa1e88915f2d27b9853d343
SHA256 61040015f7564f52856864132f937ac7efd5ef91296718627532cdd0b8dff3e1
SHA512 36afb19abb8f39273344a986b91735b079980e064ba40d26253f16f5f29ee27bddb684221ce346bf7e64c3cf97e088d59e29f783604e44ea9055c0e6aa097e56

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\DA415DF1-B01D-44ae-A38F-DDE6C278C7DF.cms

MD5 1d495c26f8ae134c0b3dd8cc85f0fe18
SHA1 212b77327ca1def5e39d0de98dc0b817254d4d40
SHA256 0b02fd06c81eebbac4e2b5435b2305b3acea6833bc12cd74c18a60c009737eed
SHA512 77560d2204178ffcb6ccb62391569959886f45cf6a7f595aad0ea0059c15a2e3988c50dc9532bc82e6b83ee1139c9fddd9f02237c85097580e6bef720f6b094e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8ADA72F9-8CEE-4cfd-BC1D-6F95E984A483.cms

MD5 c44bd9106dd86f5de8d61dba2dd44670
SHA1 cd1ea0d6d10e951b7489a8b3160f9306c4589298
SHA256 3623140cd39fde6317cf612f859a7015686e7135334be5c7832bc30ffe0d9c75
SHA512 fd5fb6b0450f1bb2ec67cedb0023dfa937ed5cf5acf80e36bab79449c6a3ce3916be66ee97d6367a9f8e05bbdd382bf3d1909d3a181b0d26754bc79b4b60b3e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EF59BC9A-4205-4a08-9E00-69DEE7A6C8A5.cms

MD5 2b4e3cb67ec003438983a191deefcdd7
SHA1 6e48dd8ae33812129b42b55c02e6b5da597adf80
SHA256 7944b06714f7de939d1dfe1f35c06ef91422c283e70927f268abcc3ff41f588d
SHA512 c368e32fcdc98faf564f230e367aeb5ad44e1c15b0c8185513784a7d9b983cd3d7c2e51e6307873f5761b1f6ef61568e78db28f7729e860151c19da4eda828f1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9A41B4B2-F149-469a-99A1-0C9FBDD552FE.cms

MD5 c805b79723301a5638c2372262140005
SHA1 5ec38440c84db57a379ab50e9247b15b5d8730df
SHA256 b427647b23f4369bca70a744a7ba6fb803f0cd28074691e7a004c3513e981e47
SHA512 3affa6ee07aa2d1473715a8c932acd7c924c1f2451311d048bc081326302856b037b6f917cd41e68269120c9abbac499afbd39143c1329de3aa1116158b503bf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\75211C36-F90F-44f2-8DA2-A1321A4720BD.cms

MD5 d21e01364ec99afd30822c935069884c
SHA1 20412a80e2cf53215252078d5f34ff943f7105bb
SHA256 5ac496841ae36192a5e46eeec4c16d0ff8b350bd83ac5f2732e52f29cc7bbd4b
SHA512 af669d309362f9213cfff125b27af33fbec63d832d3ce816d03dc75693fc6129c326472f0df29adae04fdaaebd1a1dde451db3f50fc3dc7c0820d665c4110b85

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\21704345-BE23-4703-A06F-75884E5D4DFE.cms

MD5 645d5e999b7c0467e059b621fe0ff62e
SHA1 34fb3a29f2445e2243274d150faf3babc75f6934
SHA256 aaaa27cb4946746fcb0a9eec0872881b5280801909a15c086d2cbd46b7045805
SHA512 f690f189a005876d3be152b68c785545206fddbf7a335f1c01d1e38e29712b87c5d815fb3f8f32a366b00d9e1296b4620a8948b0f17a70c73b029c4f4c562029

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9F1DE781-7D89-43ad-ACE2-EB9A604E2D65.cms

MD5 18116f1b09efb0803ce0e669196b14e3
SHA1 5fd22fef1bd1915721434bef764afd2c01565324
SHA256 a0c3e21d6f89136242e1f1f651e410926b3b21092c732c0627acfd9381d08beb
SHA512 6ec582c6f96ca0a18dd8c1e19f0a47aa574543b093958ff119c08e75b0b5cc1087f66a840d62b8df3d9b47c2a145570b225bb37ef3c4aa2925c2c72e33fdee5e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\95CB088D-0C7C-40f5-890C-FAD6074E32A5.cms

MD5 754496b9e506b400b767b1c374d41004
SHA1 e8bb9cabefd2ba3a545bba26b0e72e8596609a55
SHA256 9c8c7affd2017748bf8b29b64ffa0eaccd3d2da89860441ee534ebe1c44e1e31
SHA512 29eda333b6d44cbb26267f04c36aaa31c8d5292691e25f0c2a8097dbc71a4f9bedc111510ecff23ca192bec3759fd5c0ee82d83607585165e2229ec55a1a943f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\176B6881-AD08-4067-820D-7DFB44F8AC2F.cms

MD5 98b9d585f66c1a20427f2b7a06408f50
SHA1 7d3bb04a28a265f9f6a73d07ed72b9f1a0e95cfa
SHA256 5a8821eeff8c070178edb23af38499ba0fd3e11ab164b2b3bc8318441bc58842
SHA512 42ace33e87770219c2ea1e9c19e469e4fd77882c6c5360faccbced194267908f785a21900da3d11c3e4a9e092b39dc7dd8d4e4080b641f224a50b5bd8f9c14b5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C560E831-E167-46e3-9EFE-51805DD4823C.cms

MD5 8eb70b82605057f7599c705b82376c11
SHA1 016e0af94dc723597fb9d052bf8d56b80564b1c5
SHA256 62aa9a79b9b28735f2d6aa507791b4dd3a5c176bc62be05ec5800ad7d618a00c
SHA512 4f7494065da5dc814772476426cad1ae7a8f6e294cf12c48e4bea8e7b3f56a4996e49ff1305283459b328479ae914e6081ff60424e0e2b5e421d823a2262524b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B292CDBB-ED48-412e-975A-518EF6FE7AEE.cms

MD5 63543f7df2cd6c13c83b025ff81fd854
SHA1 dcefa190478539c8bf0592beb5c3c611c1959d57
SHA256 1b94a5c53ee5fa5d2b3ca8998638aeb8ecaded70355b7620dbfcdb5e4ac644e4
SHA512 cf148a8485a026d1f1742145b5219ca50c5fc61b2995841cbdab9456f0c5cbfefc2d1368ba3d8119fa7379f18525cc7bf98ee102503e55e8175f5e58ce8b0eda

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FB6D8F38-1452-41d5-B6F2-3F68A705641B.cms

MD5 aa91f52635299963a4e77539d541d1be
SHA1 fe1bb8950270a80034a48c8324477ca98bf538ea
SHA256 cfb883a5329394f7ff5f7f02ab6a002c92d92000c776face1674a4aff28e50fe
SHA512 b0a989718bd30a2e3bdb12cd9252191ca79afe628f096e94eca47bee1590bf69b0c78c2ab9c85a186f55dff6e8e05bfbe4c0c362208d41f71690467a3e23648b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F4415DBB-2105-4124-B75B-E724EC80B47F.cms

MD5 acfc7c0b59d76044367ae137a7384cb8
SHA1 bc80d183503b09f46572110f1daabf95048eae00
SHA256 145edccbd47001aa90f927a1659ab97e82dc0b046fcbc41c09a84e84ed2a0e46
SHA512 bd14e543a093ec9c672dfbef91c7d6c7c44beacd8e4f29720db40dda3ad4a231d6cb3ec2bfb7375e11f17149639b36ea99cc49cee36c4aff00a3d969935ff154

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AD76FDFF-655F-46c6-AF50-CF47722DAED0.cms

MD5 38f63c48d39cbf26a71324e0663dc27c
SHA1 7ca1ec1ad40b48878d0f8a7da08e406f16b5234c
SHA256 6c632c4408d48d7dccf8f650fbbb2b56c8a447d21bc9b3c3a7f454c6c2ddfb8f
SHA512 31d8787a52e8fc6c164f840383f5ea44673d1be5bcf2568db4b0607d2a5adf337fbf0c1108de7e227ae1de2fc70b3b9e9c33d45777883e10c20d5fccc22d1a76

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FA2999AB-FCF9-4019-81C1-31FAD762F77C.cms

MD5 1bb51af7ba06f7c811412be4f08d3390
SHA1 684dd90d398303453d6b7aecfac81aad1996fa4e
SHA256 7551a7e67d5d61002a96d2a878c736f252081063148a388af3617d507aec79a2
SHA512 db978b1f72641748f06f4a0cef64d3c887c5002854534282927d56e68eca93c4d6e647619aa646f0ea8388e9bd2c9c7efe14f701150720947cf45400457a693e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6D7919B8-97B8-4f48-9B30-9CADF2B499CA.cms

MD5 54657ebcbdc19cba1959877413cd41d4
SHA1 f122a1e0efa5c863a38692ba9c7b5d47036db9d7
SHA256 0631f202adf4ea4a68fadd72251c13abea3e2821e5131da604bdf8adca4c8e8d
SHA512 0eb2e14aedaa467435c0ce5b5ab7d531650235a43cac4f672c9118e0f9fd928205c5762d79ac48a1636592b39bd7c3197d60f1c8f632fc22844ba436ace7c0ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4BE2BD2F-7977-4d28-B0E9-4202AA3A6A4E.cms

MD5 aa262642a76a38338b3ebb4a9de41eba
SHA1 89797f22f3d0a1e019a40108cdaadea4d05b1a2d
SHA256 25f7d9c8ec21c95135c2420fdcaa3dcc212e2fbd958d7a70c093866fde9df4a9
SHA512 8efd99ea688d0072b2679def5f53eb5f923551f83d8a78e0ad28eee264aab46db4a9cd3661951ba09db058d3334bb3a3892e530e2407e3beedbb402c61a9512d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4C4F2469-356F-4f9c-B3DE-6ADB20769983.cms

MD5 d93d387ed8dca4f99f8de18e9ddfe2b6
SHA1 cdb700cfd45d3ec80a39c0ec788e5a408082593f
SHA256 0c6580a8154ea63d20de2484ed846d4dd40eb00b35386424cc3e544d6fa6d9c6
SHA512 f63f617f3b92e152c7323b3c65103f1563467b5d83e8b74661fc757bed363a17026d0e93e8883b3169abc1109c8346e642e5c9ef39852e93fc4cc54ad13205d4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E6124220-0C61-4544-98BF-332DB0F30908.cms

MD5 1b41ff35f4922c23eaa282ee9a946e07
SHA1 5dbf0098c3007005b2ef3074606ece2c87d461f3
SHA256 02ba9173f43408b299744f264c7698014fa2ab3991b9cc00d9e8a3f4cce8388a
SHA512 28ffc12e257463b47bd9f23b441a4b1ab9bf5c8c679ddc6ce6e2079644ee6f47e73697ce980422caa36f03935cbddf65754e28daefc0cb6ac6671cd288a236b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FFE79BDB-FCBA-4faa-94F8-BC6FA58F6804.cms

MD5 3192155ef49dfaf2f38e1b84b3a07e80
SHA1 8bb4f824f3c07d5d0a0250f7ba5ffd1b58bce58c
SHA256 ddf5d388310dfb13c50eaeeec3e2099af2c082647a02169e186194a704f5cedf
SHA512 6ac607dcc4949c6b3b8be457895ccd4611546712218da0d216b6fb665c34d686b065791bce38521a6f441d07940955a0073e0e78225d59913e1010608f880afb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\17538F72-3FB9-443b-A610-A3A882EF61FC.cms

MD5 1b91649d5e3d35203c6e53c2eb88925f
SHA1 d91b13ebd6f0fb8ba04c6752a8dccd96aaa051f2
SHA256 812c4b8b6bf7f40fe44d42281aad361f0b0d7758fad587f9c3daefce1a1422d9
SHA512 b34477cc37f735ff08042c588486cf0293879721377087ba95af98bd5f5fd14e48da19b04e8f952c967f90af86bc800c5325611a931677f1d986924927a497cc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E307A426-C982-405e-86B4-669D3E411802.cms

MD5 beb996aab7bbdd1ba23b528b95110009
SHA1 a6f5ae58debca5cb7c57f369ca65d83b2b9274f0
SHA256 08352e4430f6121afef735c051ddfa47e551393117d29bdcb7830f280f31aae6
SHA512 48bcd73357212830ef6d1ab1b54e656afc654c3ae810f9d468cb7fcc4f8dbbfa3119866e0734b3599415ba9b635948f0cc983d7e4dce7f964a179f77f3eb61da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A0A809B5-B381-416d-9DD3-6824D26B74B1.cms

MD5 805fd543858bd198bd311b84467ed913
SHA1 c1597de1f380ffb0ac859ff9dafb56416c4ddeb1
SHA256 a4674e610924536758462a0490d1322f96309e7f10f9e87241cc76d13307e325
SHA512 44a41c9032162d85ee7aa85774b2e8bc01a871e1678a54e5179c2b73ebd7b4da27c5f28b9cfa5c63294914cb411fc67257e5373b5f647c580df9a0253cc30a1a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\89C2F754-EA98-42e5-8043-7A053D99C3CF.cms

MD5 a6e160f638504150555adbe33c67f8a8
SHA1 f05d827b5a8f66e4d52947c25339a25cb68a25d5
SHA256 129a4657d1a4ff286e249c3fa1deea915095a608935db67053b60baa831021b9
SHA512 b4ce92889a08fc077f8fbe45c1e61e2e030947ffbf13fae8a6433ab61f5f226ae8a327b2a6c7a82a9df5fb3808e561bb2a265f976438a5b03d9aa2631262a9b3

C:\Users\Admin\AppData\Local\Temp\76dce6f4-d802-4398-9d3e-7ee64748855b.tmp.node

MD5 49ca10dae58cf5a1a0222f83f6df4002
SHA1 2ef8603914516b24d7128c50827def28da97ccc4
SHA256 a6e6d835cafa1fc93f4b6ef3595a4c2b8e54fb7c1ee416ed8e379ff5846e048e
SHA512 815d5b7c5001988d48d059b80df5e6c5ed6c43c89934c31f27bc6e51cc8d6239620161ddfcd0307ed58c1c823e5bed4344a089eaa8b326595a9efe3c484ca9aa

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A883D702-0FFA-4236-ADB7-E0986004EC09.cms

MD5 97a634f14518275b5030528c01807957
SHA1 58d6d7e39cadf23e74b20c8997de3c7a8c426a18
SHA256 76ec7e42fb510dc65bf87cdcaa30fec215c2505f078241fb25ec2f53675a5345
SHA512 2feea29b0ee762af1a62a5b6770ca13026151e73a7184384be983d43b6223ec19ec79cc9cc023e427af5c5d15c15c774eef4dbd7b31c0c093c211f46aeb06269

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\DB48882F-682C-4ac8-AAF2-438E47404BDB.cms

MD5 9b7eabe0ca407b1f33e1f616b0d7194f
SHA1 b948016a667d16d8c7770e1a77eb2f411dd51c3c
SHA256 ade581fc0b3ea7b76808bb10e54ab8bdfefd30a377f6b050540824703a31f91e
SHA512 331108ff7b7aed42377eb88ce6cadb5fb47bf304abf7f7cb848ae0b377060c9354c05cb46bcc2de0c4396898b756440dd7e2e069b025cf9265128376d06b7231

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\37D34D3F-BB29-447e-AA1C-6398CCEDF95E.cms

MD5 68e6535577433dab10a9aa2c9d68d3ca
SHA1 453ce58a0993307711cf174c8fdeeae0c66ca4ff
SHA256 a488973e2cb67d4853b35bd9ab0d5dbe450a7da83f7b52269f805c11fdb05717
SHA512 9f28a73798c96db5b870530fbe4c3efc40dffb33ef031cd2ba8736dd03ea84348502523415c1e057d40e75b548c9bddb3d522abc8114349d5b35d61df46c6585

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F5E9C6C3-5989-4ffb-BEF0-FA888F5B1201.cms

MD5 0bc07b015c363d614af8209ff5a6e9b6
SHA1 09ed2a2b90fad14cb82de26e168c13e0ff557d61
SHA256 a59ebd767d02354dd869e93fef143a42f44c5f1c39ed9062687c159f3db73275
SHA512 e178ca42b10bda16f41ebf59e4f1f44570fb0b9bcd96b2a96979a1eda2bfc74cf279dda1e5247494f4e9943f9063c67bdce58404c79c6c6763a0ef5b9e7ecbea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\78ADEF0D-06C5-4812-B447-64E1616CA2A5.cms

MD5 5f960759c9e781f5c20385a478d7f968
SHA1 6a422755eb4e81060a9ca30bcfad2f112bbe7d38
SHA256 6f910fbc1a8826e52dde4a3de0c66ffca755fdb4648c6c5c287b5d8847a44cd3
SHA512 6101ae98ce2b62ea7585ecc25890bf901a34f0afe89646353f6846cb53cd5e4480ded0300999c56a4dd608dfc17acda6ffcaad7c5cafc384cd48f5f6f5ec3119

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7015D73B-8CA7-4a58-BB47-022F9C80E109.cms

MD5 0f3f761dfd1977a964a2ddb14e08384e
SHA1 28af3e71bbcbd2892f5d4a64dc7db39319955a05
SHA256 2c75d7f043c82e362394fdfe67bb7258edea44404b3679399f4f8cd796be7c6f
SHA512 414a2ce8caed8e8d2255de3fabbb28cb65509094773c578776857a47f64acd809c646cd09de2b80ae0452c858a6d13997598d46da94c24cfc67c2489750ad7d5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\93E84C08-2E8A-4220-B25D-152994A02BAC.cms

MD5 c104f5d2acf921791c7a30b2c1c50798
SHA1 0831a74b8353b9c48db44f447cdb6deb96946114
SHA256 f3c62e12d264df3901f8fe30a2db6b994826bb531493ad95769842539a82bba2
SHA512 99528db60d214e20549de0a63bad000ebaa952c48d275e6bdb9830c652003b356a60c849ace620ba46e53eff8277846321a41a659aefeb12fb82b7d294006138

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D3EEEB5F-8697-4b25-9DE7-A751B3B0C9C9.cms

MD5 4148908c31157f78670a69d3912190a7
SHA1 0940384da9b819373856ae7a12da2f607cfa3413
SHA256 e696cd4fd75f337869917ce0cd1f9493cfa129d37c36ef7fc51ad990bdf9ce7d
SHA512 7a35bd6b5f21d2828e99705ff0347e4e43c05e305daec19412dd462e49c452684f6ce02393f1df5122ba682fc52fa3741dbeac861672c7542bc8f7dd4aeed330

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7A14C12D-2708-49ef-8BED-273C9A709FD8.cms

MD5 f47da4bc7fe39c3ed091399f990736f6
SHA1 9a8c62e6a123b13a9914956dfd9a765eb9d34efb
SHA256 644ee66e18969db6cfe5e42b2278854f2ec8020facb4ef49b8c0b688355a63aa
SHA512 c27e1e83413c558bcb3bd7d133c895a9714d4c92a18658703c248f4f99f016f9ed6defb3c91cb064b4c892150427464e2ae4367ec2508d2cec65a99a2526b2d7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0F564880-EE9B-46c4-99ED-44E60EB2EF4C.cms

MD5 2e9402ebfa2a3005d228c646308aa613
SHA1 dd12e29f4e4bc2055abef950fd73c300365e713c
SHA256 a014e4cd8cc4763ac50a333464cf718a27205fc5c814bfe4d90723e7a3f91729
SHA512 e17fb871a791774c2489cbb25b3c1f85a0ab838549b671a7aeaf6338605f478607ecfa42ea75499dbc58d8f523e51bafcc334ce40e8e66dabcb42c3155195ccf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E743CD12-8B24-4128-BBFA-E406C3BD2D01.cms

MD5 26298493f7fb560a8a5e6c0ff3172ad2
SHA1 b8e22d06404c4be96301ee33ed55e5103c715b3d
SHA256 8f16828e6b43e4d6975bb1049f5c5e30ca52e82c5476ef475b098d1ce85123aa
SHA512 cf7184dfbae2c8d712ccd59693a8865fb07ccbbb31666816d9a62e94505f54d28dc96f3baf6eb1c893ad73b01d46dd1c587ff0e2dc344f9348468cec739d0a69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3A283973-0B48-460e-82F5-34CD671862CD.cms

MD5 db5803d2c79498c16015f8ad6e88164a
SHA1 199ae61ad676b0960af8ffd9adf889f451f7f65c
SHA256 2b2ab5e98388eacdb2dd6edc169e91c0d4a9d72a4b629e16589fcb09070059a6
SHA512 6b2ff569cbf53e38b9851fc868a278f75ae59bce3221e90588fee9ce1bb46e947c557e7bf001145548e5505acd765faeaad6040248edf5574f8169df57277887

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FA2BA166-C8CE-4f75-92C2-F6B99F0B88AE.cms

MD5 3ebe9c31699552017505c7126bf8bf8b
SHA1 df99fc9802935287dae3eb0ba6fb0d0aecd86f73
SHA256 6e96fe98b1e72c973de11207a366738e0cae705780ab457ae2e14aeac99fbb8a
SHA512 90ab3862a53a9af86b48caa24467b4b1505b121e7c05140e7395767aed7c8f458041231709ad18803de891553ea74fc55a60f5ac0ca2a7667b3c674aa32eb43b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D941D80B-62B8-41c4-BE26-7F39F8276FC5.cms

MD5 4f23d7dbf11807c16bcf077f1847119a
SHA1 fd982892bad5bd15d43b40e01672c9293f3edf1d
SHA256 91e75a784cf97ec552f17fbc4d04ad588ec503259e9ab4113a8c8e1278370beb
SHA512 266d488039723be1a855a5b632a8988924dd89c0d68ff59a53e2992e1b3cf7383e8e32fbfc0f02071c4158745c145e63bc7e10ec09fb3559ce1381e3e6c607be

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B82FAE97-3D5E-4d38-B67B-2E77912EC391.cms

MD5 fdbe7aa4da7b756326ebf079f206f18d
SHA1 3d6331635a6a470c16ac3a7ed3d6033a42db6c06
SHA256 cf2fc4b32f3d203b60364cfc7570603cad01b2cdbef6bffa1ae84d856fbe6cb4
SHA512 329cdb276c525e3966aa39080b7f09a0dfdc455666077f97d21fe586a3bf8e628d9f434a603a6af58c94b9f35b10c7b1f155cd74e02cebaa3f13ed3b05be5ee4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\40175092-143B-4f93-86CD-766348892BC7.cms

MD5 41fc576e94be8a69cac9e46751c05421
SHA1 8f3f0ed9cf89f20495a5a217c23f45c3228dc58c
SHA256 6c70df0656f673c526fa647e38cff37f7d3a8180d1d410c413d00659ccf5272c
SHA512 c0fae8bfa68739988db404c217359b9dfbeb002bac919f064f4edd242b749498f4125e7d0fa1de3f2acdca84a4a30781c95f0d33fc56202d1852876412875999

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3A11EC89-4D80-4e62-94A8-19B52C44A5E8.cms

MD5 277b6dcbd04d1c492bae84c0f865958e
SHA1 78930b53f6e46cc0330857fa758588b57259cb9f
SHA256 d89595432a4daec6b91de794c6f87adfb7b90dddc5ce57423a75498b16cec755
SHA512 7118e65e6c2363d53814e04735b9bb2282470d3d8e4e1763c84b210432328bb2de51a147fec716db89de287ca0c1dd69439ef9145a940a3142c74e5e793a9284

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\45104374-7EA9-4552-8423-83E7E9BA9B9F.cms

MD5 344799a1e9ca782880ce1b432b6141f3
SHA1 13ece905dce569364fed71a4fb8047bf72f8f5ff
SHA256 7938105d9f92d985d40c870ad89a76e90f43e644a12878c3aaa89bee4a9f97bf
SHA512 60de166cc862c44f1b37bccccd26e19870e7259f5378276131e75d626e6e950245ae7e7b5aaaf3b3a18028abc4d266c9728a31a083325c763bd54258a76630ac

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3AEFF452-EFD6-4023-9C75-303049F309CB.cms

MD5 20e48a0bb370c8600068b3f8bd6f5ea7
SHA1 1ae8e6a3a96f3d28d62df6d8264e42e0f9ddac17
SHA256 3c6d9d20246106640e6797652ef63ed9c010f7ad676b8cf09bb3904853070a96
SHA512 9f2c5e43fd3e91827f58fb1dc2e3fe36270f9e4b160d314662c888277c75e5f0fd8955c529027f337156fe54643711ca8289fc9ecc89ad07c13ecefd084dd55d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A6E7A1E0-993E-4484-86F7-7E406F1C558D.cms

MD5 5eaad0136161bc8c949c337af476071e
SHA1 e498dea795b3540c417532426b0fbb5b791624ab
SHA256 1beb19b67799bcbfb7480daf72ce4a1e16a7a1b2960c218ec87bc7478960bb93
SHA512 c2f99fed1660d8d712c082e67ca3a753efa2b5fb7388b13859cdf2ea48f08a4231d5581343d93d8103f1ed902cd79091d4a1d3af21d5af9f7c90cf3114c10236

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\06334EC6-F0A2-438a-A70E-3EE2E961BCBC.cms

MD5 2c73f139a35ee7077f6528daf45ab930
SHA1 606f02725bbe034ad213e87648823f32b07033fb
SHA256 b5b1917455211d6e16951c72bc84d9f34c0988d64661e761a832e73862473386
SHA512 05f4b4ee58892dab0dbc4e6c3cfde13054026e16d091cd9131ac1249ad041a6d0fde7b6a3e7c20dfaef97e24d89e79f1bb44f87063a3a223f6925aba6f4b0362

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C65AE605-81E9-48d2-9591-42BC474EDC7C.cms

MD5 92d66a759e68967e1aee0ad1646adba8
SHA1 5335f1580a9bde54bb7087eab3f5d88f6afff9c5
SHA256 ebfdcf9f72a954ea613b5035f23523bb1f6f28d9fb4801310c287553007a67eb
SHA512 38641e9a0caf2a93b47a0f86f41781a2bdd59ba23c25d7c1c2a8fdc7ced25359465069ed6a1730ff2aae3cd6afcd8ebc359afb1203c1056c6f6f01532760a155

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F340BB4B-9BFA-44c6-86FB-DCD1075BBD6E.cms

MD5 6100f43330e48697fb30ea059259cabb
SHA1 940cf1e62ee49d804a579029994573db73ea181c
SHA256 0ca0a7f8ddd08cf533c0fd400efe840268a4337cc03c7baae64fdad9dbac670d
SHA512 e11601f3b8b388a0bf06795da65e47b6f0c266189fc90d5a9410e75fd69a728690b2729f5e89af33b039cc1efb25dd700e80390db1a09a680feacc9f79c4e4dd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D001FCCC-EEE7-4b02-A680-72CD92262F9D.cms

MD5 c874dad088e797a37a77e0411c10dcf1
SHA1 8b9eff551d01c61a8f23b2644709598f4b3dd77a
SHA256 01f3e033519a55fc01006ff822dc8b708c9df3609f55f8ae6a88bd5f7183ac49
SHA512 9459917f1eca4f9a6c2830749b14ecb0e9d563d0b7abc895bd0664a175d704fd7aabb5107c5c683473e4e0a56babf3e47651052271db17b33da8ff25d4a47acd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B27EF080-90BB-4521-A19E-1D40BB9D8AC3.cms

MD5 4e12909265721630bea1930c4f0e0aab
SHA1 c3187b03f08bc05a01eb65bcc334ed56525cdb75
SHA256 1771c46a3d48994c2a3381a2a7b0ab2a197aeb18996c7f5b102ad45e73ab8c95
SHA512 b58630f8e1aec2451f54c011c61a36365ee7b737536d99a4935f780341c6e5d518816145a0b0cff6cff64760846c1f6069f71582b45d4966053ba5b8bd2393c4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5978C6FC-DE85-4cd2-A2CB-84E8CDB5B3A1.cms

MD5 559d365ed81295c89f7f55ce9d84565d
SHA1 6f0dc099c2754fd30a32874b891f71f3ae483d95
SHA256 7373a0272c38659a5957ec371b33c3834b80636bd91b28ef89088863e82ceef6
SHA512 a0f172052166aa3b1afa6cce4cb60b24c6c71b58610d61ea6116191c936296f3d102bce5dc59bb880225f171502b8ca3145b0c03272699e33e2fb212c9e20d63

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\613E43FB-DAE2-43a6-BDD1-94AE177EAE84.cms

MD5 956319d6960115e6c6bcd9ef0f900c1c
SHA1 f48d2014438689e9bfea3f9f96eb4f7dc990c04c
SHA256 921371a800d24c1526f6c928efe91d6b8040cd3694a6a8d77dbac63c05306bf1
SHA512 378cffad84fd4745bb51ea38e3cfd04c60af78419b6281ceaae40b28bec9478b92bca8f2cd84f2d0a25c96ad3a8660e28623c4aa40358e3df2d5a8c245c24007

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F9560536-D3AE-4326-AA65-4298DFF9FA95.cms

MD5 5c87f567e0583832601e1c93e6c8c2bb
SHA1 e7b70c2f07d402c9ee5cbab04a02fbdb1722ea85
SHA256 788514d08ed699d1f6e2c2dd2d33304aa3bb386b51e96babc3be9517ca3d972c
SHA512 8507a5a028a22b663ad9a9af125b9dd415c2c560fdb8f4f7a386f9962396f87b3e847f2cdd19f9f62bea9741f59a291dbb1e0b5020bb36b5457d03ef164b4765

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0C6D11EF-7941-4c28-A8F5-892369816721.cms

MD5 bac11d84b5d7cc1f634b54d907d588bd
SHA1 d9eafd4f42584f00f378a36febfbce854afbdbaa
SHA256 e7ac3d0ce1599e3db60b785219c29def33606151758f96f640a82992b6fc7520
SHA512 7aa2748dc2e04249c18ab6ef00caaf3d076070334f03f275952ff231a82958e778c8d69c56a5ee094f43fe400538524754306ea7f1ac240caff894dff1f373e5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3F7340A9-1CBA-4679-92B2-860FE2A3CDDE.cms

MD5 05c320ed8c463ee1ad08273e62611708
SHA1 d0a904dca9db1fbf963097a0d566b7d0b33fd6a7
SHA256 79a5e94891ffa61263ca876aba7869ead68edf83d096868c6c0deed415048cf2
SHA512 ae3ae06e5bd7cb1530a68e288f163945b9bea20effdc91b43f16048e27378e8734a13ba5cf729f5f9db759871bda22a8fcfed3e7f4eb7f5a63c77dd8aed11a5b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FECB8D89-03EC-4ae5-BBC6-09AEF40BF382.cms

MD5 04cdd0ede4283eaef96c7dc962602b65
SHA1 03f7a1a502c3ecffc0928b8266de18ed1f536019
SHA256 5b0d4e66b548d7b8aaae4ff0ef983ba18430e4b03da38e590696614173c40633
SHA512 93d9430524d8a2c556a8f0fa8466c9e7ac3b22723c281e5e2b37a7fa4af9af56a1a4bd433902e2cca8f6349d51b271076a6c7f35546e36386580e4ca3857d775

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\74CF7A80-EB4C-4923-9E0F-EC9AE9ACCD71.cms

MD5 bba7447553c0a390a0b8929b9a9f4fc3
SHA1 722074ed15e18237179026b4c6192ae69d14c41b
SHA256 47af5c4bfbfdf79894e91f73d36d39ef58ce06dac9600bac28a06f3dd74f7866
SHA512 f37f5d1f06706092d746ecf1b0c8deccbc8d346a7088454956298734205160d09b4df6a00545939631d4259dbae3b6d86ee5a4deeed4f9fbb8e8c2cfa561cd43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F7B89178-6467-4d0a-90A5-F9552A753415.cms

MD5 4783c7031a959db0b5cecce726ef5ebc
SHA1 5a47cd6ce58901ab26882ce4ea7db08d4cd4451d
SHA256 665b12abb021b7f50963a0c1c74b6ab805d4e22d165c1eb5c1373967d14fd3ef
SHA512 478d81f7bdb639fefa47fb9b81cfb8a0a88d40ccac910870927afee92b2b18f5ba77f4efe3cee621cf704004cb75a3fbf7ea12eb4593399be7c6894eff7aef94

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2D6C609E-B8F9-4848-8A76-8BE0F5FE1C65.cms

MD5 70f6b8a2ea30e5d3ad6968989f377f90
SHA1 ea7d83585d6bdd9abf95eea8900f8ceff25b46df
SHA256 34e8538b859e9888999773b3a2c6abbd1aa21b8c5076ebdc93efe8be66220de7
SHA512 e855da3e141eccf5913e6caa903b0ff0924e9fe89a4218325011135b23959b1abbc1ffa5cd4152bb2fe36ddaa0b4f4a434f684357537e3f1d718dcd59df4e9ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\12B7282A-D204-4c25-9742-5F2C51D95A02.cms

MD5 a93181a34be94fe4c644600e8aff270b
SHA1 2488b4fc5f7dd1df8c3a40860cceb87822bacadf
SHA256 25c9d758a5ba3e6381f5a5780377270f52bdc99baf1fd288872de02f31196aba
SHA512 2a9ae1dcbe377a4edc557d7dd947ddf5e01d3b8d881fddf5a9ab1b68a02ff4965069fc11015d57a257a223a744a8c9b51d62f5a0c22c4a6830a53eff1dd5c984

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D2164690-F107-437a-9AE5-4C546495F88A.cms

MD5 d4b872c2c04377b264c56c3bc144089b
SHA1 e4e55217cabe7c29bcfd41cc5800ccb1a9b44b6a
SHA256 84adc491ce26ce015cad0da91fd07f364272dc400e70acebdcae9200aee49a11
SHA512 22353869e5ccba6b0cb9326b31025f4e561dba8ed0e191ddea14a71038c78ad5778d2c814bbc7aba13be0e70fa0e9b0e9becca5c2d9c59b91354db94888b4f3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1F27F99C-EC1C-4c5a-A5AB-6BEB669D4DC6.cms

MD5 72033b75882d91a559977aaad7c456ed
SHA1 1f44ae116e3e7b1c8bb6b654283d2d6f56c82187
SHA256 d6c65330f11c235c53a5aa14e37fadb4027993a3081a715b5fab69be793694e5
SHA512 43a1c9a8c5c4cc05402922d07f0492121c65526137296ce4acfee53fdbc15317f522f0ddfe876ae28e2b2ce454ce9792c2fd78d819ea1cdf04a4becf33d8da17

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\553B1C21-3E41-41f2-A724-82E72D7434F0.cms

MD5 716a9231dd7f5ccc9e726eba3835428c
SHA1 7bee478aeda6ea979a0fcc79dade9befa7617d9e
SHA256 b201e01a17d1f8fce1eff243ff0aa9580c1acd750c95d909f14b8060395a14c2
SHA512 443fd1cc395c0d0e7e7218fc0a9f636c9c67e1c27a5a884899757f671b1b22e4d7d26ebceb984a9954f5f4928e498d633e0f10d707e466fe5d1073ff9b05d8b0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B2D08ADF-2E7A-4e6f-AC6A-55E5F6E749D6.cms

MD5 78d2dc50b240960f9d8bcedc3f928a32
SHA1 639ad5afc9b8340a0c675182a3a9d01d1e5560ea
SHA256 b0a227921e71a4ce97dcfa7e60fd6c9af797d75d325b3803802bb42a5cbbf25b
SHA512 2077682f7bc85a04a1412dc83fcc0768487403797d4e33e74e88d34f130b7f5428d466c065232370bb04857c3fdc1c6e86dfb3ffb5181a530e0886b39faee0b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CD4F7EFD-6AB0-4afa-B238-A59C11A508FE.cms

MD5 727aa108a9c39349130f37ff15ebb064
SHA1 95548efb792a7eccc634ba887d382a8f41cac1a9
SHA256 a50d365ac37d29e7296e80bcb6d17d8a196e0ba3e4c7e39c4c36aa9877f9a061
SHA512 3741aab873c2ebcd8989b8fa4573df5c3d2266279caad4b779dc3720c056045da39f7e80de035dbb8e55a08f679053c91ab55cc314b81bbb179ccb2bf09d0e65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\BA6383E1-FE76-48c6-8B0F-F2EBE2D5A39D.cms

MD5 f87da24d54bc4cc0da11990bc9eb5bfe
SHA1 4a84bf6b4da74805ebd70a7bdc9aca64a876d487
SHA256 b9abc8ba3c734808eaddf0265d350e19787c4b064398b32caeeedf11b3bbb718
SHA512 3f2cde9a7964773d67db8f459f1e77dbc86e428fa103682d6e21f86f9a3e1e16f1c7abb84413a0c57dcb91a8075f9205c875b8a708d9525b3cffcf1b4115158e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\74D341E1-2A58-4f2f-BB0B-914F1B0BAC53.cms

MD5 2ae5b0e8c838a8338b430fc4a9af870c
SHA1 7a583df2913b2a456eefcbb8ef89808cc930cec4
SHA256 2f15c7c20feccca8cba62cea62fcc78bb977cef8e01036edf2c66ef0fb392750
SHA512 0abfc371aa2dfb5fd6065203fbbebe6c399858e36d6851822237fef8320c19a4ad4f79a6b751e20e653a307d2e2d3ca612c973263defc504916f631c5cf04288

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\45CCBB9C-DDB9-4273-841B-6C1C166D9D36.cms

MD5 7d9bd14c96953135f092b9ee910147c9
SHA1 73e9e7fe6f5b95b841fe7eed03d6303bdeefcfae
SHA256 9d9c09e10d5f89e4eb01559cad8914aa6e698fe7c524161ac4df94aa3b6ffae2
SHA512 2c2edc53e33c11bb9427530b695522ecd7e9b3bce4182635d4b504e42bd94b735034cc8719c988b4f11beaca3bf41ef4ca08d6a32d55858668ff46235d991b4a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9903DC3C-60A1-4de9-98A0-469ACF17DFEA.cms

MD5 59678cb4a9fc4fab0e8b13876f44f162
SHA1 e0747c7696cf8d9c4372a24fcb2c0de5182ae81c
SHA256 dfc8793d129df16ebddd5bab147658c3e0508949fd722076d83c2eb97cb2267b
SHA512 04263f28f9508f04e2a42d4e0c5c4428088e6017332e84bf4cb6b0add19214d4066eb18ecb7a87fb93b6d4d1c1650d0da6e9c4dfc2eb8353b7064ef6f5dfb51b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5388EE92-B643-41cb-9251-671B3B29C25B.cms

MD5 67866fdce74a492e520ffb738fb27e24
SHA1 d270b6bedadc2f86307f9066e0c230ca21298d1a
SHA256 0ed042112e4c2d3643647d88698485a7fa03c2517e003ef2df2c9d3f18d5a7ab
SHA512 f5c809e1139c600b1ed8557b00d6e0a387338f62caccba866930d18f6aa97f5930f7c744c86140853d159804b58930364c657dc2cd648080e62514632e2da5b0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1B6D7FC4-E0BF-4cf2-A53E-2EE713EF696E.cms

MD5 df3d907641be1603dc6b31c8fd367329
SHA1 c5eb81bb389882fe6735b191b761b7833a07cf58
SHA256 f0e99ba6bb137be7210a2714347603a89f38288f6973eac30a6e5094160cd753
SHA512 4e49aa6a5f25f3600dcbd2b42921896eec66674a942c6b2d3132f27f9fdcd6c6ce0be9ea5eff36e79d9991854499d4a19cf75cbe7acfe10cd3220caab807ccd5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\28E8B748-E2D8-4546-80F9-F1391805E4F4.cms

MD5 b6f580e2d329c7bcfdb4be75c41f5b9a
SHA1 03f41d4b76b12e8df1331b0418947b2435bfe296
SHA256 7764a13fc5107a756f5f75437dc1a4791f25d3468346ecee61ae512030751358
SHA512 610181f1901e8a345da900ad0cbba19b9b27d4b7d906f155dca4ab328388bedeb573613250d952a1d504952a16dbc0164b734aa250bc751e5f7ca695c9e65927

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8B9ED246-85DC-4b3f-8986-DD43FC5C72EA.cms

MD5 862098ff947193ec97545aec31917850
SHA1 e0c65ffa74b270336b56f21c37bec407be42e105
SHA256 ea331f024cd0c6e83661d8946cafd94d43e6a2dec041a7610e02c934b19f5cda
SHA512 76e7316d7caf1e5b4539587e425b3e46af925a12aa54a448066cd18864fdff0a9b0ccfd362d895924f0fa603dc08e611093c3cc6a8fcc23ff51a1e9d7db99b18

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1C656883-D293-4101-8040-BA479DFCAE17.cms

MD5 a2a4dad1368e1fb81d4ae128c654cd3a
SHA1 03195bac1e62817302a6b9879e5b3f2293b1de9f
SHA256 b3a9d76c8cfc86af98f40ad33d0488ae4cb31c0cd767ffbf10e80170846dddfc
SHA512 ef5469d77cddceaaee5a082d6a77f088cc11e85e9d585b134eaa16d32a9324caf4e4e3d954fdfd0608c9e458106861918e0e3916521bddd5c4667a24434a446e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2D10C713-3131-43c7-9B23-64F603D5CA2F.cms

MD5 5b934d0faf535ffd5987d027e212bb9e
SHA1 8fd44617a5b9071ce568154406b1db58d1fa78c9
SHA256 85a60c155d2ba7f4094d8e7adeb8de6430416e642378ff8fdedb759fe9655ef1
SHA512 aefd8a87a3264b07c8f1893f8884b4892ad8312d4662416ed8911f19b5a418b98ad1e488e775cd0a02e4975bb3b649cbe4d8eec5ee1a2dddc80a23564956ef69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2BA7BE69-0898-426c-979B-15FB311C929C.cms

MD5 ef02f2c3e99060e53964c6bf509e4859
SHA1 8529969c17c89e1c370e39193e19ce68dd8d4c65
SHA256 ec190bfc1eefdb3e6507574dff99d42e7658e460fbaf4c1ada9ea22ce6a2b159
SHA512 87c36091c707986c6e9ae1023dbeb52226748c691c650dfbee2527d48f86ded6b280ae4a45d5629d69ce6a757b57e5f996c74c6f096358b085325973c6f0fe60

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9447D602-6720-4e2d-920F-002A10167248.cms

MD5 67cfc140a80ec7645a1d2db087f0ac11
SHA1 3d407956bce29ad1cc15aeec9105e3e87a9356f3
SHA256 170c601ef33723d5a128d7959292f4f5af7b98f178234ac21b1a918b13c682fa
SHA512 43ddef868f265a6e2e03414e339b5083e5fa7e5fc262ea314af13580ffda56a08b5e0f0bf00a98fefdcbd4232c2818f322a27909b2366958a2a6e34d29597153

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7416E872-540C-4841-9165-FEF929380961.cms

MD5 8e51efa94def8c64738318f18cae4062
SHA1 b3b3bb266e25897498806adef046e6e56c8ada26
SHA256 0c0a4bd318660db72b2c6408e5db9ee1491d33051eb2f5280848f98b74f742da
SHA512 e4af0762a913a39d4d09e98e847dcb15791739a87dc89a12cecd23efa6559433fc45bb4f75f27f3a66702cf5f8a3fe209ef30022406f733c3c5556accde5e68e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F587AE87-B001-438c-8B11-3D749651B0D7.cms

MD5 785ce28559f6657f23a4d9b8139bbfc3
SHA1 e069b112fb3153bf94dc28911cc669b61f9819f3
SHA256 a380b00e2661dc21e6eea7219cad53ce8914c593139dfda13d93fd11065f3b12
SHA512 2d6af0ca09d8ccba836bb9025bc0f3e6393f2132ef47216463bc78c1b02410e0759b0f211b1e8af9624aa8d5178744e48dd722f236aa8846af2262e1380fece8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A68DD1B9-29D8-4e16-B267-BCDF5C4B969E.cms

MD5 728c39c728c72ed07e4af3438b0c28d2
SHA1 0a13357785b5cafbb92dd8f830cb12259be281a4
SHA256 9c7f952cbc2dd2ff3aa623f5018869433d0c0ea7f6322b048a40a01b0983a33a
SHA512 c09e69d0784d01fbb8c2f2ebbd18cd2ff30b1c129379bb60db13576972519c9be20d9382572baab3751478482100b29986a2b6d7652748d280c6cc39215cfb68

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6674CB37-99F0-47a7-B548-F157EE34E347.cms

MD5 9ba0781b4591c9bf69c8b040b72910b5
SHA1 84409f7e7aceff2cc1f5970681f5ddaddc63e23e
SHA256 c127e4edbf21d20c63db4b1548b23af2390b1c73110551c57f57ba69be2687fb
SHA512 3d19cd3ced90d876e512b1aff72be9b27f6ba6e193b3cdb8780be9ecf48f7feb54a05ebcbd1a335def1eb02ae2b5855084e402b042f4aea0fda2b3acaae5e74e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\058C16CB-640E-400b-B532-F11F1A011E3D.cms

MD5 7b62cc8b745e9cc838c8e00d1f49aa4d
SHA1 0b4dc282c467a7bd8d4a061c7c873afe21ed6d24
SHA256 df2be2e73adbd5959c33c368ca8585797ee97855e726e4551e98c3de5fae25fc
SHA512 787f1825f68bdb143ee9a75634b7fd5c0cb6036c8ed0bbf3f06ef185ea53c251889980b28ef17cf92e2261733fbc3e1ec4fc0694daa7b1ca0b0a6a039e0c7262

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C4722B69-94AF-471f-90E5-B112BDE51C8B.cms

MD5 7367dabe0af8eee15817afb7211f7227
SHA1 aac3fce9b00bbad20245984ea7d5bf98943f9995
SHA256 bd83f8596cd981278995952c6bf14ee4baa0f7e0476737140fc2f408700f3804
SHA512 d09fea49c233719ee50df097e028d8ef1b1d9e5df2faee312635691551be00161195ad7658c23c9b99667f35001eced35a5884a12f2c9b9708a288d49f645e04

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AF3703AF-43B4-4a9d-8299-0D7260B8538E.cms

MD5 b269b6a175c6b9660ad7e65dde3ccecf
SHA1 29fecb355eed9379b7438811d74ce9d174617550
SHA256 2246fde68a2250cfa0a64e59836fce9f73384c3e2681905550273af531c9f310
SHA512 3f308255a7d610e376ffbdc6f1a92195de32a8172b5cdb985c6d680c262b6ec0bb70d51671b93f9dc8e14bea0ba40ce362dcc74a5ae00b207200ccd7ebb732b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CC8F3C48-0D00-471e-8365-968648D1D329.cms

MD5 28d815b82872b23d6f3fac4919424d0f
SHA1 0e0bece09fc0d318786668b1052036bb282cbef3
SHA256 60364e2b3facc58c1629b7286306d9d318d52ce51b77e20abd14858d0d5903d6
SHA512 0437ecdff4adcf33f72137b26d4e5c4e006a9ef0f27c61bf5f64d29532ef62cc78d1e3289665c2e00b0856d66179bbb3689c23d4efea9158e61f7f49fda55bd8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0EBDB6BC-4CB1-46d2-94FB-9733F8408B71.cms

MD5 4f9111d8f7f5098a553f5703111e238f
SHA1 16b6dd924169235c10d4746e92a63d776604262d
SHA256 11c0bac0507373c5b17ec09a94111c2b0424dabb4c5841fdefa4ad9eb83cf47e
SHA512 0db02f741a5bf498c2f9555870f88c440d73e1d8b48a002da74ce5967ef16d69cb440c9b138958426f6b0e9c016280edf2db2f94daa1df548383f7edc80e2188

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\63C04E2E-D0EB-4fd2-AF29-D27B4F577F30.cms

MD5 2f37044da743ea2fecacff61b5e9f150
SHA1 69dd2f8d1c0b5e18e3e2e38137948ac19ff5f4f7
SHA256 26da0a8007c7a6137f59cdaf46250dc317e223a0355c563ff275c499c64cc8ef
SHA512 3f08f44923c278d2721516e3589a4ae7ca61d682cae53e47598e4ea48867439ec140bfb2de4970fe35b1ec50840187a43de45b6a00e6702c79f206ad68abe657

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6252D73B-DA78-4c7e-8D04-3C2DADD43BDB.cms

MD5 755b561006ea60e0d05b98bc266ce60f
SHA1 0e67a4de11422602f7b50819083962ea07c2d3b7
SHA256 c65c409c6e599fd7e337c4a9ad5ac7ead84ca6528665a53b95630821f42a991d
SHA512 c9af4508b1b0c9d09273aeebb12ee386f5ae4f3b69fb04e90a5fe8049db9de7b770aa513afc2485b800557fb3df2b872248e977377d17bbbd4bad3be0fb3047e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\93619a13-8e5c-4c74-bb50-4e0821dea2f9.cms

MD5 08b34509e74fb93b96bdc0c1ceb791b6
SHA1 9f81b21e327d907e005313ed592b927019c332fb
SHA256 8d0bb6e4fc2a83e219a11948305e9e9e52b82d91846ed936698a3e8cf4175fea
SHA512 ca133aaeb2e3afb679da633c76bad2acb10b1ec3460a5323bb29d23c786ddbcc4533628d04e3f164617ebf6e18f18806e3d8ff91d4536431144d81ec25b5215b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\99B46982-980C-4855-9415-190C122E592D.cms

MD5 d48000e9b74aab890922370ff96e0430
SHA1 12aff267c1d0cded59bc9d6023927b8b11dc1de9
SHA256 fa7a5a9cc514d82e87bce08c0dedc60ad1eb9ed8800d7f790215c2bfca87a5fa
SHA512 6351f138b55030d5acbc03f3129a42eeb5fd0be03522740302ac920cefac1b3dfac6e0d17a03cb78278145498abf88d23eeb6ca9078a149cda57000fce8ee18f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\828A83E6-7B45-4739-A7C8-EF2B33B02A78.cms

MD5 6806c4485dddaaa0b891e5af06fa4468
SHA1 96adce0abb8a0c52209b774fef8e2a5086d089fd
SHA256 6e6dcffead5e1d8d48e26fcff3d302a344ae4e2d5370bc64ed1009b7e4718cb3
SHA512 c899674ed165f0c42cebc3c5811301c65eba54bad9020da8571d7aaee23eb43fe50d0d43ad065cd75d5bc4a773ef547cec81abdf3d1b7e205e4a0f0e339c5cd1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FE2EA40A-003E-4429-ACF3-DE55948FAF51.cms

MD5 84645472e61d4fc2cbe176ea26f66e6f
SHA1 457b14995b865250b0dee838d1403ec062fdc905
SHA256 b9945b6500bdd7fe4c011b5570016db0cdb9ead3af77eb599cd0bb8029f7cd3e
SHA512 a124d0b7efbbd6f29e7001a3676a30a939ca4e8c6306c91f2dfa3c31c23eea77e2e55b6253c6ef64557a691c2565ebce736022f382f93d0deeedd03f896c57ea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EBD7CDA0-607B-451c-8512-67E365390900.cms

MD5 072e126fe23921df14a9eb1fe5828a00
SHA1 7ed8fd21db68486c91857ecaf582054a2c27b02d
SHA256 4333747705212eaf31c189fc5aadfd9a761079e5ed40265879855fc57bb85157
SHA512 bb596bd206cf92cf6abb633dca378e112ad718d82565da0835c8cfec20b02ace4419a2af918efab60fd418b383ea84c8799a23107d4f9c80c5283a6946b87707

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\076C3D8A-AF66-430b-892B-06154B7E181A.cms

MD5 9ec2a9a4ec106acff82d4bcbea97169e
SHA1 ca523d7658d39b0dda2507b05ffe2ce7b37061a3
SHA256 f64984886704c20275ed8f0d68e93bffcf3a7cf6a70c0d7b51f673c3dd36e126
SHA512 aaaa1d8e6444d1c99e7af28712e5940116c21a0e4f6cbbe786b86e7ea80438b71dba5a85fae2defbb8f8fd9cea096a95cf0fed9e3dcf810abc7106cf375d1ebd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\99A4A1EC-329E-4eb5-958C-469897F875D3.cms

MD5 c769884c41184202402820ec9ee816a5
SHA1 1f83f86378ecc56079a5026b7fb8d4a2fca581d7
SHA256 c0c8f5cda1db5a27a437d8500aa4be3bf5711118236cfae82010788c58fe7142
SHA512 3c4ba1389f8bdab2eb473e18749a1717d9ddb3dc0cae885ab17c66377036c8f56ba351846717e1684597dccb459eee520ed92a08995ba45277102e2a236fa4a8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\716C5CA8-9823-4659-BF8A-8188BBCE473E.cms

MD5 483668f691aa2e468a78cb7c989f93ba
SHA1 ab93f6baf71f08102bc8b1f6f1835597e4635cf6
SHA256 63c40f3521ef6165e6600fac62c8536199d830bb000acc5121d4b864ec975e64
SHA512 7cb9383226ed3432ee06df34c10374b61018d8a768db60f541a4d81bffdd5a27a6830dbd1a0b8cd9ed25d992ccad1ead98c9d4539306d849b1ab6a4eca21189c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\23892D54-E91F-450b-8EAD-687CADCD8B61.cms

MD5 35cd594b40044d568843164bdb0ba258
SHA1 722c4c8c20f5540a693d82336f7e5ac6a2511531
SHA256 2e233112674119ea0eeca844eaa59087047d1322eda6d46eb286ba74e0a1ffc9
SHA512 cc65ccb64deae4731dfeb51dbc4de3db1a9d881077f3b0eaa547049c6971d88f9611aa69467c21a7a8cf5504558e44f178d3b647c331bd01299447f067f2aa45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\04E7D91F-1884-44e1-AB61-09626F752ADA.cms

MD5 874d3d7a281337f94baee40b7d3c5046
SHA1 b3afbb551a96d2ab66e63a541af3c285c26e53fb
SHA256 508355412787212952c562f75cba38ba33d5e5a44fc141e76b6f22742f25b1bd
SHA512 40d9b7d6e010deb33c3f9e1e9d3eacb32aef6ff8fb539dff651b293a3e05733bab1bab0c92a00c7f79584fc6910fb52a098eccb90f6d419c6b4404121ec1659c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EE3BE443-81C7-42c7-9324-671DC5853374.cms

MD5 5f15f0660d096e6d90ca746d92edf750
SHA1 48df990a7ba6d073063e0a332effc86161f24e00
SHA256 e3f571c7483ee16c6562f536c208a2dfe2593080c860001914aff78bb3a851b4
SHA512 113828864ed31458deb7e7a4a6102440beab99396dcc35272b874049ed2297b11a773a3f16b2d2a96f9f740614159eb286e5c3341c43356463e6a11c0944799b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AC906512-B594-4b1e-A338-DFA04E5B7787.cms

MD5 ec9d3f57df7bc0e956321f77099c8eab
SHA1 a000291a1fbf6fa790f39cc893156cd066d2b0c5
SHA256 87513c518a68082adb618ac7f8914d98826655b9ff4bcab40461c2e03cf5b63e
SHA512 3b0037ca2be100a6da6c1224c994255929ce7d03879ff0db51614a65a3a97566a76f18b78ffff87bd56de921d3a83c67b511ba7f3cc5f49a0b96222b57323377

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9FACB88C-68FA-4b71-9797-34E0AE969E7A.cms

MD5 5064ac677662e77c47a1afd43a3d4d8b
SHA1 124ae0e7e7291c9ee1a455a1f8f25f530b086f51
SHA256 3745e76de2c9738539a9277d909ea3a8e6f8c90a2d7acd354d6fe64d20168b11
SHA512 84802d0b82588370738798f66c1f0869927ba8864c0b9f82efcd78fef3ff9a059957911764f1ecb4dc98e691c1f8aad9e20ab67cf687671afab5a19329eb7f48

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\19D676CB-D5CD-415f-9315-3815BD09E40A.cms

MD5 72bb9d4c669f6b8b6d0e0228f6fe682f
SHA1 f44e0865a67c05099a63d8923acabe6841b56e9a
SHA256 0902ea48cb72677410b3743fddbd430199418b01a09fc922b7904a37e0e783b0
SHA512 79e741fa4551f6dae9951bcdcf2591235f8308971ce83795a7665a90e68c1e73e966e970eadd3f269565a54381023ff391829116798bba733ea09b9f7e882efc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C9C31CEF-0A34-4bc9-A6FA-F94796F3862B.cms

MD5 41092722bf599de0cad663a4edd87011
SHA1 5ebb7abc2e13d56d90f2a107fd5b0659822e0326
SHA256 8f285d18984a544e9ec9d29c3f5cb9176dc73179be113255a3a4990cce43c719
SHA512 2ef6ba0a605fc36e0a6c6d3d2524ee1b4e9ec20eda090b3b78655264f6b970a55d76a8f34509dfd6ff87fb9ba7da73e9b3d2d90dc2bb71a18fd884a4144991cf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A77A7C9B-933C-45b5-AEFC-5BA725C56DDB.cms

MD5 988aac2e0ab4356627695272e52690ac
SHA1 345169274d149d47764986b384d6984716b68ffa
SHA256 1e9b3f4a50429375af0f9bfc71f72d71a0cc605bed4ba900aef351a8e3810b05
SHA512 f4db983ca0ebdc7ba2aa065f6060cfe8027d2dcd6dfb6009f9b4653bf9cc48b56a824cdbddbb570d19feb685ad711c83822e6556a756fbce1fb1465624a2277f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CCD30162-E6BE-43fe-B79C-5BCD4032168C.cms

MD5 90d927442fb831af4bda809288ea00b2
SHA1 91001518f92050a1b02091a717e4269c09361603
SHA256 be7edfc44e75193c7ec5717cded1c7bb6a498c60200fedebc6cf44212fc80821
SHA512 3ec1c34d8e3eb5d550194dc84dd249e4cf3056fb39cb8a3586db41c0d10c794d96dabc2627117d88becba3fd58126decea4c7f317fdff4abe443699b6681b453

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E6F1432D-A58E-414f-A400-0BE7DAF00D1A.cms

MD5 415816c205597d521c4882a0aacbb5d0
SHA1 0fbabf0281f030e0290a66c9af3d9fb83c12d932
SHA256 c0cac3151fdbc560519f96d77f6a470b6cdebbed36f18605afe2310126160344
SHA512 49cf8406b69609ba5d5f5f6b88fc2a96ce4adfa80977dcc1f09424d40b3664f11e1244140889a40310b24b5abd3191953d32523486f63ab0ebf60d3d20b4bd56

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2343091A-3841-47bd-BFEE-4577E806489D.cms

MD5 c80a4c12e240cd13a620c8d7035f3ee3
SHA1 b1206bb5474c5443c3907732882776153b0efe8b
SHA256 62f8e92bb051ef911d3d3b96a610d46c2d0922058cf17c7eb5afec2a66e35130
SHA512 3775653b7694d6b7d28ccbe04c3825125d8900b9de5ac7eda4fd399f96b6f3f4c095c9a1123a2d158685736496e04014abacd7193ad7f98b9af063d9377fb58c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8FF84F5B-1EE5-453e-84E2-23571A0C7BE2.cms

MD5 40809998fc9be6f56900524948bf4c5c
SHA1 40436906ad9a89baf0f49ea2dcb7ff6e8f7336d9
SHA256 3844db52ec58e99094bea1c2d492f02dd13456b31281b06c293d17cbcee06874
SHA512 da0f2828e7996df127b47571e8e150af02b058dbed8325878466ee7cdc9b1ce1da572cd0946518efd1074d383fecbfb77dceab389a50100965fd12db97ee72b4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\795FC7AB-3614-4806-9A81-6B44FFB3C3D7.cms

MD5 dc625f5f30531ae604aa1bbe25ca91b0
SHA1 c303798340e6bf800361eca2f6678cf1a2754874
SHA256 e19c7670d80f7a538c83b8ec5b8fdf89f13f29ed8ed698a93a5bbe4713b93727
SHA512 655d2c50bc0383256bea83ad09a2df51418a2e7546d1161dbceb14d3f0898e655dead88f6539d430aec688977035b3328275db61e216cc3a60d9463087e537a0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\29051C6F-071F-41c2-9F94-3189178BD985.cms

MD5 13b1fda60fe08576d13923c4d92c669f
SHA1 6cc73a29ee0c246739ee8829521a2f9ebecf8fc6
SHA256 0345f3cce21222d6d41f2834490fa3faae8b2e39be1cc43a737b3d1ba77d2a25
SHA512 6786c86acb3e97b5986708d8d704b3fbaf3c6d74f94358cbc44eeee0bf9d42bdedf8f03af4ced69991479c25fb0a0453258ce6492d12dd5d756970b79c4a4594

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AE555895-2697-448b-B9D8-0B0E58080FAB.cms

MD5 2851a1738c2fc5a0a58aff80916e5858
SHA1 22a4a390a212c3da2ab7495dc9331cc84d429419
SHA256 52a59d0fb2f2324f2509fdebb99f054eed24ecaca3031fb9618aead334f0d986
SHA512 df09ce293ab8b7cd503dd9da36414276b74c062c27b7919a70d7ed17ab6aa457318d8eb30e526650dcc3ce06287a0cd50581d4d3ae572c092d28559d44114645

C:\Users\Admin\AppData\Local\Temp\4d45c4bc-e5fb-46f1-8bb8-049e4e2a5e08.tmp.le

MD5 0064bbed7c94b48d3c8c1f674a6b3f13
SHA1 a74eeba4ca628616c09832bd1ec6fbf3b4d5d79e
SHA256 dba6a061c3a19b57276ff324ca4ec2d26e7490327b4ef43523d57e289365d23f
SHA512 9cc208164cd001546643f46f207a22a5a1f7183e577e50be397172a5a2279176e378d4bbe37a974a39833de5409d7d0e5514f45156c4f8349587376d2a2ed968

C:\Users\Admin\AppData\Local\Temp\f4792cb5-a0bd-4348-a464-031951292ef2.tmp.le

MD5 4de207e72f3031c43425572897710d2d
SHA1 0bab9d47916f2c8cd2920eb2c7d38cb4066235de
SHA256 d0dddfd360f4d640debba94ac0f9cc7a6de7301736953b1c40f835566bf12275
SHA512 555c0e250891400e869312b92f618bb2753998c350f2412b76982a6458fe9666dc86d6e58d28186c189fb33411701f94e3d9f3777e5e2992e455eddf35eba9f5

C:\Users\Admin\AppData\Local\Temp\f9caee61-2f26-4728-84ae-a1ef3c1c8158.tmp.le

MD5 4655072364a587d2c46a7ca791fb40f9
SHA1 a5bccf702b157557cf28657e409c424478f3d793
SHA256 33bb18e2adcadc43d929ae919ab6a3b039954119252106060091782b7387b32e
SHA512 d4791bc8eb1b165e23783f3b9286edf15ba090de6d98106b84fd13cce7a38ac642fbd19958aa2c453534c71fcd1e1071ecb7b9ef8c5dd5fa9e530aac598b7df6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\44C0EB89-A9C3-4ca5-A388-E731B5A76EEF.le

MD5 b2d64ba08c3a1bc131e7971720fe71e3
SHA1 bcf8c74ef5005f3789a076f283c19e4e23e92b44
SHA256 1a7a3fa5f6c1be0d945f3f70a016ba14a9fb8a058f5d9cfdbda8ca840be90524
SHA512 072120fbfd9856583070d1faf2d6b98ef388d47dea9ae9d92d073f860e0989c438ddbcbf03dd3bf92b91c2706580ae894f995ee8288fe005dcf837c0c4c6e84d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B0E83B5-5527-47ec-9F8A-63DA9052C1D8.le

MD5 ff87b08b169d46bd36c31e1094451eeb
SHA1 55ed77967132cc856f81d2a1ce37aa6016daec6a
SHA256 387e4764dd187978476e8f04164fa3ba5f0e21d2770c6c9f8e39e79b9b87546e
SHA512 ba05d0530a88506866d74698fc9fed296821b6d6a020cdddec4e396f2064dea397fea8c4228a5649dda62a903cf2989a1015bf2cc5dae44dfe2112741e87b460

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\DDA562EB-A75F-4393-887A-41B828708F92.le

MD5 a6da08747480469a22537246d569e961
SHA1 f33093f30468ae2533d6b8b8cda6641d5bce609b
SHA256 0f5efe548518ed31d9148a392d679ebf1aba63e6a5a014fdd6359c7488621f6a
SHA512 d73ea8ba26e5a5cf19ce04779f412bb6051c0f9158ac6974b53f317cb2fdbf9f23ec19c9af7e964e05638d595ce4ea20c2378e84a5225ea37feaa0606e1e6569

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0E28968E-AFC7-44fc-9A88-63A8605923BC.le

MD5 a35745db77b987d236e38811feb356f3
SHA1 9e5f6107143d775b04a503fb821bd44a2299a670
SHA256 a3c9a79e2a36239b34bdf86227c5d80a7314efca6a04bc8284d0b91ce3a7291c
SHA512 a5f43e6e08ae2e087a76400196c77ad415fdecd5b67ea421f4ad0db66ef81ea3a588e7f3869b2df3294e96982ed82a5ec78a364e033e2a5d76e070d01c4f14be

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D687C3CA-2BEF-4567-93E7-71181DE53341.le

MD5 50fcf5dca58d158954eb85c1d98e02d0
SHA1 8d114bad648a48f1148504b93b9d83560cc20d33
SHA256 506e714917d5627cbcaf9fa9ca9f44fe3a618304ea2b66cb8596bd094937176d
SHA512 45a6e0cd7ec129d628ff068f037c5608efbb56bf269a9b16217b08dfc2f452e750737fe80c823a8f82af3bff5fba809c366cc74225ed4835f793e40889b6bfe3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8A66600A-9B5A-4eeb-A208-54EDBE7331E1.le

MD5 7b09d0a0a2c9352c57c8955021cd3972
SHA1 0bbba5e825b04ea3caf2f5c80ef402410c1835a4
SHA256 9404143b838648ca6d8e0243de89d4f798ea878d5f01ad10465f2e7930c2f62e
SHA512 5a71215b718da5ee1caecca3f239fa698518bae178dceb4923818284d8effc392c4d1f57788bb9fa43b43546fe9351a372cbe67996b2f2ba1c009598e8859ee6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9CEB525-1475-412d-BB1A-297C32438423.le

MD5 1d1ffc49a6d10745c951e51bd572b697
SHA1 0f60840efed1c4e0902ec2430d4f58e143b46402
SHA256 7183bc8bd90f5dbdb50e2bd48f0e9804db3b21516c52a2b8bd6163f865d5b18e
SHA512 34fc2435e8f9dd3b740e646af8934f2480298502e1af355270428fa16369f1629e2d9f2bf0e66ed534186e625d7d32ddf16f62d660b634108be3f3de16e78ffc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9325F87C-DECE-435f-B5D9-BB9734980B9D.le

MD5 ba63c5d10759200142ca73b3fde3da17
SHA1 55324f8549bf7e6842e90c6ebb12b73345001304
SHA256 fee1bb391fe447400b1ae0ebe31d92ee559eaed2ca1da6adef6d9cabba247e01
SHA512 1c5c2b5a97dba862ccc344c89ea392a33bf6d551ead4c9109b0a548451ff9a0ad52a2e143b3f8c8fdbaf1e0214da6e5e27704e2d59236c08c7dc29374bee8940

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B97A51F-F58F-4f22-BEA4-B37629DA87BF.le

MD5 b8804785844a6feab35e41b9ffc714af
SHA1 6956214d375329986f770f41dae871eab35acda5
SHA256 92f27c93af19e9e9f617da32c014343d29ac42fb3c18b025ea9d94cf768432fe
SHA512 c4377f7d7a0d646be3c6faf2c4d0d0e4f00eec8977f3305b502ffa2b74f8cd1272ef441ac44669dc30d738a8a45681063fbb88b906b3cd77ad57bd2c180a6f69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6561D3B-0345-4932-AAAD-048E8F3AC68E.le

MD5 0ee60c53e0e02890061f55413d2576ec
SHA1 fa6f487d7bf7956e868c06d0b2229a082ec55d48
SHA256 c7e5a57259da768f0510fab69acc86c76e53120cf838cd5ebf02529cda7b20fc
SHA512 ab8f564adbd7d6c9e7e546e7fc3a27b5f93f9d46edbfdd297379d43714dcce19a2618f52a6aa6d109d22bc32749e41d0b992779b0b055d63cd0c37007e2c15da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA70147F-F645-4326-AB5B-D21466F4ADC0.le

MD5 91308e2b3e86fa1e0e21488e260ce797
SHA1 e5432a185a0a94dbb445001e3acf352a816b7b52
SHA256 384d052e82c1e6a2f334a20e3f26bf2cab9d785a14b563d2c4738f07a3766a4f
SHA512 60eeff3711ccf29188f4d6b0efc813cd81d11db943987720f3046eb280e9a9d05529bd2157065b90d3b5fbc810b022d828b625a17d803ec12f6521c56a55bb8b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\08747B19-C8BC-4c49-AF8B-F4C8E2FE72B8.le

MD5 1fb84d2306deeeb29970a71b79f2b814
SHA1 3219cda048958ba960e2ce523069662d1c386b58
SHA256 03865775b678b7ea638c187fdf312cbc1ac63740255faf869808366dca1fba17
SHA512 d5860d7d5b43937867003bfaedbc2af67c50c09baad30f28649e16f91a703eb369094c8ccbe26d1ac2cbef6ae5676cd560e40a9634d2984f611eb5f86fea2edd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A4F6A61F-5924-4e0b-9E74-85B1C7445048.le

MD5 abd8b28426e1121901b621d873db5728
SHA1 67908ab60fddfcad06e37468322d0540c2311cd1
SHA256 24978f0a6b4aed31b115e7d2b7315d82b9c0729d7daa811679cf727d156bff55
SHA512 a607ec5e2ebac32a2a4fc80969de711a64ccec9729193c11cf985250d688ded2f2edfc50c6f9a75c2b3757da989b6ee1382c93eadc4bb9cfb0bbc30aa22bea3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\E228A719-C5F1-41f2-A6F6-8F14D8960C23.le

MD5 e8de3a80077f8d0e06e4036bcfeb3ebe
SHA1 f61fbf6b185480c4f9496602eccc6166ca7a1ea5
SHA256 5ed79b18d3ea10189bb8791e7f2c44d5fd3b7a50755ae6c39ecf423992a8ed14
SHA512 25ae7cb7b717b56d854fe96a8f2b614c2902a50c6dd92e3ae9e4713c842d1d0fc3b17b536196dbeec270ef734d9e9bbc0ba8ebb9a0ccfe411b8b210584b3aa0f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\56F81D4E-9C2E-4cdd-ADCE-6B2242A44013.le

MD5 26b5126077ced1224014bb95713476da
SHA1 5c2964c5608399996b2834fcb3c1c71899539538
SHA256 c8a2a4eb7493007754facca7523e3b360d47d25c47ff04a9724177139dc338e5
SHA512 6ca3b1b882326dc4c3e5d75360f2f73b233f5d02e957cc4908ba35e7357957f1417bce699be237db0daa11c9be264e78d306b1c5b96667445347b5cc61a14be1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7867893D-03E4-46dc-9691-862DACAE2575.le

MD5 5d75608ad17f04a2ba96e70386e7d73c
SHA1 e422e332bd16c81b379df89c121387eed2d56baa
SHA256 13b76f13d0101faf1bb167e4e33a20f5fb865b477cfb6bd6df32fb20cf3c24d2
SHA512 7fd7d8977e52f19a0ce1790b38cefd14e5d36622d716e02caeb91db505f7df0e72c2a6a804c58808011a578ed6d608c932846c3dff39f79db10b23df4d4f6b47

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\415B09D0-0B22-4cbd-BC53-A5A9B88019AC.le

MD5 53e2dfde1cb02341459e3bc6129b504a
SHA1 7e7b3610e15453b55cb197cda9aac1e349764dcc
SHA256 ece6cd5e6bc717829913d2cc51fdc8f6e267bc25d2e3ef7fefaa99cf06d3f465
SHA512 866e84d57bbda692223b879a64e86d99ce03a9dbb75ebbdbc4183153b14194b8326e0acdf6695d0290898fcf18c4ac8945da6091f8dd2e3673722150f36a425b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A7593B2E-C0B6-432e-97B7-D05A1BEACE06.le

MD5 b519cd7d69746eb871c9b3f067043ed6
SHA1 b96171d16fdf3b91711c7b2d7fbe589ddfda49d3
SHA256 1c64329fa0dad63b250ca09bb4a6f9f2aa8a2635c5911af4d89bc700ca53819b
SHA512 994aa4178d442d6732d90b4bfa8d3e45a6c4af660f6630e9f3128bd49c568b8e08d97483ca42e4a24bc472ca5b03f1f3383d41b33fc936e4910e3542e21ad42c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1794025C-C02E-4937-AA4E-1123B2636928.le

MD5 7a1a02f8e3c821f8f5125b4c0e127d0a
SHA1 9da9debc6bb0b15274e74d225909d00319ce41cf
SHA256 932813e1c39a34a28792d8f979422370f4abe66a956895ead252a4ff3ae54026
SHA512 d8210b0d5ca3acc3bc1210e85e9600b5eb8c334edfd0f476f846c4bd32825a2aec93de8f6cee67e35c21180ed15822cd05cdd3b9e61c8464c78b12fc1795ef0f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4C6552FC-B946-4308-801D-E759BBD0B857.le

MD5 fa4a5a2b9644d00937f634108640b18b
SHA1 4bd5dc1118546ecef71c54bbfadc31afee3f0ac3
SHA256 2f0169105acb13e3906d5945c708cb7966a1bedaf7efc5068535003430391723
SHA512 806ce9699173dce76c568e44353cdcc074807af69e7a2c744e5186be5628bbc775f8cff3e61d05e9af66633eaa1749fa14f3122e49211794cff883e600322ff6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A3A23C09-8ACF-45a7-96FD-796EFCDE3FB6.le

MD5 2c0fbdaf66b5eb104f31b80e6d07e560
SHA1 75e84cc789a5d566a49a60900fe3c421851ec4cc
SHA256 1ded031ac80fe63db68035e81139783f48c16767a1c883c9310c73e184a6f597
SHA512 2981b1933235c4d7357a5d5a3f275fd48bbb6dfaef2fec2f248e3b5ec9a168e9ef3537410cc3f19b1896411a12ae324c9cd31d7884511777286271ef7cbe7e93

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\152F294E-E2F1-4e31-BF58-44B7F574A674.le

MD5 ae12fef925c02f26bf95d9f773d74113
SHA1 4df63791a69cb2b4c19d57131ccecf218f7a142a
SHA256 8ca2c88f14d60ac56adefb1009419ba6620993adc8677fefa57eb59c96c0e625
SHA512 aedd633e2a8043d4c1a06993d757403f50a68af5931f540e37c1d2c54999ee1cdb0fe661519c1cba58a41fd824f327f255671d00dbc777b99fef01069d2fc1b1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3C15E295-3CF3-4f81-8EFD-83CB99088C10.le

MD5 983d6bb25304d21676f43f873f5f673a
SHA1 b5602ae72c0ee1d49218ca6921e7aa334f4a6718
SHA256 3706b6740636552700ee5eafd458f231af3fce5959f6b6d3ae3bf1b38d978581
SHA512 748db7a7cd9110e622079ae6e3b9df396736ae2aef5b76031dc618a5d4e8ffa0599ba38aa34540a5abda780d1607ea02786149598123ac2f1558600aed398151

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\92801CEC-6958-4dc4-A820-088A03C16124.le

MD5 e9a232d17f31f30e6bcf9e38ca4aa59c
SHA1 b1fcc9003d8c771664050434a666103ff0b84c62
SHA256 de320720498f7781831af3681333ae273fa0e201ca37de1cbc5c8914aba4a799
SHA512 b129082f9c2b0d7039eca6eda3cdd733bb695011cefbc005d4ce654fdc2c55899d0047294e952a063a8870e608c4e3c2ecc3302bd3c10ccad9c86e5482bacf3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A7117973-E5C5-4fab-A0CF-1C7D08981467.le

MD5 2981a7fe660b233a7fa448d7b5ae6ebc
SHA1 2141875425af4d4fe51ec646952977b992a7ef21
SHA256 41c8732f4e9e3facc924a81f03b49b3f69d584c49ff0fc11687716f8be72622a
SHA512 bd2834c73474df7c7e7f73991441d596bb79ab8487b4afda4fb1cf1a8fd572b1db8a35edb39b2c26097fe7e62a09a9317e748c19a3b0e9de920b096634259c35

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5EE2ED5D-691B-4682-93E6-2B6D45C6BD68.le

MD5 b9f3b991c7068198065823a1df62c2a3
SHA1 b0e0560defb31987aab57335850471c23327d658
SHA256 a0ea2562a246f9e56a0d7adcacf2c889ce42515a0da423610971bcd3a069248e
SHA512 0167fb6deea519e78e4d9d965e545ebd17a0ed51e5dc9d8b6ac9f4508fa847ff548e7616cdb0af61a1402020857f5173c39c89006bbdd7211d3aeaa58b3cfdd3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83CD281F-78CD-4c9e-B14A-8AB2B05292CC.le

MD5 c7a2e4530e2cd07716ec6980c99579f3
SHA1 6a97c9d7aa6eacbf7356f79563c638560ba2d2d3
SHA256 e3ee45ba5b4604a85e2c65420cd93beaddba16f861736a6ebf02d47dba69ad57
SHA512 31f4e6b58476259cc5e6c55656d6c06646892e42522961d601a5540681c758440dedaa5b23e96a595f0e4d830485814ebc86f5e18a132fd1b0717c6e93d31f69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9021A9A-311D-4a9f-993A-D0E5B1469E27.le

MD5 5d50905ca2474d91f0cf620ef2de948a
SHA1 9d974024ae0352c367c3fa058f5a556eba6a13d8
SHA256 031b84601bcacfd213be0a029d9c22430b62fef345fd2571661f3b915d387864
SHA512 34416079190a82a57ccc83dfee5b3efd0cfa2502d29e510e2b130495fbc2b2ed6f47135f5fa2fe85cb125305f7d366d03ee48e345664f08d99364353a8aa69ec

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\AF4076A4-D303-4eed-B206-6D6A1EEA21FA.le

MD5 9a80012eb2f0c444514a12340ffb2b53
SHA1 37bcb51b500aa8f65b574b8ecc1c30e8d1abf521
SHA256 26ce554abe01841ad7ac56c43422e431a49f49551933b6bec2db48d38af20b0c
SHA512 af026d3a7726f44945a1be4a9625ae23b761d6075af80f8c86a82a143ec411c5cd2db3b45ec9f3309e49c34617a9fcb569f42801a406f4a3bee36f4717a6bfa4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9074D2C-9995-4b07-AA7D-F9DBDFB3ABFE.le

MD5 fe921dca481f9990b91de9b3ddbddcf5
SHA1 55747cb7297c11d22f35b56b068a2d7937692968
SHA256 87dea65ee0bd5bf6bf3860269a954cf99cc3096678e37c26be03a7c52ed2f798
SHA512 cb4130bad6f6ef1c791fa17314075ed94278d1ba2ec73ddda8ab683b0f295ac582e89acf1e829372dff285b4ac97d03630211a6ca7e285510bf596bf46f0ee96

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FBF49CC5-731C-4010-890D-6D82E75B18C8.le

MD5 c7a8efe1195940c25f1f460b15d65dbd
SHA1 b6967d1f1dc0371eb06a8beceb4798e286f45372
SHA256 53cc7585065bf2fcc82b4a13d2a0667d94a08a4b76e76b22d7129e607f641522
SHA512 1ffa7ba11aa5713877ee41c1873dccc1f9c3a56bc64182fe38e5479ae01b3f53736c21d3358c13e35ad39bbf7f8a0ab5474b4470588d5590f2b25188c1ee3893

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\66B14E2F-6627-4671-A9B9-F1470B553FB9.le

MD5 e67e9b94f5e973f4149c36de416dccf9
SHA1 5d918c0215bae895dad2e9ddacec95bb572a709a
SHA256 77f916511968082226ace27c36e8f9911c3d30bd681cef1070fa6b29ee7a8df7
SHA512 3e085d6274c2900a31ebf846745b452aeb35f91ef9c61cdb77f2e1dd8b818e5ed41393f5c3837c1a334badf2cb59be2f5aa90d0f8e72b002813731f21a98f4db

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7DC1DC8D-E428-4da4-90D1-43F6E96B5A6A.le

MD5 92f0f30a8d4e346f16f936f34f93d0b1
SHA1 bdc0dbba5f61078cfb1981da60761b4968e44e90
SHA256 2ea9a376c6f92f9ea5fdeb1b2d182cbc4c2c1cf527f330b5e87562149dc0f071
SHA512 be8334a83f9a199b38fbfb617b6ebd4a3d7507348f31d2a9c9757c0281a38c0a04d890c8bc7e7700573ea2563fdda9a4d650a0a47702b19ee4c60482290d6631

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\16E57649-83E8-4e78-8EC5-CECB53EE8E36.le

MD5 2b99746131b6b5e82aa9e360ac6fffe7
SHA1 af45bd320c9b47568251d9e6fb3e9710bd79742f
SHA256 87e713c5ce493a4b3a6f00a9d76c6839e76809580816feba585a30c64a8d99bd
SHA512 2e902781d8c35390ca8def97f0ccf842c2ed6621f753499661bdef34e5fba7f53f24bee012e1a7db0f5a139e2742901468406e8b45ad1c2b46052bb681491ece

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\286E5C34-7EC4-470f-9BDC-D2B456161B66.le

MD5 b879c26106aa157dbe956692c9ec903e
SHA1 d7eb757ce53e04afeed2d3439216c497ca8c7b86
SHA256 a4da8385615268892cf2c3ff8b0b0c8b3b191f498da84ce7ef2439417d6e36c6
SHA512 32899d19c3c6adac85dc5cbbf663d3a1f9c0a7e7bbda27a47db2135bffe6b678503f2d3c9f65f68460e006dec121370e40fd7cb6db638276c97abfc5ed372c8b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5E597FE5-111D-4696-8295-D4B5F5DECEFE.le

MD5 b5f28db162dec58a158fdd4dd181d086
SHA1 3a9d8b6b0117b3c0741492da5e177435690fc2bc
SHA256 3cb51219ff35007a8212866fb6cb19bc0d3b1bda284fa182eda00d32d6222b43
SHA512 f70d1699df39e3f08cec757a46d6f3631bb0de56980e852a4f23aaef9fce235a0728d74e16132208fa842227eaf971de68d221e6207756dfce0e9cdfac6b8734

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\729C0435-D1BB-4816-80F4-DDBA9AC6A05E.le

MD5 98eb591909d6748967e07e8c797aef4c
SHA1 20db3cb2421fa5f357295d426f7619168836e60a
SHA256 02c2814f2363a5b6227803728b8a92353971cc5b4ec3395519426bb9eacd5908
SHA512 a73652ad11cf83741585379023b7d30e823c8f7a1271e3473a66841e7579510f7e37824accde8fa49391bdae196b859f97633aba54912fc145376fe423f5c882

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6D18CA10-284D-4266-8113-37794E437543.le

MD5 224d49574c468b9d209bd151f6f4a724
SHA1 8984b3f33bd31a1640ca9c3b84253e4e5c26fdea
SHA256 34cc7e9dbc76daab98a84b48dd4c1e1cbfbe0e40af6fbd2cd859ea97a767d160
SHA512 1428e76ee22b48b18950e28f1306c5a6e46a7d187b6d403617a65d967a58aef1eb0c144635e687d1a7f5af1936fd44f0bebc9ecb2d2accc85638899fb24fc530

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\41E19459-784C-4564-9C10-B6D9BA9C6E83.le

MD5 cf604ab8e358341600219a1b4ba62ece
SHA1 54c95a73cc4fd30e2d7eca78d97ddea05652bcf4
SHA256 3ffef1470af1206c95a1a4da1c3d3b13a47b46cc8646cc44acf8d4b992fb0ca7
SHA512 b92f3fd507596fdf5005c232a20d44904daced46a21f8c29a98a66eefc125a3edf5f637db083827bfb99d8686ec8a3907d3adf5f26349f975de6bc5185fb8385

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\14BC0DEE-E7DA-4896-873D-38CA669D34C6.le

MD5 77743e61db9d8cc3de198ed81d2c9b03
SHA1 acf7ae1b30866e1ad8fa0fc3b174fe5d6a09bbb4
SHA256 f70196ead91953f073c5393688ce933c668b02ef5611f21adf05cdc2b925ec0c
SHA512 5ffa552f795129e69117158cc368b9b04d23cbb714430dcd31459585f949c43d6e7e51964948b703bd8660d7b6fab2d4be426a63ea57802f112cea7f03530645

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BE88009D-16A3-4fcd-8BB9-99452AEA32BA.le

MD5 67454fbd35c13bb1b992e0b42284f55a
SHA1 930eafb7f68fc8edafd8e910f2aa3fe6d1e6917a
SHA256 ee7e11131d65f196f5c3b5354df8dfb8821ffb8d3be143349dd6a6aca78e1ddb
SHA512 caa7face59625c8a427a16e351f9e4efeaee9f5cd8df2d95a25bd0ca0a03118be8a230289515bb834a2ceb1db52c94c8f98deb289a27347e673a4e9d55d7a438

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1BE39DA0-4161-4292-8B43-B626128B74C1.le

MD5 822602c9e625a34c34a4a96366bd2320
SHA1 e0c9b0666005fe14037f3157ef5d0cf1c7ffe916
SHA256 3ab30d4eea55f412d8e32d3bff7e6b1b5de13b8c6027267a2851451ecf2c59e5
SHA512 e5c56912924466a15a0ff13cdd664ced71bde6be7938f6b1dd1744148070693252b7e32bfbb8f1044759de65a65bf8b478dd00b3bb55eb427cb9e02bd67b1834

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2DAF69B8-FEFC-456a-B006-8F57C82EA421.le

MD5 18073995fe359084afa2cbadb1a390a6
SHA1 135717c1d86e3a09b1d739e57f627a0d14cf13cb
SHA256 8ff48802aaf6071224cdc3eaa9661e741070f2dd3e1a1acea3f0bd88434b8866
SHA512 1851076811249f2d626b9004d8ca5acfe7b2cc3d58dceca4cbabd35c175bca334bcd1f936cda409e3282798cefe8ab135c77451906de648c77d5142b78b89373

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FD73E2A2-1EAB-483e-AD9D-14C6BB21F05F.le

MD5 c00ff109087781a971b222a3f5c8cee0
SHA1 fda7c3626a8b28797993b335d979e00bbc608c57
SHA256 06c9ee6560fbd814229ab3bca37b68a18f51c6dd15ce2801ce18b4b7ef46796b
SHA512 31be9925b615f363821aaff0f3e9d3f31ad5c9c07d092b8a1b129f6fb2128608b18e15b301cc5e543a1d7249378eee6811f51a607a138be94a395729f937a0bd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA163A21-86B3-45ba-A705-427E1956FC46.le

MD5 b0b4337b3360e1b2bb0c073836120d4e
SHA1 8cd19292bb26756d79bb85943fc697b6eca208cf
SHA256 2bb8d9f95a6a7adc7f2bdafe9ce18b67a2a9b49d0458d32aa0e5c27f5135e17a
SHA512 989876895121ec1ce36061a552a59d65499332ad506d0ff494dab478611683e702be9ada343cf2cce0f82867cfdfdfa04b36eb14542f242d7374b7024fd0ce78

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5AF46B12-DE42-4b00-BE66-B2F07626C0BC.le

MD5 e4805cb84fd46dec44f60ed4d00a098b
SHA1 f19fd00f395a7dcd4b80f36e2e636a4a691a387a
SHA256 9ea354a58db240b0acf41bb84759ad3b3a42087333db0be209386d990408d15d
SHA512 5ad9ed02ff120954fce9765d05d206fa6a45ae55acf6dbfd0923ccfa1175680bb6cb0a9ce5deab3f42acabf57f12aa990b5a41c5b938528c89495f8c97c676a1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B193D50-EF01-4617-8E7C-8552290EDE76.le

MD5 848a243e2216c601b67099d50fb1f141
SHA1 25966f3745814caf85220574bf103c5ad3170176
SHA256 5d939cfc6e7b88fca7c878ffabbdf96041581f61f3e3531f1c5ab7656fe43223
SHA512 aeb8b1d768bac24262815e943915e0b60cc8470bd27bcfcae49d80ccaeeed052707422c3ed9f7d806899678c005420248d641bd9f9d9aee1c420abe23e194da5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A4697BA0-A8A6-489a-AEA8-DF6AFE9469E4.le

MD5 131112023f9282865191ff9c0a4c9325
SHA1 98df3911a992546ef39ed52cf2d2f6e820738fa4
SHA256 65dbc13ad1f6ef3a8bda9dfdf6d199092b22ba443d09a6ca51eb733e1bdb20e3
SHA512 5fe24f608a29512621aaa573f892cb150fa8657eaaa122bd62af6ef492097f9f6e22e369b3c20ce2366cbbf6db49e633e85ae05253e3e393d494b1838c3d567d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\142030C6-F69C-4474-9444-AACC51FE4496.le

MD5 74919ef1081d582561159b378c4e03ad
SHA1 9d2d159b4a52a360009d94fe5a59a50b84ea6737
SHA256 772a3954c3e875d55dd527454260b73bf59fe78661d74b63111181b1c2296b2f
SHA512 f49ad7bb42f3483dcd0eedf869bf36fcdd73fa8a37927ab77d4c3ec25f8a413611db716466be4e8ba3d5d367bedbafa25e278407638064edb2316e9338e6c85b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\EDB0237B-E183-4281-9D82-0D56B005C01D.le

MD5 81123d1a3c3c26c23044e0778ec17880
SHA1 fe42221f8c9b9d58364e31a6a181c2ca4fa433b4
SHA256 f9aa3b8045af6dd6ebf501956604c526c9829b806263ac999c3b1a2068acb10d
SHA512 a1f0dccc8676e04a16f79f1cb85efedfa955970ef1343c5feedb16573795d961b2bcc1cfb109c8bd4d21960189d97e62b6b17b679c4b2e341c8a1ffaf965cb97

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\037C2AFB-0D92-4941-B026-FC61E4024181.le

MD5 125c0498eab78dea1d5b28a34c9aee25
SHA1 49f1e6195f2601970e153f4525ee1fbad6cea70d
SHA256 4b98398f0f47c3a7c8c635f784cfd1e4a4bd268854a0d4b59a3dfb2e708488fe
SHA512 5437f1be7be39386d907a844bfb8ac085cb0399ee6aa7b0377ca40fb7bdef5782e5c5ac5e46268d9836abbb5909da777612bf20dbc871dfc2efa0e1338f47555

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B8FE201-4B61-4cf7-BBEB-D7B3EDC37326.le

MD5 a1e1ee0df629835dd821737534d77af7
SHA1 857499297d8506503815984f1068c5060ab64924
SHA256 518a902a36c2136869b5cdb50f90f1bd8e45d2976470d279827c6bf4e0d6f758
SHA512 82d0c18a1cbfb55b5cf1209888ab144ebf2431f31f4ac3303f7d6fa4399b7c67a62fb10d5418fd7e6283833681714cdb281750406277377c9cff96ed550515a0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\86F9A695-FD6F-4991-ADDE-D18DE8E982D9.le

MD5 7c1811d8bff0d7f20d6c6986b5ae371d
SHA1 33bfe6aa83c97228a0729c502ec40792d22a46f4
SHA256 5ea77742dc6f4ce246bbeefb20b6636cb4eccdb17eb76fb0a5d6c6de60aa1829
SHA512 38116fe9677de16df70828d75f222addddfe76830b5f78300bda7f4148fb21214349b6df461adc43eb5fcf0fc429ce805d563d60c0eed4be3f3ed55bd38522cc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7710161F-D779-4d9d-AE4E-8F6E5618C82A.le

MD5 b13cf37e98fd5e14edc3399aedaf1a54
SHA1 3205db0d0fdc8bcc601900e53d641c16d55c4422
SHA256 3291af7057dfc1bfee126f84c25af491e265806a1e72707d8de2a76a39bbe3e3
SHA512 48ef5821222b56ba7965b48a7324030e782349aafad1af5645662ca859711f1ef3c39cf85a7bbd001cd8e66e49367c80e51779e29c066e3814a89bb9b8ee9430

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\90F1DFED-5C11-438a-A835-74C6E3403524.le

MD5 18e253bafdcd90c578996eb67f112677
SHA1 70c2e9ca1715f4f9b85f3547557e9f4280fe394d
SHA256 bc955c207040b2a8cad4cf3fc9e69e714f1df9677412cf89c971a9d104894b1e
SHA512 7100280c8e70eda1c07182c4ee09a85872540a267e94856acb5649a406eeae1580006858deee1f19f03b0fc86e8b56c9e3197c8b6863548f4c79eff05eb86b74

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\25EB4826-0858-4e48-BCF0-41813AE9DB23.le

MD5 bdaf9fb0889868d6f13f1dde1ef21623
SHA1 231c113f8cfae90e8d5227dfdcd8328b479c337d
SHA256 684ace39dfdbfe16c9652b3781008574b1ab4b76c843a70dc849d12fc258d967
SHA512 b6188c40d8aeaaa49bb5bd625cc6e55334d2802af9eea3c9195b0728d595cc83622fb60dfccdb44ddc994509bc7e146f5b332d74224d13864f29e54530dddb69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\45545AC4-B450-4ed5-918D-6AD5F5969F29.le

MD5 2608781a13a83d5d0679aad2d6e4e5d5
SHA1 9ca3daca30265325079f8b3d49d9b6a41111184d
SHA256 3d46cf39c193ac4f1b8f5d76cea80458e766373a3a5d9eecc3e93c00a9e697be
SHA512 59bf39b49adb2f85a92da44eab6efa2d30cacb8c3792977c09f82bc222e3adbb8bd3bc8b59995aeadbbffec81b29092b0550bbd10f05d23cb4f9d83f5fecae43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83CB4FFD-895B-484c-8708-8DEAB1D620B5.le

MD5 2e61e3a42412a8f39ce44b890cf2e6e6
SHA1 518fea5340666ec3cd59b7e547f89cfd621af2f6
SHA256 d332a5ac8d8790dafacebe883a28b69b70228025db1b106b0a57f2385c1c365d
SHA512 2c4a996b740b09cc1cf3f7ce16bb4200636dfa11cebd8fe3c21de2ed12f8443dbf492bc33b3e506b9ef3960bfa4ae89ecd910c73451cdf50b8bb368f0c41aa2f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FEB949EE-7491-45ea-8D8E-948295DB80EA.le

MD5 c7936e6dea08676b7454f12765f394d9
SHA1 cac4c8dd466d48e0f807d4bd2c467342988ba539
SHA256 523f30dfc16358441c33c23eacefb194c75b0c1ff051fe55232407398904f239
SHA512 a23ec357b1cf26b8408f09866ad50eb61634f8488333cfd323d2e225b89612daf420e13a95ed5946c6ab1548ae0c5b4480fb60dde9db1ae794821a81f539ff97

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\406931D7-3D67-4d0d-AB2C-67DD6B4DFD58.le

MD5 c2c1f6ca5553fa6b092800533f0a6bd7
SHA1 157453ba5bd9db8358b271d9dab80c800be6cddb
SHA256 56d943c4acd1a289ed8a6ef3c1d44cc4a81d1aaad3211d9bd29cbd2e4d495ed7
SHA512 3682377ffcdffe244b89ab86e8e8779e22f078318da2656fec82ee14f4b7a7b3abd1561099486f364576b44986d1a485a3b5fd89c65e1d483dc83c5ba2ed059e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8C5B3D2E-7C99-42a3-823B-F59BCCB649CE.le

MD5 7725ef65a41583c7aab213ce3f6f0003
SHA1 80dbd79fada4c64e42c727158d6d84d6b0df3352
SHA256 1bb2026bce2a2bdfcc1733387b806b0e2183c47ef9066f7e037d13924711dcc3
SHA512 9bd9e415b808b9b0d94562d01af63c89bda5339fc3f6daab5d6e8a8e31b71ffba73e3c3559d45880a44de166f726963a839dd6dad9443bf67b86135c7358d48d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\43CE9D4D-E131-4f22-AC36-069DF45C00A6.le

MD5 061ff7a2199a133ac3e9896b874da3d4
SHA1 c56308993bc950eed2f0577866f70180e9ddd33b
SHA256 1004d9def8d5aa0ecfd30b02ddab3899e4d507b50980726f7f3fc63e9398f3f2
SHA512 418e55a6e8f3a605ece9213d161420d9234d0def0cbaca640ef3d13d1a5eb3aa12ba7b9d4e7c3709ec1cf70382abb595e5b300ce5b7e985b27bbc801cd90d56b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0906FE95-9A1F-443d-A52A-74119DAAA790.le

MD5 81a05f7ac6f480490ba1f7487da6b8f4
SHA1 3846efa26cdc4980c5e528a00c831c82e8ef9b6d
SHA256 80110f0cfe24744e2b7cbdf1a84bf93d8e97866467772ab02671f7f26fce5923
SHA512 749bda9e4fd27eb40890fe30cb6c1e5c5eb71e6166e1a4693d9ea15665dc086a70dcdbc19d055eb9542ba961a3b9692fabb93189a0f79477488fdf5bae883c00

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2BEFFACF-9539-4ade-AECD-A0E33EC6BEFE.le

MD5 2f1cd88898bb6b3db80da07f2b0c7ce4
SHA1 a1c618c9eeed96dcd9f943bfb70a994b3a66b31e
SHA256 bac5fbc2c2d45e8d66c096d3611259176d0b2e5fa909519447ce068244e75ab5
SHA512 dc761d0e279f95738fd1ad364f041da8194d77255c13cd79dab350721ab70e17f2212651454d639338bedc0c6545d005496b76f0f72a71505ba9cef35dadaf37

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C90481D7-B35E-4a4a-83CA-B65798964DDB.le

MD5 2864ba9dcb96c214146eab3cea2fbae8
SHA1 b46a0d75f0a398c0506638f9362cc943e873b576
SHA256 897c59a3c2eacac4ab817d3190f47677fb1d0a0a30ab123e3977d9b23a61cbb6
SHA512 9561646b877f3b660e3965ea2b5daa4bdf2de3d2f5c6b4229d0f298f3e0aa959a922cdb63feb626a5d523e2a1f57515e33af1532f7ade0a496aa500ede5ae12a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CA020A92-F4FF-4fe1-8B9D-589B4B4F057A.le

MD5 267da58dc571dfa3dd563baa106358e3
SHA1 c1f173e89871f47a68e0b01750c650d4b4284362
SHA256 918dba2dd76d31fbd217297dc1c0a1486fab1b50fd735fd1b5b5bba1e9dcc1a0
SHA512 9ac7aa7a28c45b456bb8309e6cf1d354c52c56004ceb9f349dcca1839a71f8dfee7cd3c645138bb8d97fafa6931ad4ec743bd7b61206fb43da3db563fcba9530

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9C61B688-2411-4c10-AD82-A45519C8C3E3.le

MD5 276533264afd83f89db2a9a2b9d2b101
SHA1 7f8bec68c82dd003d91843e0aa8f94c6e572db15
SHA256 27791a8bec3f9f144596797bd07c9f3f75657ade3e3143ffafdf9dc8788d5832
SHA512 c89bfef9ec7c0be9eb8586368740b1241eb8d183a74709eebb0cf58e22fed37db4253684b65c0799a97df9a9d2232c27e8039fd43f08f3465b2ac7c62e55ed2d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B65A5D44-CF46-4300-9877-8C3822AA9634.le

MD5 12ca5e77261f924236f0aadb354ca322
SHA1 2e70f8c131fe21b1c2ae122ed7f99b1bcdd1fc28
SHA256 c5722ee9e17306f9e900386f4d008fb16f355f903471596811a1eb4563af329a
SHA512 5abad85f6f85982f2746a6aa09b06ea46ec8ccf66797459be0e5b1f28fd4e8a8ff52ac74453f8a34872ba5dbbc6c35bc6280b2686dbb189dd6defffc6f90e071

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\48195C54-9E36-4066-A266-85E20527EF83.le

MD5 40a4fee0965827c9c0303e695f9471cc
SHA1 4dbc7a527153ae117bdfc39be447e6c45f42efef
SHA256 fc670f7f54c446ea1badcb9bb64d934b81e8d98d5f65a40da1e5404b5e910983
SHA512 6c27ad066330d5dce806a638e476f905752e5a817786d51e530d9d3f3e9d7448805b3aae4872e93c007fc63d1b272cd2df24e391d1e712db73616c08a0f8c58e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6256FDA1-D694-48b3-B441-0BE885AA88A1.le

MD5 4395cdd04269d21660c55d9f6ae5e5b6
SHA1 3ade07d00a6171b96316de8ada86e27228050050
SHA256 3e5b7c572681d52370662f5d34616d1d2e47ea222ca2d062498f834b2a741620
SHA512 91edf7aeaeda425897233ded59fa88d6c704419880fa06959a67b43e8cba59eec17af54be008d3766304cd9de2754e9b39ab5d1e714ac074431b161d24eb0e29

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4F37A84D-3244-4181-ABF3-6795762A48D6.le

MD5 d825f3ffec117bbd999c90b4db0e38ab
SHA1 f8222f4945def273b420f6bd7242d5e5aa8f061f
SHA256 9d781a5d94156256597ac972363e9116bcd7b1d14734aff03e1a4ddaf58806cf
SHA512 cdd9a9270c99260fd817ccb34b0375aacf66586d24ad404e9956efb0ba301d8f5f369f77f2f8fc5b188dabd8a57549980ec641a507c76578aac994a85120868b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA7E0A89-CAF6-4671-8744-41EA0212DDE1.le

MD5 8b0b05e04e823af8bd55a3026e49dbf5
SHA1 c1a89afd10190bdef6cc6c058ebf1b6834ddc31e
SHA256 9a1ff392f2dac0bd16e9052d713cac4a8d3975426ce0b101ae641d186c14c6db
SHA512 af942b55a12cb7ce1e624c0faa83046ba4d24a1efc7a15bdb6070f66acb5f7c96996e9427e0cb1f681ad771327ced708d1f189d0052d93ff6234163b0edd9700

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\161051F5-6014-454e-9A4F-7A3B67BA905B.le

MD5 aa6006a950052a569ef3494e1c294a32
SHA1 43bb8e728830d2f5270261b2dd60b2fc9547c2a1
SHA256 ed021242ebd67c5d8152ed373e9ce09ac69cb0378eeef9feb4dc9f2d9f880c3a
SHA512 cc713e29ec93b535c591973f43647fde929b08ec60546cfce0f7e89056165186fdd2c705d2adc47a5e0defcba1ab2dba4d0c3b624ec037295b0abfb6214f21fe

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8307ED76-71CA-4432-857E-98CCFACD96D3.le

MD5 4cd247f76a03e74f8cc3e880b04ca4cd
SHA1 60e5eb3c41d4d3b8bcf6952f6704d1b0b60837e4
SHA256 6424098def0fb97c62dded3870a101539758fce89ba2e5e758f43135947a4368
SHA512 bef4b8998ee625cafe53b4110678168b8ae71d705fe733fead14fcb29dd44598aeb93f3b77ad1b1767c36f3fb77f0ae9cd404aa9e160fd9b0f7df34c7ffe9fc1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0769121D-4ACC-41b8-8E7F-CC8F72F49975.le

MD5 cb68416533c8ecf740201ec3ac65e87a
SHA1 4f87585f21a8c1c64589e0be923418d908f6206c
SHA256 89263241aaf521679d6c0701e5589dde1650b03e59544202797062b5ebdb6686
SHA512 3d1003920f35ecebed7bcd9a0d34d99981dbe77a0ffedeeee55fad63840fa7f176768ef2bf011b2e42053e21cf5fd80018c7dfd70a876b013f5c15ffc25736db

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C1FFFBC9-8C6E-4b94-94D5-1F7A449DE57B.le

MD5 f44dd50e18e4525bd26f987d3e1b9ce6
SHA1 cf90ea4ccc4e7d6cc46018c9f5de5217e006ed99
SHA256 fa85fb8b2312df5ac55980de01c8fbaa2787bd126da1d9775c5ed9256d3ed542
SHA512 5c7beeca0cf709486d59e7702b78364438537345bbf2809a8dba62be8aa408a43553a39148a474fbbf7000e24cd14846969fd3f3c8180e9d2f3c69b346358071

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\96775CA3-3586-4a01-AAE8-1B9C3FE01D5E.le

MD5 d8b0408a47c3e73b18155bd272e0aca5
SHA1 cb9a1ac2a403ebb29a9cb002febef83473b82f7a
SHA256 e51b6522e472f5d42333067bf4113111867defdb100b62c4dd02698e5de25aab
SHA512 3c899bbc564b76bf5ebaa6c69ae2be28a47d411d355352f829d392c97824b9beb944de8d21a14f3c38c6ca7a8604b1b661a27e7fa42bd1ee1c031770cc4189d6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1EC1A2B9-A5A8-4c62-9268-B9498E7EF3C7.le

MD5 9efe8112d5e420d3097a276e74cc1410
SHA1 87e5d7de539b4656f10a47103e23bf47cb1a8d9e
SHA256 bfeec32df73b47ab59c9d0b3b9a0577bbe9355b2f6054ec329053d10a35f0b39
SHA512 8fd40300c15908e4eb0de13d4310f58769248738ccc6b16340704400ca09dfd12c463269db7cd6cd3b184a7c21291272d62a9a19c40073837567e1e16f3f43fb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7AF6BF8E-3D55-46a6-B53D-25F280022967.le

MD5 96be2165f2f3aba0964dd83b822b8301
SHA1 ac603bc67e5d3ad8a53820d2502a360980ca8e7e
SHA256 256ac91a896bd6117e0f5391c5407f5a1f9d67363fac9f450a10bdf41ec1c59c
SHA512 106200e0524421bf2cc8da86f9c6c717b0bc2fa9b2c33ffbf24929ed7589f8ce0e11640128c9c04b826755afe8e6f033a70aae7db85aceec0f04caf0e3f6a44b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D1EE3B44-1F93-46cf-87E6-7D7AC132FD2E.le

MD5 c7e50190ef92118b0c2de8c0bc55a7e9
SHA1 3d890ee0d2b4acf51fd61da84c086a15d2413c41
SHA256 4f93e5f4b75efa0a98283aafc2ea1438ddd09ca582fb3196cf2ffee3847cacfe
SHA512 6c997946170f2edc77a6d00c1f2eb991b75c5f9de01079d53ec94f99b4b3bbe6730f1bee258f0fd23cf62dd9982370c7e1a864a2d0eb6594df0c8251def0dec2

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6743740-C759-4843-82BA-91584E9ACD90.le

MD5 375642a4374db5bd29ec3dacf0c8fccf
SHA1 d9f86022be25a2cdf1f7e0f2dceb1ae1eb4f999e
SHA256 ce2a080cfb683ab26b0a4ac8e5cf5a9a879ac8dff2c433d7c9a63f83c1f57567
SHA512 21a3fe0a6aed25f0683be461227c8672b4f87c11b2181585a0bce61d0995e80d72196991508c2cf1d2b5abc9790c1fb66070a20f4a0c47ceacce40f072c18598

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D0E0FEC0-BFDE-48fb-B26E-6A8AFD391B9A.le

MD5 cf31055871b5c15af3d3c1334b3b715e
SHA1 0ef72b354c00a426cae05b2b89832cb80cc8cfd4
SHA256 8f51632757037dbec67acd95cac08a514ea47a6cf4e20cd422f189900db38b5e
SHA512 78fe55a71ccb5010cf1ed83ef238d7c37bb2ef920004565be0e77f697a1f1a546f3b2b135f242100319699bac717b3f778be929a39d1db7fde8148ea363ab576

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1263A412-C744-402a-A3E4-9F81D1071634.le

MD5 57770694f84d3da7ae23ed864d251b68
SHA1 012fe610be7872227335687fcf0df32cba8ed5e2
SHA256 3db3a30e6ec754cc66951fec077bcaedc4018bd27346cb2966a19725d206808d
SHA512 c5a5db9742262a9876e5e3ded3d9cc74b711815a91d64a311840bde658c36463710903bf02dc7c9c905ab65d21c2db286e3af2604615911e16a51037301183e0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B37F7AE1-F791-4780-A302-0D56A9061D21.le

MD5 2e9ebd231023250e87e4f5cda778b290
SHA1 f67c34a2f8930d619be71854abd5704dcf06aec6
SHA256 4b637344b2cdf78b17b02c6f844bd491ca10927ede0f4bc0cf57ac69bf903389
SHA512 ede62568870bcf50d6e24ddf9cc1e017e894a1983c480e08b4849a4bcb8acb2e133819c9225728bac8288bd23acba04d38fd43e71f5747bebe0f13ed4e2f3d22

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B912E04-A3EB-4fec-852B-4575FBBF2980.le

MD5 3e01e1752741132e352022d23e4af627
SHA1 7bce14c1b9bcb21a9ddabe2df95aee527b0e2662
SHA256 28e20ba4b300e8f8bf1d985787cd11ce4a1ad5d240174559365d86e62978432a
SHA512 bc0f0c7be68deca5b1fd5c7f3556ebf0e31af35dbbf376876ea3a9063691671ae001b79949d9a967f085076438fdf24a097a57345ca3684ebb7a5a5b012c96fb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4E0380BB-C38B-48ab-A04B-593757E0339B.le

MD5 1fea723d48062dc8f87352e3c8c20d68
SHA1 3ce8424a14e34b2db4b6fb19b262709a2e567279
SHA256 1aab6d8d95123eef68414aa94d0ff2064b210e4c5d72e19138edf6880823b8b3
SHA512 ba2f41e724fede75a97f22240039b9bc329cab4a5c18d9c5e4681d1be45c5e703c74eb7b2ee9f7a06dd1e21062a6afc9f09193239b4040db003af27518e23bb4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\84840307-472B-47a6-9C63-466288B2FFD5.le

MD5 d1f3d611265892bc1d5c63d23b6b748b
SHA1 3b2d72e63ebec931e501c1035e77f67676fca6c0
SHA256 9d47db0df9ac67d0b7eac2fe416b004a6988d7289f5fe217ea90ff28637ac066
SHA512 4d233cf4479bf9fc9265f8b0c744448d19f46fe9531ec4a3563033828b1f832d8d88535a2296be85f764e9475b24ac6e9bbb8cd599f83153b147a58285d7349e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\81C77B1C-2585-48ec-B5DD-2EA2E34D43C0.le

MD5 378f41f848a4bf40e9e3b2bdf0b9d6f9
SHA1 b306d9b28d9b357b0ac9ad8bef7a97d696ce4865
SHA256 55634c4f64d566e725378998074c185d70b731d3701a245803c855c5a3057c7b
SHA512 31225d2ce0eb7602508dd5f13e5d1d149d50675ad7407fa43965ef61d8144d5738660c041d093a989addbc0b9fba3e684fa74b95397a4764ea878ade6b76b0e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4ED93DAC-2475-40b2-A77A-AF29A33384EF.le

MD5 7061ea5db377e491ace5f6b924089d9d
SHA1 b150853c38b818db3f1b5e779d5f499cf5771e9a
SHA256 17687273b474acbadd55b31b07acc7341bb4632e926942cde3351f449aaeffb4
SHA512 c792651a5217950935c4a336508f1b05730c950577f7ba10584c13e02325176c4eb2137dc1b168106bfe98f39ee2cc132f0ffc644a5a05dc3951788561715869

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\48B12B9E-897D-4e50-85E0-883B76C0F88F.le

MD5 aa809a67ce5a90bcfd3a378d1ad34d38
SHA1 18d11c1bafe2bb56522e6d5c36c9bbc18bee7bfc
SHA256 f7f39430a3730aa53e72a316a3d57af0151d83add760198edceded3ee04ef183
SHA512 006382d87742384b9f3ffcd80d64f799414887b46cb1071d91f98648b16d99be565cff42aa4c364fd11d3943fd7ec4cea131b90f6e7edf485c82003ba5a76b82

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1E0EB05E-DE43-4143-8E41-A3EE9C486B03.le

MD5 c584ff3e4b8e2ea8fd013c732a9e8482
SHA1 beeaf2858ffc288f1dd609e1f0ecb5ed0f80e1a4
SHA256 41e0c8ebd44143252a2a01e5ff86538021edaa9d52c60b23af5a7cf6ab4ccf8d
SHA512 b34445ae46ddffc4abf1bb9ec6a11cbedc43b555eb46c86b45ba9a8ec4a85176164a84b5a874b7ccadc5f0e22df480884eeedfe89033dfb0f591abc2c8bcc89e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BDD42643-67BC-4a7b-9019-E2824F718442.le

MD5 7d36fa7688313d5ca5f8c226f7409136
SHA1 cf50b84b4036a41c140f80b12758b785bff3c3dc
SHA256 02f44eda6118b1d10e7c8d0524f8bcf59a9fc57c052ed183c843b8c260751d45
SHA512 af9bd206f67283d1ed772f16c192f345bc92723ff6fa9ca50456e3a8d9141cf11312b8599eb654c82183e0b0457f63469aa1a6d41b618ae15dad517a1dac222d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4C42BDD5-DCFE-4d60-ABE8-7E573C3E1F46.le

MD5 c4bbee9d2354439785f52c12453d7bbd
SHA1 ffe94ecaeb9239d8787e93df0129f3ff0fd2badc
SHA256 6a6f0914180b15fe45e6e3b5aed444dbbe4f03607037955d6095ef88c1442f99
SHA512 59f11dcb26fc31bc0252d5cea6a370964e8e21d5fe1868ed3041d11399fe6af315c48a23c216acdbff9b974955423236cc32978e95e40c1a8d387a7acca67e43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\77E996FB-044E-4e95-BEF3-1F9D19B994FF.le

MD5 f031d8c056a0bba4a26a39ec78374743
SHA1 eb1dcf57357fa1ff7215e8ae380f423807c10291
SHA256 94dd2fa8fb1dd724deb05fbfe6642a033566ef68c08e3557a112cd090cfc4464
SHA512 917731ca97d6ee370cb7d9c11f34c3ac9cd2df0eae0e495a030c96bc1c44a7e41fe87a8a42c0d93e2d51a7ddc611b71f2b9e7a6af3705735c8f3ef3019e2373f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A311847B-D68B-477c-978E-AD68BB47FDE1.le

MD5 09ac7c196575f5f929cad6a4e019e648
SHA1 f5473fd4706d8f043a3da2d23e1b42e926cff939
SHA256 0282f54c9299733f22bcc572994ce3a80302066b993afd6996c76dd5d53cd492
SHA512 6887edc8ff0de56097bca1fe4a9062af3b288fa58457eb04a65a676695c1c52d1b77839e3bc9ab4113f987f94f6c2f2141e8f03be35068f32ed6f8736f454ef2

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\46818228-57DF-4d10-86D3-6FBD94E98ECB.le

MD5 8d960e4251ab80d53a2adcf604158231
SHA1 82bddd46b4030be8378fae8c878c922f4fa189ef
SHA256 251cb54ffe8d02cb9a9a56a1fe226e77301d573771dbdcad84479b5b5ff3e953
SHA512 7e45cdbfb113f5040a99a3d0d9e8350199207cdc08364545a03bf76eddcded4708039d8551980b8e36e82072e9bfaf2e4eba58b0bd32ee6c95e8517805913e79

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D641AFF3-3BE1-4022-AB1C-0ABD7F55989D.le

MD5 92e2c2a5221a940c4f8d122bb8af1902
SHA1 c5af8183040f685e1248a1c0e09a94b54d22c482
SHA256 156d713e26d0a160e1f618d84c6e1a1defe4dde03db88fdb939d51ee7b1eacbf
SHA512 56ab0fe29f8c8da49e35e61b2f10ada59941afcae7f30137b1217b7490f07a83a8901117e94ef9e026d5752ab1a5d6cf42ad11eb7a11d007d6987e23570a9918

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6C635C54-846F-4539-8AAC-765851E87A10.le

MD5 0a99c80a57b755bc8a56467870e53491
SHA1 7216ef4caf5967e06f9a656c2ca79212f2e1857b
SHA256 a728ab2e10450b163ed5d95d5ed03d532c867beeddc014b5c29707a1a2d0c99f
SHA512 74447830a2adc638811939aa8c8a3a9fdda13ee1f5c09c9d76598539efa3acae3481a78b69d4014ec3d4d7755844ab1ffe1f0aa449aad4a11cac13f7bffe5954

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4EC23E13-4653-49d9-A247-17BC309866BC.le

MD5 99cd71e2a284305812eca55a55dd0ce8
SHA1 337cc61361d5e5a112995d87cf76698e32c2ac19
SHA256 5008aefd17d4db4dd56c07042083af30977925267e576291b30b143247c7e0ee
SHA512 9ca46641d6eccbef8159fbd0eaea819102904c354ee26cb6783097dbade6e1b081146af908a5afc4fe25ffa48e1844590780bcccc785cf74ca00be7da2e0dafd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F39846AE-6897-4b7e-A2C7-A32E1DFDDFD8.le

MD5 651cc40f4f51d3ada24538e92aaf1f55
SHA1 411319a7fa529c72727cce4baa3ae6163c02b0ba
SHA256 907d0abffa07b0a80e63b917823f9727626cca081b0ca5048378e319699ba1f4
SHA512 b2b3a4005aa6e339a70453b57bd3e51a08eda87af5f00e555f60a3b2c38221063d96b9d65c6b314ca5c4a8d64c5aebf593ae5b353acd930249e0872e481083e5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\31B50ED2-38A8-4b56-A98D-FAC1516E2E20.le

MD5 ec43439cc45817099e924e8bd45b7375
SHA1 9a4a01ed73978e2856322728aa259038268b844b
SHA256 03bd58b2a9286c25299b053ba9ffdc1ef8aeb7a2881247f7a3b7422e6b8a952c
SHA512 141204f49965d25a2e7349530c03c0a1118e8fc8aadb8689edebee27520c6132076b2b7521ce567e25316416307a5bcc8b6078b5836266ddfdd407e59054558b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\28832822-89DA-414c-802A-8BED4F944BD4.le

MD5 29054480f093815503c659887de7217d
SHA1 d928875780742fa3b8c60494ff3ab6155bde8112
SHA256 0d4e39365df0951fcb589cfa144610d146e349e870fc0c0bc70465093c691cf4
SHA512 2156d7bc15e4155cecfaaf9e4d3e6bdba6ffe764feb385b92ef89aaf8110ebf900205c1d12dde00ea3106da40fb95b03fdc942259c8e1fdb53f6f9124b7e3d61

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\AD8652EF-155C-4f6c-BA4E-306908DC0584.le

MD5 5e822cf8412da84180cd8cae03a1f4fa
SHA1 78de8bc517c59ed17df5a2daf167be33787657ba
SHA256 9b11fcffac97c2302b8bb00320258f11eccb556b0c1c9ec045e3e770390fb21b
SHA512 eeb4a4d75ed4edb922887cdfbc70c72bd86dd8048e47a7ec833176aa5c89c75e97a77e2fd8b41c7b855abfd54d85aa64d89935c8665f6b5b04a77fcfdc45c8ee

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B3E8785B-EA2B-4ac3-ABCD-0817127C4276.le

MD5 062d3cda4e0d71b1f7a963e62bac73d9
SHA1 2ea171a7fa4e29a9c5c7544c6c08657241b66ae7
SHA256 15b5097f7a8eba39851d16827f01f81862ed2b04e2b300dadaafcc6d49d40988
SHA512 6434982ccc1d8cf6c60b5cc74e8bb35a71c9186d990ed50ca359db3c7837537786e884ac2eb96078d46b145ff67d9b07839959663cb17ff632d99756631b602f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6A7D46FF-324B-4498-ADB4-3043D879EDD5.le

MD5 15fb101d9141951a18142a3af1476506
SHA1 da9bee564d730e46d01c9f2d11c10bc4ee34a7ac
SHA256 6a02716f1a52c51bf978721419a7f893a683ed10116173b080d6477c6280fcd6
SHA512 614b645af55d9ab1f2b5e696cb7cbfbc33397a33db46ada538b0e6db94b770c8f4568ba2009bae2cda8a6919a2f9a7a4cfce1a1b8bd863b6b3057835eef74524

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0795CBB3-C232-4914-9424-E614E4C9F688.le

MD5 726001a71e89d252b36d324432b537d3
SHA1 92266020da22dbd3fbe4246f8f80e17f78fa927a
SHA256 6b6de2ad7efad51d481aca90db831da859907107ea1bdfbb76bf2fc6544337a4
SHA512 08da4c7e8504fecd2df7102a856aa7f709f4f7609ac8c4013a3f1d3f54ee761c834130df69003e4fa643b754948f44d3d7e68d53102265dc9f3fc3b816174921

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\51F4BB4C-82D4-442f-913C-715EFF89853C.le

MD5 04c9942a860926a81dbdad678da73a72
SHA1 1972c7965a250bc67085a7bf39b6459231f37b17
SHA256 6cbcf3e38bf69390872b2c0f91cacc913fda6f9197f465d41a89680b44790107
SHA512 24ced24aeced7c1fb92e311f2a6c57d6937ae0f64473eba4baf5e754e8ffb89cfa9ead8c66fac483510238040ab1cd019c40122d8b132840545244bcf1d0db5c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\E38935F8-621F-4af9-989F-73F29FE93675.le

MD5 6beb4a50f06daf144a84fc404efb8764
SHA1 0fb42bd2c58f0be8cc4aa74022ae0a9f741c6875
SHA256 229e9bce7d12e9affc58e1c489f0e98205c73cc8c45422d5ad1c7ebe71408df1
SHA512 f2eb600ad6ce96167954b7e83bb637ae6867a1394d4510e93280253de5b2cae09758a18dd281de07afc0001716cd96887d344bc6fc52c41a12e8ab4bf5a34eb4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CEDAA65F-E9AB-4ced-BE76-974E4F56DE4B.le

MD5 7abeb1f85f243a852085edeb91772b8a
SHA1 a835e1f82d0ee4840ed4096b8a16d2abbd38209f
SHA256 c14fee2fd8f046f1a39ed33e120e74e01974ef3d70418a277c5a512cf44b0dfb
SHA512 170836b4fed091a738b11a77fd9c0087d26ad4f03e6b67c30c5a6ca4b6ce17a3f815ac0caded2a85479aa9f64794d0ef2693b4a36e15a4689685e702fb6d2831

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D6F9B55C-8B54-485d-8C16-EDCD691D74AE.le

MD5 29e91bebb036a3b717471ea5048a56d7
SHA1 dcd8c73e813c48ecba92f93d45fee8f7383ba36e
SHA256 3543eead879c6de4bd9322d3a137ddef97bc2831701e3060591af162db4a61f6
SHA512 9c6922ca678f4630bac20a34bb8ba201f39b8726c767420a6eee0814052e513bc26069772d91f8a02250bc4b27b20be60252710035b95fd1fb2909e772580475

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7F31C6F4-DBAF-4eb6-A2A3-7A6251495F1A.le

MD5 705edcc5f0b4b4d372759b5e213d9a94
SHA1 34caa16585743e4390b0021fd2e255ccaf173aaa
SHA256 8eda684584fa2c20a34adae83f72ea4d1839c2dadbcf519869f4699a323cc22b
SHA512 a05a34f87725639fd5db447eff845305d916c66d410590f27e99f15c5dd0fa61323c9f0cde527ea5a3c22a5dd90bb1146f193b85961be9146aad6b4cf6368602

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\72DAFC80-5562-4da1-A2FF-9B1C493D2F3F.le

MD5 eb310ad62870b96f0e0d5bec19e04644
SHA1 bddbd29184416fe002b2124bc5fdfbac7d8bdf36
SHA256 d2b733bbe8c30fdc8d6f7cde7853bb75bdab95e23d3ca584dc7945decc844d08
SHA512 18c2c92dc208ed16bdd286134b977cb09f4b091140582862bb52018a4c8cc8b5c02a37b0a54a6d99c25c43398b48bfa8b065fbda33e21f483a2c909900608495

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6686425-3D58-45ea-81F5-047D4CD725B6.le

MD5 1b7f2f59c3ecec52b2c50f480d13423a
SHA1 98b34c88e005987f37d7a5b758fb656d301c01cc
SHA256 b6d367647507c6ea6fdaf15d958b70ac12cebb37c06c8707d81b801a01f6c116
SHA512 e135a654074a4c73f34d8e44d1be91effdceb1396809fc7870f8ab9eafef8db4eef7907383e73da88a6d33a10d5d24145c1695ba018dc3ebff1c645c6ac38f96

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9026B029-F1D1-4cff-9478-775D082ADBAF.le

MD5 d873c1b533c346433f8231ddfcf36382
SHA1 df5872e38910cc0240bb363c7ca905170530eb4d
SHA256 6d31f08555770acb9a9783759725f0be6606a6a2b847fa092228ea22c24a94ab
SHA512 0143a91461b9ed96b13ba14459f5c0d92abb33e3cb5aaeaff54b7f73e23c16f31c0f00f49fd8ef09c6c30196b203567b3574da36fcfcc06ad57563251462cc76

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BB3D9CF2-7063-4b37-85B5-B8C9F38D819A.le

MD5 d0b17b0c8f09bf6ce5bbba02f7a99b6c
SHA1 24ae9ded9ded82cc5b2ee45dde404c4ebe997ceb
SHA256 c6c42d77a85e02cbb9ade969eab783622f9a50f738f1e996944abaee7af0c214
SHA512 e444c2df0e9a5e42bb439044ffd9729413af5d32fecb0fc721fed84fc6030fca2ffcb7d69f077b6af791faaba164b7a014d855092653d361db3c2ce96f256e55

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5DC44DDE-914E-4090-9C21-6FA3E649B449.le

MD5 08c34f29efe2d5cf7f9b1f879d697705
SHA1 c6f47c47cda2d50ac1c0d432952241aa4e4c138b
SHA256 c1991727b405de6590cfd3ba4114371b2f5472a2ca02eee38509b87aca1bee43
SHA512 8d77dedbdcdfc396e0e8ce0841622b123515c744e50abd0d83d60add302a6437bc1b1d8be57bf63f128fbf5da530d74c15f7ab7cc4fab2a42edc201a4b4c7d65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9E1D4237-22CA-46e2-8D51-A3945D107825.le

MD5 043dc940aed8ed333d488a73e41a1f01
SHA1 8947b186f34f79c03a2cb94568f8f273ad586fb8
SHA256 ba19ba1a1c0d7ae2d03dc497cbaf39744363e1be5836f62349c698b2d6927bb5
SHA512 9bdefec7c9a6e0cfec622d3542cfe64250d55cc8872853c12d0c27ad4bb009e76fb53219773bd2c1e228ebb4e6118e8adb1d64e37edceb2351404068a8d9c7d1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3504C1C0-6EC5-4b6d-A3E5-6A28A279A620.le

MD5 d95a835b710e229ed39e5d6a2766665a
SHA1 aa1e02b7d30e61daa8135746362cbb7c85d3c94d
SHA256 4f0bb369b2a6e60722215937da8420582bdaed848df0afb697c2a4eeb0d04049
SHA512 a4e58cde18468b70674da6763c8c0913293fd73acb6f967e945438c698caa4e2da2dd502571f86d453c7db9fb9691b185738c9f2c1c2f987027ffa91ec72213e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4E18397D-19A4-419c-8DE7-34FE1DFB8634.le

MD5 13196ba7f1f01cf63cf33103f9330d26
SHA1 917b63190a53d016b03a85db2a61dbb70c3168fc
SHA256 c673dafd0c2d70c82976f4dc238c5d1de0bd7b5164b15dd6304fc693c9630511
SHA512 ef563952139aa16538c649e71fec39a0f10eeea00c567cebb715eb905e54a8315111c7adb4f5018be24d637584fa0c84a4c8d6d96e9c70929ee74fbb147190ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\65F5A876-E4E1-4bd5-9543-781AC3DAC791.le

MD5 b473d062b4172576e0b469e205c6217e
SHA1 0d9aff501e2cad03bdfc340ef1844c3b4205dd79
SHA256 4db5d4e930deef030295ae48c9eef4c5b5adea9ca5a645e97a3928c47d4e89e0
SHA512 58f95cc4864e2fc949893d712d86428e88dc86393118471e80c5b0d9e34b54bcd92ed0cdcb241e160b046519876da75b0929a9d77b60106badf289fbb828d449

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8201889D-2AE8-4bc0-BE08-899557795A45.le

MD5 5e3b2a9490ab676f5a48897ba8da229e
SHA1 13909ccf5749955eeef5adabed46cf32c6ad1ef6
SHA256 48df84521e4f35293b4f70b15824f0191741761ad5623dce158e0bd3888f1d91
SHA512 8e1ce8afbc364dc4117b66f9e3503bb797ba025a9779e5e73ed66f4f4f18730dbb825a2d1d60a6449903e9523bdaf0e9b07b418a49b36117a8eca813c1b3ea94

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\65FF33CB-5FD5-4a72-B29A-DF62E6DC7311.le

MD5 847ad41d69691c675d08ac56021a190d
SHA1 d57a6113b605fd80ab617b13f21f7a4bad532413
SHA256 950ab129f429a11adf58ad0fc80b2ec4c9c75a23e118cba964865905109dbbd9
SHA512 ff4e5ed762647fab8c1cd13e3bac7a89f590638b2dd8f592b3e53665742652e9889560a22aa29fa3b1763bf4b0673131a9aa841f12f1622ddd170055f289c300

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2B229551-3D2C-4cae-AF77-5AFF1CE21CEB.le

MD5 17032e61aed795faaccb91ddfd2147cc
SHA1 099b6a8004d6635582cfcdcb4febaff27d9fa008
SHA256 6a642db8297c1dd19b1680c404e13f38be4e8a1c27edf6d1c4af3ea9bcc4c5e7
SHA512 8d835cda3576980259b9318a7c20ef1e44fd02dd1804a32e9c3a9e21dd5bc7d647a01cb02faba41cf36d15fc134d43ecfaf66e4bb5ae54da2741b907f1bdcd2d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3651411A-6076-4586-B21F-F3BD42566630.le

MD5 b385d73f865fcfb710b40099566038f3
SHA1 533cbfb5573e5e1d522555d475c611924278315f
SHA256 3ceae5b3ab6066db304f909a66337c25ebad0a0cad394a29b2de85380fa12fcd
SHA512 2004a478055d5e74016200518a316ddc74551ed0f2c0013e9b30af4287bd52ccad94d9d0f4679e98f3168cf8e620ad4b19544635ceed2eecb41235fe28fb324f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\304110DE-00A4-4d4a-8A24-CAEA739A0303.le

MD5 e9a08c1d049367bb47a2c31de4f14127
SHA1 42b225de1c61d488949119d6168ba792be4f3ed9
SHA256 e37422ec042f56548054824c843995b09fbb582d6f5b759121b159f145fb511c
SHA512 8e28dab6565b33a31d5f55145ecd92eb1bdc58922da75463db0d2b7ed6c3077352a80cf41e67f237326b93a466d5ca936fb95b8d05d9acfe5291b1a436dd44ad

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C31BE9AC-D417-4572-B242-C3D592E02CE3.le

MD5 a75dc5836abc0f86773b82cdb6bdfa4e
SHA1 0653aca48134d94559532fb81150a75ff54bea1e
SHA256 606f38a5807ef9cf9b1f0bcc7609237e315c7d97b2a864b11e2cecc332079683
SHA512 35683b03bfd0d41871cf1ab4c54255e09c532d7e965812d48f016964927a406e5d0e46820e02cd6108ecdf77ef69540738da08c55deb42376f0271a7f2a87567

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1AD8F682-9629-4991-B7DB-E422C2FCA808.le

MD5 5c7e8d0dd2c194e7aab6a9a402544a08
SHA1 8b0232014304eedf4ddda136c6963ff01661e775
SHA256 4fd4c0a6283e1ce293e34e59c917f317b583176941af803168bb2b7aca142f88
SHA512 471b3c7ae7d6e5d7306da340a2789a1d20e366049aa0225716b01d51f3f31bbf310f795910839b2465d313c49f1477ffe70049f206bca311408687fb3ca36295

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0EEFA343-3E25-4368-A332-665298D91EBD.le

MD5 aa9ab24099484a988d8da57041e675ab
SHA1 8910f175ba6ff4d619ed9cad787afecece8b23c9
SHA256 2bcd3c3bd70273ebac0abd59cdd19a314b25a8afb128f3b300b1dc5ec97db622
SHA512 008ec95964ae7e0a0f0a572f4aa007c5a9087c89af1715a843e54356a3f06592c4df66feac0b9707ada41d41819b6c7e62d5c562d71f8b3c2107e74e51b4a201

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9221CEB-F80E-408b-B074-EBB615DB93B4.le

MD5 2357bfa53cbefa1eab9e3a316085ac33
SHA1 88e660005f5440cfcbcc688bdff371764e4082ec
SHA256 683e1b577585d234f1c0312d35d5cc47f3af1a768fe492334685e3bb22b232f6
SHA512 f72e58279efd99eeb70a3380a455b5c413efd9cf4c061675e814b282f1bcb88e48fa6f61debad34863f3702d14c53b59050873cf68fe2dac844b8695fc7a9c69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6F3292E7-9D9B-4166-99A2-C128DAA7E8E5.le

MD5 81230eeeab3d2941b8054bd865c550d7
SHA1 4404e694ddc12de1ffba549969dfea51347bb533
SHA256 693aaba6aad2703b0c8531a4972c415826a1583b24c661915072d823db16b5f2
SHA512 348ff4db5273839867e930c9920557d684a6767d90ed2bb90a1a99d4d49cce43a12f2a157a901a529a1210fb5a891486d01fe66dbe96ad94a216efa315b560da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D621E59B-2AEB-47ea-9CDF-00B9359E810C.le

MD5 dcf9d8ae839b7b356d98640a2a0d1e36
SHA1 c10068e0d196bee2b482bd27150144e2d66b439e
SHA256 19aff565af9e6f1807a528e411e84b78fc03477f61e6a06ae7a090ec1d50b842
SHA512 64c8952b0aa261e3ea9e3c94412a4ae27a33bc366500285e9627661d9c3d76c5f5f5f15653e4a7c0b5b8a511ee977046ad5f3b57462aa78f30b6df7949017dd8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\75430B47-A033-4ffa-95E1-41D0DC98393C.le

MD5 3d0ea32d0d9913629ac09f9a84beb38a
SHA1 db81f3143469af57ad8a4e39d303e0c0416e7e45
SHA256 e1ca32526befd681e9038125923c43a26a95d1c221b582b99b9335a75b43785e
SHA512 01638028d7e6e76f3283a4d1305c652b30a227ae14f668cc357053b306b441217c79787c7172478a56e70805a3c49a9557cb06fd08034b1455272a68d4e57ce4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\806098FC-F845-4187-898E-8A6259EC6326.le

MD5 87ca0f6f24934ccb21ef44a8a9b4604c
SHA1 77fb593c07bbe9ff44cb0962adc3911327c96de3
SHA256 b3b81aa1a85b4b489d5e9c308e98685012bd41742b5877dba7b5445008a6fad5
SHA512 96c1f8eb6291a14dcd9ab2f62b70f44d99ede3c51cf25a0b51ae78350d85e6e843a88dc03ae1f8f55c68f7bfa6fe17bada042efdb3e2f8ac80b96a93667bda37

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9E19B278-3BFC-4e96-9858-61AEB84AF17C.le

MD5 935fbbf59732236dea9540b56c1eae62
SHA1 d0a7ac1e8aaee193e33e08d8371b9a6e0c777858
SHA256 7b580897fdc59d6eb3109af0fd278554e3694520530cbf26577cc68d925ec12e
SHA512 630b06318f78e9780f7e12799de2a13c1f279ea710cb9cac7b1e50bd31c5b8210ab381acc3167b28b23b94ed31442c3fb6d27329fe1f9bd68ad7b845647a310c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\99B3BB2B-E973-4544-BC18-25C92A3F1A97.le

MD5 1d99ad02cc88f74cfad6bce3e1a60915
SHA1 dd0a781cab6e04829c5be1b6a266a9d1c7e465ab
SHA256 0886710d9902d47028ce9a8b91f32a9da9139dfb23442528bae829fe65676f47
SHA512 1054d304b6ee15a688d6120bbcd0b5dee95d515d8042333b11337bc26ae1baab887fb11286bad788ccd791cb1e5cd9ffd9a4fffea5353d9df96f8d7962e0d917

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\553A5737-BCB5-4814-BB16-36B7DFE4329E.le

MD5 775264ba5a6ef7b9abdb334cf7350275
SHA1 755f081ca2bca15df3c2b9e4825eac3843402d7c
SHA256 72562b7411778c60fee15c72aeb421c65375382c040c5ddc0ffd17b847a79c5c
SHA512 439daebb84e1a79602068fa7890e7cbad8b99a18a2f2e0396d7e7846c804d1e38ce536735016b405aa15dbe2540412759d2876ddff76ed6f4bc99f38c7f64519

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\31EFF8B5-3363-4905-924A-B4FC9D31D084.le

MD5 8a50efe23f3596c2c50dc391e5971958
SHA1 53f1c8d83f7b81715ae7a628a646b8950456b93a
SHA256 de9af7b7995bdff1649265d7af710236ad7679a0b98418fea8545e212e232de1
SHA512 b432d5dd8abbb0057b3662ae67e64c0ea5427fcd574e70b7edb79401447219e6fdd8700cf841428fbaf326fd96573962fc49c8dc6931a58cc5f4f2c6fb3be3ea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BB2F8B7D-61F7-46e2-8566-054E95AEB344.le

MD5 d53bbc9329bf6bc223f4ed85cd184f2b
SHA1 2f7a73e8515f4b47c770fae491d56bcf1c75121d
SHA256 658b26703188ae9fa65992c6622f40a95b8460afa42757596b8202c6a51e10af
SHA512 2a0c154fcd4d082af8f7f165a79728032d5bd9e2c499e93af8be468718ff8958debf95785db7d82da238368741f21a3ee1821691bd2d166207ddac3b388a6458

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\188805E0-0322-4fa6-BB84-E9DA9D8CD482.le

MD5 45b264b0d1f20a672715e0ddc15ad000
SHA1 a0da444b0e5ba1e68a7cf15e6a38d8bf452e3c57
SHA256 5b3d45be270b405a12bef6076ae8a44e8759743c6cec711bb89a53cc083246d5
SHA512 7365305df5e14d85145379aab86af1154c9f3e1129de223088fb133556836aaa224afa6840748fb5f5b109518744b33e59530278c4019b86b53bc72a605f1033

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\26D4E615-0A05-4208-8295-6E3C333FC98F.le

MD5 8dc921befafc4a9337ca849728602fa8
SHA1 5d3dd729d8a9d9d5919dab861ea7e1ac6ff531bd
SHA256 c813a81172c6e754eb434b4217dd57b1036d07f107537dff1c1c411ec9bf671c
SHA512 f7a347dec79d562154e2fa853019271beee690c5ff1d9a496dfcdbcc0b9db1575fe48a357f28d6413dd61b4a12d1b3b69f44d6be22d047308c107a13638154c3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1272AE09-AC03-424e-81BF-9FE422F30D15.le

MD5 9ecfe651be3571110a70f67eef5348a0
SHA1 f24d77420585a8965af3ea038a5a8cb9cd576218
SHA256 8f91441af1c4738b6a62ec3acba2415cacabcf08b35d8ed2809cf1faf47e1631
SHA512 26a0ac96f2769593394992a9bb3dd4c48cb11aa44a49ad640aece8dfa9ca8d05caeda16e20cc29f8f0c8ebc52052b9b2f535d55745a7026442ea38961cfe9992

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A48178E4-1617-4f57-B31E-191B0B25C898.le

MD5 981a30d0848f89ab7b1f6d6f18fbb206
SHA1 085832eaf871b0347b22fcd1f77c6df4ca83d061
SHA256 57a85e956ded494d8937c62be343332622e5eb47db2ec1c2cbe236075e73414b
SHA512 ddcd367fdfd9f3c4d9cfd14e7f8ea7eae5d574f85ead78a3a92a505fab9b471e7c8a1eb2c2f6f8293b4eb7a04b885fa90ae87e4277a1e8207838489b85417b7e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7FC41E34-FF7E-4150-B351-07376BC1C6C8.le

MD5 f1a24e5ab528acb891c3917b4f631ca6
SHA1 a58f6fc4508aef322736d8092e1e5e89802b7a5e
SHA256 0c21a4e5906e586cde1f3090653775b7fa5b13ec9f568ffa49514f023062be6f
SHA512 72dede66ece68d2e82249e031f15c77e03052832a42a7a3460b3f3c6cbe0c0b99cab739451f397ceb553dca6aa7052061f31703798dfe502c5c99b45d7590b87

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0051FC09-7093-4320-ADE6-28052EB141F0.le

MD5 fc8934172bfbc1c3c6468792ae4c6976
SHA1 ff8856c465c7554e43dd5d71b0553febd535817c
SHA256 ee177fb716ef371f35707e4ce0d329bf94b122b185b6d1c8259a739ef98d1074
SHA512 79db7170ccbd8b4645bd6870b26f3fc40005cb3479af1564e77a7ea0443ded7e1229076fa79b9e3bd0c2008c3557bfa899221f57718331272c02b8c7cc474381

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\062C401D-A908-4083-9C7E-DC0CB1C93A8E.le

MD5 7e9674c8c4725900b626a161e819a46f
SHA1 c0ab8ac6f8c21928ff8e8d91d2741daf399d8f27
SHA256 d27a260d19c434c0df9d97ede59a4c73c00c8da0e6e9f7838c974a50dd2543a5
SHA512 53e8a10dd40fee26d25612011c3fd1ea9ee6b6867bb2251cf78a5e994b8f0abd8b3ed1c8747f07f964bbd0543fea892da50eadc2084049873f4af9f5ef4fc0da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0D9BFF78-3427-4569-8419-D1715CDC06AC.le

MD5 6c6c5c94b700a908e7c2890a64434b42
SHA1 e33268e3825100ae129bd3b79554719921334dcb
SHA256 3ed074f2b11d62a9d36b64adb2de9262e951ea08735ce22d00cff9c6f83586ea
SHA512 e0024b3b9c65a0308f507fd5d17267b538c07bf41f5f3215ea81c5fbb93fb2d9b4ef934cd5640ecf3825fb4f6bfff8528bbb542119675cdecc779c3fd487b224

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\081497C1-F999-4c76-A622-B08CD827A58A.le

MD5 407f83f549083544082635511610ad07
SHA1 e5e2d0df7c3b73edb8d00451786c838a7a149e5e
SHA256 6b2c4fcfcee0e90224b4e362e979cc837b3634f18f38425fde792b33afd28c4e
SHA512 2d359058dcb0404baee59c53b6acd10db8612cde829cc479cf70ce1c5c6f5bcf34cf1d29c3afa495e5f3eef3966cbd8fc42fca502a8e43b3f5ea9f5c3fd8fff0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\71775289-0685-4c00-8F80-5E44FF1E173B.le

MD5 d0c6a08e0330c679403f2c4ca3e694fd
SHA1 ab434e63a946b0a52f816114c2e8540166d21cd2
SHA256 59f4693211236d4292e63d7dd414dd3291da38ff4160967b80607f14e1735efe
SHA512 32a7bedc9589f4d0b69c218bdf80562f896312b181ea9687b8364f619bab788ab2e8798c5ae1dc43ed9f7633bd9bcad1fb539eea1fed778798362c308dfa2f2a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2E9AC818-0C23-41f1-9BA8-B35FBDA3F3E4.le

MD5 2513fd8000f4140ba4fe0ffee58b4ff1
SHA1 7821f88618749bd9d3640be2e8534ec224587743
SHA256 6084437ce82e22e7b243161f5cf55bfdbec356ec51bea709fced958c676834cf
SHA512 e23b751be0d23d45936df63a505169c40f91e3444720f2a863aa07f5d2fd2cf2615d73713b23338b155afd56cfe975f3b67273f05759aba52f09498650b12576

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\423AA6B6-1D6A-4ec9-8F57-FE9E2F11DA31.le

MD5 afe3867408a654f15438bf20b8ec8af7
SHA1 0d401a717917ae1b7d477d7e17def243f0515484
SHA256 37cbf868d2dd28364b7b9fe2526a64ff3a30cf6e9d0ce82f5e5ff3ad4ea5a05d
SHA512 7a2d36dde0fde2d213263f0542e5a1ff587fa4989f0a353c9e42960debdafaa006dfbb8165d16b064b339136e567c0169937f4b83868794d298d3eadfeb6881c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\642A72E2-037D-43cb-9ABD-BD99F0D26DA9.le

MD5 e1591265112ba6a49978cc47aef56ac3
SHA1 744990837a7add37c6a08c394fde2e28362186da
SHA256 dac3998de6b2b8f2d7863183a9eb4beb303ae8de6d47a2ddd655f4ab1587363f
SHA512 0e289305526136a205908bf10be41a3f2de863bc1ccc747014826b8fe536fc76c2013be0a6dbe1d6ed7279f0eb1a0c1146b98e663646a196e96d9dfbf6541db6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C72F3EE5-3B74-4f5e-A2B4-A71D008D2731.le

MD5 01df276f419cfbf562155edaf1b2169f
SHA1 71c9993bd6f47acd81a12f5ae347e9302cd19f90
SHA256 906ddfafa10e1f70c53bfb11e7542299be31bc7194e39d397afbc7e5dde7848e
SHA512 274d99ae25e3f61a705602bd51092b4b37e1d5713a3ffe6d5e572313d555f2fc7e1a8cccf304858e427e0155c1e066edf5597c567e739e7f941299b4f07159e7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\64D11D2A-B45D-46b5-87A3-49EE65A5F528.le

MD5 126deed954f57593b6322869c9d69fea
SHA1 e74fe3b434db07034fcdabd0574d48fc7a61d21f
SHA256 be86e522a082fcc0462ad659b5a0050c01e378d424fb4864ded01d70df6a4ddf
SHA512 8af5ca2a5688fd81558c782f1412792f786947b5abfcc7db474a4779ca302672d0d182223ed9c94995e41e21a1401abda60e0bc1a1d9642b86ee1e979e1dba9e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\908AA962-B0C8-4517-8E61-1E4C106CC4BA.le

MD5 c911a48beb15f3d95b608dc3605641c6
SHA1 ea5f408997c3fc41a3ff13c77b8290f8c6c8515b
SHA256 b4c515671a2ec469c7ba482532dcc8ca8db29f0c418f697314a8054ed28a3bb7
SHA512 3809ee1bc941277f441dc2c7741486b7b915cddfe19e468d1fad4975629ebfb8712f9204c1ab008b5e156293810cf49535a73f336274ca44209b14a5dcce32c0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B0239EDC-6B9B-44e4-B2B5-BC0C2297B9C6.le

MD5 23064e4ff257b21cccb513e6be3fae64
SHA1 776cfe89018d04f4733e8f30788376a24d67e62e
SHA256 d749f223c019db63b2015b48bac309484151ed6dee4e669c405b0eae18598af1
SHA512 961cc24a5e0a490fc0e5d4b0c7ea56a94b666bfec33c2c74f1d31f6473b56357647bcebbba20722420a7bb0593997066780a70effd5557ae04ba298b04148364

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6107B7F8-5C91-4ee1-8220-D80C15715710.le

MD5 ad13ac5e7b6761881f8d8372b274b64d
SHA1 f7f594a365acc42f525efc40916b8c134c7ae9ba
SHA256 f71882be92cc2e338ac4ffd2ed20ac6ee95cd0048c9adb6060aa67eeaaa72d56
SHA512 446911455b35a84af1d68986c3684c671cb3934dc2bd31dc5b3d38ce60a50b41b3438c6293bcab5f14721620a09d8b4eabec25900fa238af15fe252b60154896

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\586C6562-3006-4c92-8B44-50920FE0C213.le

MD5 ec0fbaf7dba115b13d751808b883d31f
SHA1 69b7f764927adabb2d228be832688d82ee9b8da7
SHA256 e9a3da42aeec5dececb79f06838cedf9e8146c067917aaa96952d79556297de1
SHA512 d6f6387717c2747f3b89782e8494e660fed109f31fbff21c96e3f6d60eee00031aa4f9a35156ec08b69a11428c030e1ac84603e0a535fcac1961dbe17a0f5a51

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\186CDCE3-FA12-41d9-9B6D-80F3CA47B360.le

MD5 b9cdf9aa730e86b9b20024f7097ef52b
SHA1 055ab07951377cc69d2f81118868babacb75a47c
SHA256 67e7f956707054eef5f37af44d338df31f368ced695450fe19b535be8f636c39
SHA512 4610a3827c1c48c398f1df6084c94aead210bc741604de79480840748cf89a083e626dab3a2c7e4f0a168bde3183f15894b5c83f58adc89e5a213ae813563450

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83D327C0-CB0B-4bdf-AA1D-37C1D81BDD8B.le

MD5 1d923a2d3f6dfafe420079321091ba97
SHA1 d951d2cd32de90b19558fd0b86970a0b5c34daa1
SHA256 ff22e9024b91ab968c9fa0f45745f98d7c1cef9af5e5a06c8a2bba753c82282d
SHA512 fd5e44974761a87119d85565a1b9597cc801b3ed710c9dd8b84eb5990edb9efa7db68e5e45fd245ae34255500f0d944ae42756c4bd951fa0c4c0f192c07b1caf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\71FFEFF4-BB1C-4d13-8FB3-9598C757458E.le

MD5 76c48db43a412bde4485773fee7260a1
SHA1 463f07a82300d04f5a16ca50592a8ae42ebd9126
SHA256 864fabe0f61337175652a6514bebc3ca704194c7196f39d8b931fa0b9cf64ee1
SHA512 69300db07258ca14f4624dd4f193b0390b5320af9ea9afd7c7e098cffe22102b67a902ebae21875797541b5e87830f99868d4644c482fdaf57e0102e01801b13

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\51FF89E8-8E4D-4fd2-8B26-B1BC7F2BB57E.le

MD5 4c3c69fca84080b4356d1dd03ca06bf2
SHA1 6ba4ee8b9b90518318372964cfe68090188fbbed
SHA256 1d9ac48f8df7cc486a4e60b95b1f287d60ddb45d031584c2577c43b395de4134
SHA512 755183c1ec6eec0937fae101a810aaf88b9c55f73e3a3612e007b7236f9e00469550b6df4bc01ad74f375c23c4e30cd2661f4a4e7639f64837a4450487bc3099

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\66D1B9F8-888E-4d90-A83F-7FBF61D0EF01.le

MD5 4b84aeea38ca72cd9b56042a8eab8107
SHA1 392820585dd2714599cfa1a5d9927e6be014c405
SHA256 12a64444fea1e6ad3c12ee4a70a49f88f35412ba406d5f6d0aa2dac469e2a0b1
SHA512 12871a31c82c7c1b99aa5dd44f43208d5aede357003070d847a344ad0a09b9775d7c00f54c7213e3b066c03106726cf089cb489996ff339870301165d40a2595

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6C3B992C-55C8-4c61-B1D0-1789B9E4A8D9.le

MD5 a57e52ab2b5504599f9d4f441eb3ffa0
SHA1 485a2aa3c5840c433e88be30e3ef038678f389d1
SHA256 e30b07916a66965886c4676edbe725962416dc95710e7a12ef142ecbbc47984e
SHA512 d76a674fd89f3760244deeb623e45054381fd9037fc4c9d2bd0f1b02c5ed67a1f8262bbc513428e30f6fe498e857be28acf6334fdeb32d5082b7238e52a67004

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B09FC694-4B0E-4fcb-83E7-8EB4A77E566A.le

MD5 4e5c96c0e0b4250c2a0d2977f7ce255d
SHA1 41336224fc78bcb16e70dc8ccbdb105d3bde4914
SHA256 8e1e3a9a1d6af451010825444269cedf5ee27d667ed4f1fbe07e21eb37d1a8ce
SHA512 d23078ab1ad7dbdcfc6f2cf7ba6add650aaa54cebe7276c5b035ae74d06434b41d790a43922ae2617d25204d8dffcc5fed8d499391e27c150405ae3d2ec5864a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7E8488C3-EB93-46a8-B505-F9E95FD67322.le

MD5 00aa3b3b68e1136e6b9723fb7462b494
SHA1 263d5bf68dad3933065d263f5ece1941a7abed82
SHA256 5dc824a16c6a0e51ddb39346cf679a67d56e46ff6069e6827c9e9eef4e423a27
SHA512 87b1d02cdd5eff42ef6c4b9a21fd0285b4c43099638f3f3a6647af1a1c7ba096fef8f58ce090d8bfc195ab1fef7b39078ccf8744d0967928190b7a6cb116df74

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\014D58A9-7E44-43c7-BA92-1063623B02DD.le

MD5 4a0883ba6cf6174859a7da1784eaa93d
SHA1 018356b14b046e468c8229351deafb50c260c05d
SHA256 945832039c2cd08182f9b2827d2921211743581e09d9db1b20372c92c8004673
SHA512 bc87e58a9a96a2ab56d7a9bc58abc609134796a600571434dc8a283737d49f9f3fd31fdfdadddc9a0e4f1956415351b20427f0faadbb6fd85278874e2e9f264d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1B6DB72C-6093-43ac-B4BC-59670CA31696.le

MD5 980e1e268042f56cee439358472cb2df
SHA1 1cc394fdfc5194c1c0384bb4e52dfe03f06dcd86
SHA256 046f8a78f03674d7ed4a7765a401b903949c29207cfa18b33f3167fce2ce15c7
SHA512 556851626eb18dbb9e14f913a2e8624ae220108e66f70987a5f33b2690e0cdf1375064672bc83cac8d9a18bd4967b9d46c1f32c090138e481327c83e4bed42b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\26C232E5-B89B-4b17-BF1D-75DC61351A93.le

MD5 707adbd0d56a02ab859ac8d761db4531
SHA1 c9d8a38c509dee79d13ac8f75934e2f75e3eee3b
SHA256 246aee48ba62d3cd0a127056f828728f5c54b3c92b79ed374f67ab45a214e656
SHA512 c1b225bcaeefae7eb36f56aa6fd3a0cbe661ee7f314b12764b72b2325140f009ca94f147bb1de5a67afb911f3fa41422ec45d45389714090eccb43333cf7f240

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CB7DBFD0-2463-4aa7-AAEF-0512BFC1F6A2.le

MD5 51d2efea0fbca3368b5e390188233ea6
SHA1 38bef0ef716710acc64ae9ae3dc67a55aa96493e
SHA256 cb50f91b75006fab0a3b81dedb6cad2e0823fea67f0b0cf64c4db5e1e23336fd
SHA512 d7a4d0e857c4b6786f2c24cf30b106d738720d02569175336a6f52eab8f03e0fab69a37ed3d6c5b8fd4a35c32ff9c3c29f01c594f552a29d6a064f9efcc5d020

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9A5905BC-25AE-46a2-AAF0-25B13BC2BF3B.le

MD5 9a0c4f8162db57adeb26b9e5e9e18392
SHA1 108c5d5c81994200b726df0a778eed3bae3e8b35
SHA256 ad1b1b3bc5d753792aa6c7b7738e3000fa9be9e5c5b6ad599a24fff70fae7ff5
SHA512 287351bba80070c7726b364ca7527b9ca96d405a644bd536f23617bc30fa7c30a50ba8240a4827ece4625ed0b3a1b7415cbf2b03123d47b39217046104a04468

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\01BF5484-6303-486e-BD3F-2267B53C3926.le

MD5 94f65c12e215e4085ba472d2f2be1a52
SHA1 d160353aea94098e5d7b84808aa4fc81a13e56c8
SHA256 cdcae4543982912221f6b861682290984312bada5608cc0eeb10f7472c3b6e9f
SHA512 415a578ad7dc4ab2d042feb26e396fc61445019e3a3b1c81f30958dca9feab85f0aaf25d1cb0ae5640be96311062eec409b7b098aee9fe0a9a43f92921ca723e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6920D09F-C280-4e97-8734-0054FAD4D770.le

MD5 13e0c73aaa888d1d499f337c9faa8e7c
SHA1 dfea238f271796fb68a64a541ac9d2d9d470b9e1
SHA256 53da0f2c4f50829ff08d99d98c07508712b907a088b31f931261d7679a578e44
SHA512 83fc5bbe41cbbce46f03263950c3bc5cc9048afca90105cbde50a79af25efd5baf02676ce316e3a4fdf841b6e23b33da77313d62f85f1c436257db96b04319c7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\96D9DB51-DC2A-4f26-B7F1-CC03C087D0EA.le

MD5 56af79e75f2bdb58b20d7a1e082b8478
SHA1 fa8a9abd7adc9397e8893f49ab4d344c055c8531
SHA256 e6452bb38907f02a8cf3cdb8c5d33b1cce0ffc279139139a605a4dd17024759d
SHA512 e44e9838a00dd6745b3e286edb75087293f9d31619ab3c445753323673b31eb758ec498fd287201726260d615fa94e70bd979a7050021383b54bc170c3ffdc81

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\EAE11DA5-004D-49f9-A5A6-050F00FB9038.le

MD5 3a276f28fcefc089717c4f67cf53cffd
SHA1 ac42fbaeb8a8de1ad737030873dd79d208a31c86
SHA256 5cab50470f19d3ab3eb9e833e1874306586d12ad21adc3767f921cb98f08de40
SHA512 1204a0ad61cbe46660fae890521388fe8e0c6e7be79f66c1acfff8fec2a4c8bbb392896fc5fa5a87d456ce500fb40b4a60490614081461186a21148da375885b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\61B57825-DEBB-470d-B39A-258888529250.le

MD5 32b00a854ecd72248c6c07f35215d8d0
SHA1 88c5c5158b99613bca3abd4bb89c146511834402
SHA256 5a82bef5383692dfb6e22b2a0c27dd1488351256865acf760e0e0d735c2dfad6
SHA512 6c52c9fc7fcabfd3ee64d594527e0c95799f3412825adfaf48177454965b486f21dedc3d9a1af76fafc4cda9320eb9388b2766d3c5442bd022da99a261659c45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2BCE9E32-D806-46d0-A866-3ADAFAFDD7C1.le

MD5 5861395c9f46c6d44a09fd1658d9bf85
SHA1 96e79c577d33c34868b68c1c856d53148e5556b5
SHA256 65cb25ae43e66275275205b1bf6562684a5cab6d67eefbb50367e55b1d63d0d3
SHA512 e5509b1ace6e8aac9c1eb2f11f5e90c79c2018f35162b8501a54be7cbb53da4d73552750f30f8b39eeb25909836866fb1faded8085cb6ac06f66ae3211d63ef7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A606CEF7-17C9-4849-BC2A-CFADD27AF02E.le

MD5 928f442f9e2bb236418804dc36765e2f
SHA1 dbbd4c336c7a52b100312d1b6891b603c4f4800e
SHA256 0fc5e2a971c63896e3c9463e08de472243a13ecee955c9ca2c82c3be3ed11d7a
SHA512 c829a7d5d503064adafd8550427c057162229906b92c304c087860773dea404e37c9523dc32f94c490b1dd566d0dcac5d46c13dabb1e378047453c0c6b2a7ad6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7D765D1C-64FD-4033-90EA-1556502AA9B5.le

MD5 d53fd03211dc48aec4c607920a3461ec
SHA1 95321cdbb01289be124fee44b29e3d88a3e3e316
SHA256 3229e35120da9f714a8bfeabe651d29fae05dd60ac7f0de0a5514c6ac23249fa
SHA512 7cc8d9340e5b0ca63125da79a4c31e6a7316bb9a7e9fc2acb87eb3731a009ca405b8aef50f0c4ed10764ec946f15475e58b91e9a6aa9fa4308ab24cddbd6ab90

memory/4824-1737-0x00000186A4EA0000-0x00000186A4F3B000-memory.dmp

C:\Users\Admin\AppData\Roaming\GK6+\Network\Network Persistent State

MD5 2b389511d0ca07d1aa00e7530df9de8d
SHA1 d09e330c0c10241f1ccb289490ea91edb8ff21b5
SHA256 571e3d502a8c3b50761a970970a1af27ed1df4d4a13fb04fb0c85bf42323aa94
SHA512 72059793cf391c71215faf34dfd67f44a8ac39aa17dd75a29fe59d4388f2c91ff9a877c9be29d795d1c12808c8165f0fc1176796c574e693a476d7fc0f611767

C:\Users\Admin\AppData\Roaming\GK6+\Network\Network Persistent State~RFe590cc8.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/5932-1759-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1760-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1761-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1765-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1767-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1771-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1770-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1769-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1768-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

memory/5932-1766-0x000001A3C76B0000-0x000001A3C76B1000-memory.dmp

Analysis: behavioral15

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:44

Platform

win10v2004-20241007-en

Max time kernel

30s

Max time network

43s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3dcompiler_47.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3dcompiler_47.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

122s

Max time network

132s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 764 wrote to memory of 2336 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 764 wrote to memory of 2336 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 764 wrote to memory of 2336 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1

C:\Windows\system32\WerFault.exe

C:\Windows\system32\WerFault.exe -u -p 764 -s 88

Network

N/A

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

141s

Max time network

160s

Command Line

"C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe

"C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20241010-en

Max time kernel

7s

Max time network

19s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsProcess.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsProcess.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsProcess.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1492 -s 228

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

92s

Max time network

154s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2560 wrote to memory of 3860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2560 wrote to memory of 3860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2560 wrote to memory of 3860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3860 -ip 3860

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3860 -s 628

Network

Country Destination Domain Proto
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 181.129.81.91.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

121s

Max time network

125s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2896 -s 220

Network

N/A

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

143s

Max time network

161s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 71.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

145s

Max time network

160s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

151s

Max time network

160s

Command Line

"C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe"

Signatures

Renames multiple (148) files with added filename extension

ransomware

Renames multiple (181) files with added filename extension

ransomware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\electron.app.GK6+ = "C:\\Program Files\\GK6+\\GK6+.exe -- --openAsHidden" C:\Program Files\GK6+\GK6+.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation C:\Program Files\GK6+\GK6+.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation C:\Program Files\GK6+\GK6+.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\GK6+\LICENSE.electron.txt C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\snapshot_blob.bin C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\am.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\de.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pt-PT.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\lv.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\kn.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sv.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sw.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\tr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\vulkan-1.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\fil.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\id.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\lt.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\uk.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\zh-CN.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\chrome_200_percent.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\gu.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\mr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\zh-TW.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\libEGL.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\da.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ro.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ru.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\resources.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ar.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ml.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\nl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\chrome_100_percent.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\ffmpeg.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\he.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\hr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\th.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\resources\elevate.exe C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File opened for modification C:\Program Files\GK6+\chrome_100_percent.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\icudtl.dat C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\bg.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\fr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\et.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\nb.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pt-BR.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\resources\app.asar C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\Uninstall GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\es-419.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ja.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\te.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\LICENSES.chromium.html C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\bn.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sk.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File opened for modification C:\Program Files\GK6+\locales C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ca.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\fa.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ko.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\hu.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\vi.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File opened for modification C:\Program Files\GK6+\resources C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\language.txt C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\v8_context_snapshot.bin C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Program Files\GK6+\GK6+.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files\GK6+\GK6+.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3172 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3960 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3960 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3132 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 3132 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 2240 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 2044 wrote to memory of 2240 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe

Processes

C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe

"C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe"

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe"

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 --field-trial-handle=1876,i,3897810954902898130,15637321437869873364,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --mojo-platform-channel-handle=2184 --field-trial-handle=1876,i,3897810954902898130,15637321437869873364,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --app-user-model-id=electron.app.GK6+ --app-path="C:\Program Files\GK6+\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2444 --field-trial-handle=1876,i,3897810954902898130,15637321437869873364,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3516 --field-trial-handle=1876,i,3897810954902898130,15637321437869873364,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 199.111.78.13.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\UAC.dll

MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\nsProcess.dll

MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Program Files\GK6+\chrome_100_percent.pak

MD5 d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1 c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
SHA512 aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\chrome_200_percent.pak

MD5 5604b67e3f03ab2741f910a250c91137
SHA1 a4bb15ac7914c22575f1051a29c448f215fe027f
SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
SHA512 5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\ffmpeg.dll

MD5 824f3c2f3b90e9dcabef26d9695cb0ab
SHA1 c8d9a93bc21ddbec5f4ac0219cbad5696f73393a
SHA256 c8427ee59fe634071c813d803f086e4757ceaa4be061739a1644f49c4b051acd
SHA512 f7ef8cca9e633327f57469742bc86ff209fc7d201c5b6629578689f2fbf39bda1d326bf24b68a2c6ab22e9d64d03b628bab1c635f9ac3f6b7441a680e98b9dad

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\d3dcompiler_47.dll

MD5 cb9807f6cf55ad799e920b7e0f97df99
SHA1 bb76012ded5acd103adad49436612d073d159b29
SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\icudtl.dat

MD5 76bef9b8bb32e1e54fe1054c97b84a10
SHA1 05dfea2a3afeda799ab01bb7fbce628cacd596f4
SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
SHA512 7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\libEGL.dll

MD5 18aa1595f0249b97859f158b73be7f6a
SHA1 c1a877e27a65aed080fc4cb2d1ba301efda777d3
SHA256 d019e2c51b5c3e28744aeb4bcabc1c5a29fe05f52936fbeee4ec6c96430db8af
SHA512 21aac167e72e0aef481c799407a928b0c81cff32f6422e4d92eb4d3ff58fb59430804804c21826c5d2b2947e9c68004bf9a26566b0dd734a8be64062568acb95

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\v8_context_snapshot.bin

MD5 031ea03da08fe1247280cfe781658791
SHA1 e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA256 c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
SHA512 b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\snapshot_blob.bin

MD5 b82ff216a0babf602940759b9a3af870
SHA1 07e8a22dcf8d7be04a6ddbcab3098e040494bb0e
SHA256 943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
SHA512 da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\resources.pak

MD5 fb620332959ee6e46ac1c2a2f0e1b2d1
SHA1 eb18c735d187647c3c529932b8b80d9c9af09286
SHA256 66153f7b388503a9bab9df1fa157d3af88548bee264525694bca9a61ce3495e7
SHA512 1e5bfcac24a76ca8fae7b7fa5407f4eafeecfcda54726d66586f1171a7ba30cf76544d75aa44f1eb64b202e686ccd2c00c8cc0b24b249fc5c6c28c156cd03775

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\vulkan-1.dll

MD5 bb02b08a6698b565d48d7c8a97c802e7
SHA1 0366a25a429af5f497f1df2e9ca49bdd999b79dd
SHA256 c3c0e649d7e0726a795f556ac0f057c18ce67cc6737e3b9c935af3b9b8991cef
SHA512 5223622d1ca039adffce86417fcc9d69ae6aa64785eba96fe74d2e45e1b2680c7f5aca2f064401d7b643fb61277d8e68481b07357d61be98d1700b64bf2f80d0

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\vk_swiftshader_icd.json

MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\vk_swiftshader.dll

MD5 1ae9e16933392c38b30d3c3c721d936e
SHA1 e86ed3dcf95d3d328f68e84c159a8008ab9fcfae
SHA256 7c71daf0fb1877bc9195894798ebb256215104ea55a04ed2a46f18c9d6d80ef3
SHA512 3acc00c6fb52a4e94cef01eb5adccffb68dd5479ae0810666789e2f7aecc94b61120b7c3f15d412a79a766b78c8d73c4ffdcfb4e2c6ce0c2063d3b691b6c5796

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\LICENSES.chromium.html

MD5 d18c09a075cb6531d7ffd7c3da77bd4e
SHA1 571f29b6004007111782bf5727c4bc9510cca286
SHA256 86f5222580a4ab03dad8ea62e6cea22b23454dccf1c77e74ae0e0410a13b16fc
SHA512 091cd68e12633919fc6100b606f3002b16f4b9c7c6d7c820ff20e31a3b9ea690c8a1fc90529ff3e5c21e8d778e254743a8708049830c3bb046eda8f2653000b7

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\LICENSE.electron.txt

MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\libGLESv2.dll

MD5 00666e5e2de77ba843b7c0fab5771476
SHA1 6d6ff22eb3dc651bc146d2716c4c817e424e93e7
SHA256 04e542edbf27f1bfc7d6620aa7c21b8039b05b6ac1b682d6f71ddddd771dd6d5
SHA512 7236a0c1ac81cb1b5b68d14757fe5e25eac933da08e9136a26527d01c6d96c552337d7e5c37313507f5032d03e4e94ff70a2b25a293187b7e88c3f8ef13caf3d

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\am.pak

MD5 952933d2d388683c91ee7eaa7539e625
SHA1 7a0f5a10d7d61c32577c0d027db8c66c27e56c7d
SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
SHA512 5aa5ef0ed1da98b36840389e694dc5dcef496524314b61603d0c5ee03a663bb4c753623fb400792754b51331df20ac6d9cf97c183922f19fc0072822688f988d

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\af.pak

MD5 198092a7a82efced4d59715bd3e41703
SHA1 ac3cdfba133330fce825816b2f9579ac240dc176
SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
SHA512 590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\bg.pak

MD5 9dc95c3b9b47cc9fe5a34b2aab2d4d01
SHA1 bc19494d160e4af6abd0a10c5adbc8114d50a714
SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
SHA512 a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ca.pak

MD5 2f8d050c228583559cda181291b76e5a
SHA1 b047f1cfb30b1162b1dd79f7e424a83fd807eec7
SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
SHA512 e4f150cd9942ef5105e72376835da6edc31ef91783e41cd2fc04600c04f342bbc96e08e23c8af1c0c1e563bb8a7d3840a2289767525c30d08c2f23d0e837801f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\bn.pak

MD5 d6ccc9689654b84bc095cec4f1952cca
SHA1 286130971826b0af1b6d29c5283dfa71af7cd7b0
SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
SHA512 db0400820c5cd1100337c955084eac3036b55bbf66b403337bec2079bc47696e2e48a771214662b286f4f45f763d2ad423aeccbd0f06cf0bc11038662558f4a5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ar.pak

MD5 98f8a48892b41e64bef135b86f3d4a6c
SHA1 32f8d57ec505332f711b9203aed969704bd97bc9
SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
SHA512 6ed3fe415b2f6de24136917da870b47c653d15c7a561baae55a285946a6f75e5141aba3bc064982f99baef0a893266693864c2d603c5c22c2b95627b2035f7a4

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\da.pak

MD5 fecabf71853bab84eacdd95699c49f69
SHA1 8519afc13e100a550ca3d756518a0bc33674e0d3
SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
SHA512 e932d382d41a79ece172349e916221a67d97f5fd4b2dc1325d6bd2f7c6757cbc01d6fbc8d9846f6ec462eb637210f7c650f6944418edbd3f8614ef99030d9392

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\cs.pak

MD5 26765c7be201444f0238962bb16a506b
SHA1 f9d4a33795e45127c14bcf35cc770845627e15e8
SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
SHA512 577d52d2d5048cd952aff1e76121a495328c1978cdea2eaa4f85812cc513917f69510e135e96f7967f4ed43cf88e180cb1d9059e17c855c8d4f94ca036730214

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\en-US.pak

MD5 3f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1 b021cca30e774e0b91ee21b5beb030fea646098f
SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
SHA512 bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\fil.pak

MD5 3126f74d021e9423d71913bb45a62935
SHA1 c9a80c8585aabbfec34ae891416794b1b3e29a11
SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
SHA512 fb360723ee53b3f7038eebd1b919a36784a0e3dc878e810bc905c4297379dade6006c8872ed68412b06161cacb0d6e32a7157ecf97d9e103a4ca3b2b71db8765

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\fi.pak

MD5 fa7dbd2ee35587ff31fde3c7107e4603
SHA1 baaa093dcb7eccf77ce599c8ff09df203e434b60
SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
SHA512 587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\fa.pak

MD5 d55f65c6fda6ed6f549d2c9f0a4ce874
SHA1 952792f2da5ed9cb1cfed14e5afb8abf5cf29cb3
SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
SHA512 d0bb83467182d8b3a8f8371d749e682cf05f89daefe28764f2c263e7cfbfc3f86cb388061b48dadda26c3dd246dd6f7a57af58ca9344c2f6b90de87af1e91c69

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\hi.pak

MD5 ede7fa471c5eebc1fa55b9b3b6f92d00
SHA1 1d1f529c615799bb3a3319ddd1357cb5dc71464e
SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
SHA512 0f51ea54e828700080effa6c728230c523ff8e26fb350e6f337028d18614d5dfc4a2792cb92b5e606bd0702067f55fea546029cddd1ebf7fa74ef5521ff08338

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ko.pak

MD5 b31780fff9541290c1d9f5b76141430d
SHA1 8b0fbdccd0a7f8141846763a0d27e4e0da0552dc
SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
SHA512 a573dd09520059832e7f53386a64dcdde47452b02ce1e5d7e11385abbc8b734dcee0065b4ca351591bf9cc2f66fae204b9300702246d20265e8ddff4f7c1e6d8

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\sk.pak

MD5 72946b939f7bcaa98ab314cfba634e0b
SHA1 71c79a61712c8c5d3dac07a65d4c727e3b80ab17
SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
SHA512 2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\th.pak

MD5 a970b7e9d3aec2cd1b8ab798b3179f07
SHA1 bf17a7e80e01ac1704a1efdf27baf271b4c21e36
SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
SHA512 880555a2ac2f278aecb8794d8cc51f0833052e9f4ca187ed91fa35bb475e68ae3255cfe1dc074eac960c73c203e62c6b38077b266f5fab66ccc3ca73e94d4d60

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\te.pak

MD5 b1b6a9e3a04be79080ebbfacc1a0eb2d
SHA1 a5c8eb6a930062f6021d073d5f74ae146dc7fbc8
SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
SHA512 bf0b163c8fc3988bfeb3cbb4b981596ce5afdf7e40149622fc3b60994e7d8efa5bb24c830036d168a6638feca48b8755aefa8640faae37055cae8fffb6a85568

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ta.pak

MD5 f100566697a96ce1f0a0c7e0bbfbe36d
SHA1 4c80a4930ba7d174c4203c199492463242bddf62
SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
SHA512 dfa6132a5b7e819e8d326bf5ee539d9ecb2dcd7fea429c75afec2291df9eeead6fa347b01f9feaf2235bce627fd39116176195f7a3d7d74de28951f939db1645

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\sw.pak

MD5 9632dd7d883fa4deb3963ea663e0ffd4
SHA1 0db135be4b3a7c54c39e9df5034d5576b68ea92e
SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
SHA512 3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\sv.pak

MD5 5130a033016b45ae2c3363edb3df7324
SHA1 9f696d78b1b9efec180dc89ee0defc3ba23e6677
SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
SHA512 401b71360dcacf3b1fdc411c92195051370db110863cbed37143263e7804cb24b75ff1908ee39ee848c28776df00d6edd8cc748acf3725668af7815929e8066b

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\sr.pak

MD5 fca817ed4b839b976ebcbf59cac66d68
SHA1 413efa65470319999032b6a25b3b2ee33b8cd047
SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
SHA512 cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\sl.pak

MD5 4ad22c6c64dbe0fc432afaa28090c4d9
SHA1 19eb65ae52a585dbd9c25c32f22b099020c43091
SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
SHA512 94f9d34e76560059ef80fc04be4d54e52a7d934dd28747db7f0f6684243b841087245699a471a55d667623d2ce5e597a3d2c6bc37cfd7ebd2f5b8fb40e6207e7

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ru.pak

MD5 5cc0f54e022a9996773dbd64906d5580
SHA1 87c103bd69724579b478f904235e03caf61d5d79
SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
SHA512 b3365fedcba50643cecf1a70297e1e67990d63ae05caa87de01a70ef6f28e0f73a9a0edb0ff80b4138c624e51aa2dac065a2d40877fc92137714ae07734c2f4a

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ro.pak

MD5 745a9b8c6422682f2cfa5561cc1f4022
SHA1 31e3616ef09f9b1fd1c41cf8f43e504a6f90276f
SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
SHA512 8e0b7f98cb842a862ceca65e0166462275feed26c32c9c299aba9986d36b716a90d4a8db5ccef355ac266b7e969071014cc7ab6439778e77c52754bc23b4c575

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\pt-PT.pak

MD5 3f367760b57a5e4360dabcd4a650bc5f
SHA1 8d7cd6b0eb42361ee862455ecfa475d28f5aa934
SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
SHA512 3dc30780d57dee91215a716dc6b4cb432838aa0161af4371f49f70db2076bd155b170fd2c1617f59e1b572144a2e150a34143eda82d9f2227d24d2281d5aba60

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\pt-BR.pak

MD5 a064cb9d7cf18936600e9ccc03297006
SHA1 eb436a0c584ba91acb05dfccde139afbe26fe9f4
SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
SHA512 95af684abf9d24cfc4d0668a02da1e2e69f5e671d671d8cdfadc22ec991908c6aa5663fe1fa88ca8e85c0508f409fa6c2bbc174c53674270f2b188018d358415

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\pl.pak

MD5 0dc77139d3530695cb4e85b708bc0bf6
SHA1 6915655afd1e37361c011f5c2113d72c7a0e85bc
SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
SHA512 ee1ca1d99ac279df4cc0e532aef2fc531061736b636a84310bdbd627e0f2435eac1a386ebb19aa901b6eae3929bda1c5da4f41b73a25a1b20137522e34547600

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\nl.pak

MD5 9f547a24e2840d77339ca20625125b4c
SHA1 23366411b334f990a0328a032b80b2667fda2fcd
SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
SHA512 34da7a0b58ee3904d00cf02d16d5a3ef508fb708d7c0a887286fc32cd6145b2bd857d317c784d1d1b17662041eadcf7e225908980eb93f2b81161d845c0bb67f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\nb.pak

MD5 bbae0915edec081b04bb903b689bc40b
SHA1 6a0fc635ce1c431e512b8b3b8448176aa4025556
SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
SHA512 573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ms.pak

MD5 d5da199f347452c5904bff9332a08f84
SHA1 b5fb8c22708a7e3130684f1a9923b6dab10c3ae5
SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
SHA512 9fddeb376bececc51dec997b3ed1e22821340fa172636f641af774dae8bc9b5c0780757380bf3fa8df0f9682a555ede81c449ae9468f63215c17123d13ee9f35

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\mr.pak

MD5 b9a2aa88c69c42ebcc41fef00c980a38
SHA1 9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
SHA512 5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ml.pak

MD5 00292b0801e0dd0a74091bf53f1574c9
SHA1 63a002e7a8796bc4b4459a19c95ce426fbd1ec7f
SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
SHA512 e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\lv.pak

MD5 e664eb35f1284e9fc615e1bb4fab892b
SHA1 e777653abec377a394170b04f79e78acbe4b6a3b
SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
SHA512 c3232997e8d306e91ded72e9d81ffae2018af3e6c32fe620532e03bccd2883fce59b2a2290a1580d7080c468c02bcd24c1bc90051f06bfa9a4e17857d4aa583f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\lt.pak

MD5 7b6bf901352885c0699db71239b7cf24
SHA1 9e3ec5f327c0d0e54a449332061e60a8c79243cf
SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
SHA512 79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\tr.pak

MD5 46f9b2a35efdf1120a8a946e4f1d0115
SHA1 af7bec1fba32d912b50288a7d988440627e4ee85
SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
SHA512 cd67f9c328408a8295f224aec190c7c411a868755fc5c9e90b4985b3c41a05d6d34dd30d4a3866f6c24e1d640f4c324bfba8c7ab806a6b216151cf0a504a03d7

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\uk.pak

MD5 3b2a976a25dca963e91df3695c502d8c
SHA1 ce7ae51211f512c3723bb43ea0de9e6debb70597
SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
SHA512 ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ur.pak

MD5 ba86f1f13fdc37a2c48c1da34c84f4c4
SHA1 2f1578d0eee76e60effb63967712b15c0d56829e
SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
SHA512 fb2fe1548574da860bf27408a4f29d781fcefc300f744f4214843f343e343ad8bae29cb7047f87f5c3277641f561c6a30e5bc9d6490afbefc7af36974305a688

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\kn.pak

MD5 d3d6bc60bead608e68e776e07d21ad30
SHA1 e40e38ca99026056c127e9e1a1ff821a50310887
SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
SHA512 05421db2f1202573a34de1e722c6bdb55a35821c4aebd54c80e6594fc92075cd9b97e5bfdfe93b4228c3a2646b92a27da4722ef3826e2807238dcc56ba273706

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\ja.pak

MD5 8209dd8cf4e416416e015ff239b7c483
SHA1 7affd1707b9eec52c26a4c17708c8471c369e2f6
SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
SHA512 6a58a1ea8a46c325cac0629f2e3b571532a9a2a342ed61ca47bd1dcee20ce0b0350e4f6d3e8e4c6903c7ba4a4592a6382bf0fcb5437febd1673b3c2ce8cd7499

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\it.pak

MD5 91391f388b4b6c12a72710c35f4c355d
SHA1 f89e6ea977a10a9f050395489285ce8c041c2c05
SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
SHA512 8796d69d1a8bdbc7690ded45404174b7fa0b5bec8453d79a3c85bf4707c3f32caf634c792c72ce7bda3522eceb5fc6761b696471586397064d9f1f1988ceee88

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\id.pak

MD5 881ff04e220aa8c6ed9d0d76bfa07cb8
SHA1 cacf3620d1bf85648329902216e6cdc6f588a5ba
SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
SHA512 9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\hu.pak

MD5 d6904e7d1b6750d43a6478877c42618d
SHA1 919f090a6a3aa1112916f5bb0d5b73a62be43c1e
SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
SHA512 d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\hr.pak

MD5 7095ef4caf6bd39174487002a4e09300
SHA1 1efe686bd0b7f035aee7ab4c52be6133121cd0f3
SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
SHA512 45488d46dfe7a31a007932917f7baf4c195da899de5dc56d98e555336668af3edb77996487649b86f56beac688374ce77f8feadc01e3f84d30d83bd67631f9c1

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\he.pak

MD5 6376d0a5f4273b76b1f4aabade194e0c
SHA1 337ba39f09454c0779ab64872b9fa11f866d6adc
SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
SHA512 00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\gu.pak

MD5 b7f4c73d56be31042d8edd7e8ea080f3
SHA1 c0c3595701c0a75c14931ed65958d36df0d925c5
SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
SHA512 ea0d766a754604cad4d5f3180c30f7dfdc3e1cfe79d67365b72adc0d7574851f21bdd5b748b16e8b4a95ade40c8ed0442bcefd511a2934cc9c701e379c955d60

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\fr.pak

MD5 51ee1ed54fec49effd103c29677885b5
SHA1 ced6fd3354007d1ef3ea7b6689aae5213c20cc69
SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
SHA512 dfd50ad99b89345940afead11c3a6940d4408a0e6265cddda1d71ad92527ea00d8057ac77ceb2ffe137a3f0d2f321c210bc7cf97ed821f01e538dc08d07149a4

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\et.pak

MD5 e97fe1e6d06a2275a20d158dc4e3b892
SHA1 1575b9b1fc331a70bbe4ca7d1095d4ed6777ecc1
SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
SHA512 77879a4d1062671b616ba9b2ce0b6f69a5dbed6bd56b73ded902d1f9f44ecd96a2212690b3568c0ba273c73d91589ff2bf18c7ef9b66e0630fbaafde2a61b1b1

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\es.pak

MD5 ba80f46ef6e141cef4085273a966fd91
SHA1 878f35e15b02558f75f68ec42a5cc839368c6d61
SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
SHA512 8a8b4f7db23d4c93756b6dc4219f00c77358a8fe992da1f51431597b82c3aa87abf3a98d79e13e7b4a14a1a9e94d388760fb6abf3a744406dee951c8e78cf361

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\es-419.pak

MD5 774ced79da2fd32bd1ba52a0f16e0a19
SHA1 ff36dcf8b62046871f441f301dd7af51cb9ce7ee
SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
SHA512 7763c15fa97efa9a5af73dcdedd4fe260139bd8ff782ca3aa0937d9355b2d14c3e482e570844ac33d22d7b016c7b9097d727c1dd585f421dccd59ca7bbc24269

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\en-GB.pak

MD5 502260e74b65b96cd93f5e7bf0391157
SHA1 b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
SHA512 0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\el.pak

MD5 306a80dadadb1f9182810733269537fd
SHA1 bc01a65a9d024ec72e613aedc60f4838be798040
SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
SHA512 491016b8fcca59a7dc9523358c4a7b56c55360f424e8fe9330d6f01480835805e961f1e48f8777660510d9af9a66961c639df162190dec595a867d54150eecfc

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\de.pak

MD5 ec069f60c9825080b9d18ff6492e816d
SHA1 34ce5101c9646f9c2deb9820a3b26eb91c525ebc
SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
SHA512 95a88ac98f0957e5f200af76c1a743b976228f7da1bb6c6b3b88a54adcff05e1172d7cf2e6f0a82cbc8ad0aa79974a1bc046516250a3a5889fd7b2e4d7c0b804

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\zh-TW.pak

MD5 02e9e0bc5c30ca60a869ea761fb662eb
SHA1 c5200f692544b681af8757627da430aeea4283ee
SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
SHA512 07b5f401f89dfc36499a3e74318b471d9b2e795dc363dfd5a9394089d4783a4b51fd78e2092701b6974f1c51020f3b5f81171ce21690f8547ff3c8f3d54ce781

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\zh-CN.pak

MD5 2febe4ef32e1a3884089908f402ad62f
SHA1 e65c54adc127b78494dd6189cca71f1c7bd2a5b0
SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
SHA512 8e8b030af4c952c32ec277850d5573414630ff5196eaed52820f44e9c5bd03ab6f71a8add19215b0456eed859be0d5a6f28d48e12f1677d39842f35feffd5e57

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\locales\vi.pak

MD5 065179c466c5b7457e249f11d152b99f
SHA1 cfc05e9dfb91b2af2944aed4718fa05b43844914
SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
SHA512 fb598391a028b7d3c7e25cae21ccfde655e6f871e498767a54f7cf0d5d4e48207213cd2598ca88e4f46c303cd2d8175238a5a5b720ab37beec1873d681165a8d

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\7z-out\resources\elevate.exe

MD5 a112a67baf4a3b176e7c100b26260e9b
SHA1 723733c532d2a79b0a7acfe304a1a28efd5a08f7
SHA256 8c347954e3964a7cd285b63c91c086bd53fbd5dba147efb6160599841994dcfa
SHA512 89cf7d1939d3ffe03fb71dfc029fa90f9c7df755173511f7c70803ec41b761a18cc035d688a2dc0c78c0b482ef17a3ae3617896079cbb7835f36229dc62a9dd5

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\WinShell.dll

MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

C:\Users\Admin\AppData\Local\Temp\nsf1EEE.tmp\nsDialogs.dll

MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

C:\Users\Admin\AppData\Local\Temp\0abcd6e0-460b-48d6-928a-c8fc07b5f812.tmp.node

MD5 83c6e16078808b94dff5686aecf119e7
SHA1 c0e4e7c859f3d4a052a9338a9052aabc1114c457
SHA256 f1a0786629d4b767fda448e1501eb44254aada2d2a4beab5bb9f231c19f9ac02
SHA512 213deafacaebb78a7fb9139ff98d93a8fde569cb6abdc3e2926384ca97d069702b2fe0d5606626634b5ffa940dfe5a6c5bf01febb250e9559474bcdd42929867

memory/3172-756-0x00007FFB41D80000-0x00007FFB41D81000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\ef29b875-c721-44b4-aded-25d21e829b4d.tmp.node

MD5 e02b8dd62465b60e0e3d21c229bfe0fb
SHA1 4d39a70380063d41ce75e0f29cc8a5e18758b98f
SHA256 a7484ce78716fd576685c9ad3573243915c87c604e6476e7e22c83e6c3635686
SHA512 242386e4432b798728ab521c885a5ee2ffdf202f312a271bc6081bdd2c5869b86408cb43620c7ce123513c1f694d2aa018dff4cccb49222e20091fb4b5af9222

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Temp\e3abeda0-f702-4af3-a239-3c65fdb5a4a5.tmp.cms

MD5 a008f27c7cb9cc98d1faa83e45aa6715
SHA1 cb5ea0316b3e782e2f143a16c80d672b761afcf6
SHA256 f14284bcf77e7f6ffa050023527b9f61afc92ea786ea87bb61eb958bbdb9bee7
SHA512 64857d844aaf23dd6698f46698305a85cef5ddd4d059b1abeb5afebf2ec275f12ce8ef388195df284c5e750c829050b372bc30ba869c309b6939e7835d035d4e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2D6C609E-B8F9-4848-8A76-8BE0F5FE1C65.cms

MD5 70f6b8a2ea30e5d3ad6968989f377f90
SHA1 ea7d83585d6bdd9abf95eea8900f8ceff25b46df
SHA256 34e8538b859e9888999773b3a2c6abbd1aa21b8c5076ebdc93efe8be66220de7
SHA512 e855da3e141eccf5913e6caa903b0ff0924e9fe89a4218325011135b23959b1abbc1ffa5cd4152bb2fe36ddaa0b4f4a434f684357537e3f1d718dcd59df4e9ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D2164690-F107-437a-9AE5-4C546495F88A.cms

MD5 d4b872c2c04377b264c56c3bc144089b
SHA1 e4e55217cabe7c29bcfd41cc5800ccb1a9b44b6a
SHA256 84adc491ce26ce015cad0da91fd07f364272dc400e70acebdcae9200aee49a11
SHA512 22353869e5ccba6b0cb9326b31025f4e561dba8ed0e191ddea14a71038c78ad5778d2c814bbc7aba13be0e70fa0e9b0e9becca5c2d9c59b91354db94888b4f3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B2D08ADF-2E7A-4e6f-AC6A-55E5F6E749D6.cms

MD5 78d2dc50b240960f9d8bcedc3f928a32
SHA1 639ad5afc9b8340a0c675182a3a9d01d1e5560ea
SHA256 b0a227921e71a4ce97dcfa7e60fd6c9af797d75d325b3803802bb42a5cbbf25b
SHA512 2077682f7bc85a04a1412dc83fcc0768487403797d4e33e74e88d34f130b7f5428d466c065232370bb04857c3fdc1c6e86dfb3ffb5181a530e0886b39faee0b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1F27F99C-EC1C-4c5a-A5AB-6BEB669D4DC6.cms

MD5 72033b75882d91a559977aaad7c456ed
SHA1 1f44ae116e3e7b1c8bb6b654283d2d6f56c82187
SHA256 d6c65330f11c235c53a5aa14e37fadb4027993a3081a715b5fab69be793694e5
SHA512 43a1c9a8c5c4cc05402922d07f0492121c65526137296ce4acfee53fdbc15317f522f0ddfe876ae28e2b2ce454ce9792c2fd78d819ea1cdf04a4becf33d8da17

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\553B1C21-3E41-41f2-A724-82E72D7434F0.cms

MD5 716a9231dd7f5ccc9e726eba3835428c
SHA1 7bee478aeda6ea979a0fcc79dade9befa7617d9e
SHA256 b201e01a17d1f8fce1eff243ff0aa9580c1acd750c95d909f14b8060395a14c2
SHA512 443fd1cc395c0d0e7e7218fc0a9f636c9c67e1c27a5a884899757f671b1b22e4d7d26ebceb984a9954f5f4928e498d633e0f10d707e466fe5d1073ff9b05d8b0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\12B7282A-D204-4c25-9742-5F2C51D95A02.cms

MD5 a93181a34be94fe4c644600e8aff270b
SHA1 2488b4fc5f7dd1df8c3a40860cceb87822bacadf
SHA256 25c9d758a5ba3e6381f5a5780377270f52bdc99baf1fd288872de02f31196aba
SHA512 2a9ae1dcbe377a4edc557d7dd947ddf5e01d3b8d881fddf5a9ab1b68a02ff4965069fc11015d57a257a223a744a8c9b51d62f5a0c22c4a6830a53eff1dd5c984

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CD4F7EFD-6AB0-4afa-B238-A59C11A508FE.cms

MD5 727aa108a9c39349130f37ff15ebb064
SHA1 95548efb792a7eccc634ba887d382a8f41cac1a9
SHA256 a50d365ac37d29e7296e80bcb6d17d8a196e0ba3e4c7e39c4c36aa9877f9a061
SHA512 3741aab873c2ebcd8989b8fa4573df5c3d2266279caad4b779dc3720c056045da39f7e80de035dbb8e55a08f679053c91ab55cc314b81bbb179ccb2bf09d0e65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\74D341E1-2A58-4f2f-BB0B-914F1B0BAC53.cms

MD5 2ae5b0e8c838a8338b430fc4a9af870c
SHA1 7a583df2913b2a456eefcbb8ef89808cc930cec4
SHA256 2f15c7c20feccca8cba62cea62fcc78bb977cef8e01036edf2c66ef0fb392750
SHA512 0abfc371aa2dfb5fd6065203fbbebe6c399858e36d6851822237fef8320c19a4ad4f79a6b751e20e653a307d2e2d3ca612c973263defc504916f631c5cf04288

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\BA6383E1-FE76-48c6-8B0F-F2EBE2D5A39D.cms

MD5 f87da24d54bc4cc0da11990bc9eb5bfe
SHA1 4a84bf6b4da74805ebd70a7bdc9aca64a876d487
SHA256 b9abc8ba3c734808eaddf0265d350e19787c4b064398b32caeeedf11b3bbb718
SHA512 3f2cde9a7964773d67db8f459f1e77dbc86e428fa103682d6e21f86f9a3e1e16f1c7abb84413a0c57dcb91a8075f9205c875b8a708d9525b3cffcf1b4115158e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\45CCBB9C-DDB9-4273-841B-6C1C166D9D36.cms

MD5 7d9bd14c96953135f092b9ee910147c9
SHA1 73e9e7fe6f5b95b841fe7eed03d6303bdeefcfae
SHA256 9d9c09e10d5f89e4eb01559cad8914aa6e698fe7c524161ac4df94aa3b6ffae2
SHA512 2c2edc53e33c11bb9427530b695522ecd7e9b3bce4182635d4b504e42bd94b735034cc8719c988b4f11beaca3bf41ef4ca08d6a32d55858668ff46235d991b4a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\28E8B748-E2D8-4546-80F9-F1391805E4F4.cms

MD5 b6f580e2d329c7bcfdb4be75c41f5b9a
SHA1 03f41d4b76b12e8df1331b0418947b2435bfe296
SHA256 7764a13fc5107a756f5f75437dc1a4791f25d3468346ecee61ae512030751358
SHA512 610181f1901e8a345da900ad0cbba19b9b27d4b7d906f155dca4ab328388bedeb573613250d952a1d504952a16dbc0164b734aa250bc751e5f7ca695c9e65927

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1B6D7FC4-E0BF-4cf2-A53E-2EE713EF696E.cms

MD5 df3d907641be1603dc6b31c8fd367329
SHA1 c5eb81bb389882fe6735b191b761b7833a07cf58
SHA256 f0e99ba6bb137be7210a2714347603a89f38288f6973eac30a6e5094160cd753
SHA512 4e49aa6a5f25f3600dcbd2b42921896eec66674a942c6b2d3132f27f9fdcd6c6ce0be9ea5eff36e79d9991854499d4a19cf75cbe7acfe10cd3220caab807ccd5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9903DC3C-60A1-4de9-98A0-469ACF17DFEA.cms

MD5 59678cb4a9fc4fab0e8b13876f44f162
SHA1 e0747c7696cf8d9c4372a24fcb2c0de5182ae81c
SHA256 dfc8793d129df16ebddd5bab147658c3e0508949fd722076d83c2eb97cb2267b
SHA512 04263f28f9508f04e2a42d4e0c5c4428088e6017332e84bf4cb6b0add19214d4066eb18ecb7a87fb93b6d4d1c1650d0da6e9c4dfc2eb8353b7064ef6f5dfb51b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5388EE92-B643-41cb-9251-671B3B29C25B.cms

MD5 67866fdce74a492e520ffb738fb27e24
SHA1 d270b6bedadc2f86307f9066e0c230ca21298d1a
SHA256 0ed042112e4c2d3643647d88698485a7fa03c2517e003ef2df2c9d3f18d5a7ab
SHA512 f5c809e1139c600b1ed8557b00d6e0a387338f62caccba866930d18f6aa97f5930f7c744c86140853d159804b58930364c657dc2cd648080e62514632e2da5b0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8B9ED246-85DC-4b3f-8986-DD43FC5C72EA.cms

MD5 862098ff947193ec97545aec31917850
SHA1 e0c65ffa74b270336b56f21c37bec407be42e105
SHA256 ea331f024cd0c6e83661d8946cafd94d43e6a2dec041a7610e02c934b19f5cda
SHA512 76e7316d7caf1e5b4539587e425b3e46af925a12aa54a448066cd18864fdff0a9b0ccfd362d895924f0fa603dc08e611093c3cc6a8fcc23ff51a1e9d7db99b18

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\26E7B56E-E955-4607-9B11-C4522CE99A56.cms

MD5 214f4b460c70671faed160c0b959f8ef
SHA1 4b5f024e51bc87b07afa472ce8b74779936e846d
SHA256 3b5ef59a04da1e78553c0a3f2e98a51f772bf14ecc15d3a7494a8b4973ce2ab5
SHA512 c6cc02a934e5afb5a8df6cd0a12bc24008be48a890a7fe8eedff06d82de7fdc2a3a6d198f7ef2f94ef59c2f89e8d923a21d343e0c1d6330e38c1a54325a201e6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\ABE5C7EE-8C52-43b7-91B0-334322E19F5B.cms

MD5 58a90b5e6fd8f22f140dfb8dce257e82
SHA1 a9966b0f80a6db0153dd011930245e0a2dbc9f41
SHA256 8eab484067790790f71bf211b4445cea31e19116b9baf7dae810baa258f24286
SHA512 8cd7a0684cafde09f3166b61ca3139d55dbde6ec6cd6b6544294fe83b1ef9b0c2368613d4b94e91197d1867d8344c17fcdb04266ea47821dfe005affb75d672b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0A95F28E-B5CA-40fe-AF1D-DE50CD6563C9.cms

MD5 7b48b0326007d6e24143c4456862208f
SHA1 d29acdca1cc23418521f07caf3351b0d1b294a8f
SHA256 8ec50e9f747e8d2d85027f13c8709ed2da87cf22007734ae81f23f99fcfa2dd7
SHA512 8cc93074179a29c75b1729648ad9f0db26ab38bdfe603aa29ca29345523cf9ed108f79175870f295e7b612027c2e0c5b6e64824d11548329a3ca1482b4e072cb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F2C08393-F044-432c-8C0C-436DE1DBC948.cms

MD5 e204e1438b5a3992db73055d0a7fc06d
SHA1 2f0331dbebcba8b808cb56b6ebd702c70fc13d47
SHA256 0e89b49bb1e41d1b8f0eb43b7d338b29198eb80039e2bb0b6683f04612ef9e9b
SHA512 36cc6ac3101302599869da0391fb02877b9d73ed0da561ba6d9eef10aee6c0c9d6fc2c54a24439351d4c8db73ee9ca3e387acf998ee6ba7e8dae411dd1a827bd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\112EBE2A-4356-43e5-9228-1F05492DCB78.cms

MD5 54d47344b978e4569e16de7f9771b26f
SHA1 867abbb957cfb55d8bfc5100a775d0fd6e660295
SHA256 0583c6338c59bead64f46711f3dc0fdaa7968c587ea2b5a109fffa270b2c1598
SHA512 12aa2ef0afdbc3af2a05d8a225f71d12c524ccbf53f0cda627d21b0d55aa72fd8d1193a6aac92ea2595706558a49378efb12dc13cd96ee5c76bec13ff84fde3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\482B5EC8-1B2E-4a0e-B2E1-9195E9E8352B.cms

MD5 26a85fe793a1723ad5bae43fe837f7a9
SHA1 79b2b3ad602dc8a4750c0aea90aaa21adf97d76c
SHA256 10ca9e5b6bc6fb8b87b2be7111fd14cea9332abde81172403b700f08e749a894
SHA512 e9ff651083a9d9739bb6090985e1accd631665fd0cc6f50dc5be684c234b5268fddd23bd11733983a3028af69742cfd64e94f4bdc55e22c8881078b5a390a85c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9A3793A9-013E-4b34-A63A-7DA572985CB4.cms

MD5 263967370ebe4d79e9203e299108526f
SHA1 9e5cbcf5e6fab95f619bb7b3214ce6329adb8e87
SHA256 d9b0ea42edfc08b1a3d8468075a87ce46e100535335a79ce63dd2970cd7c3cdc
SHA512 2bcc246206f590af2622f16100376d2e5ef72a9dd119cbb5589d8e12ecaa3bd65ee37a9e3c8cd2321e2ce3189f01875a77cbf100a60549432dc841fb539fef65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AD537001-8B84-44ea-9B31-8A2C0D42B1F2.cms

MD5 91848bcafc65d8f0600b8cf99cecf1e8
SHA1 9fe224969d197f7b2952e5177f2535088b983f5e
SHA256 6837b94ba88f9523c41a4c2a8f466d3b389a5d517224b47a8fb0df0bfe468f16
SHA512 90e7bce23b1568315bdb6970f1bb92b3faefdc492b4a4307f67fa556d6f3e73876588e354b537ea435c9cd4ffbf080fd7c5c374fde6edb0c4e4c059c321b04c7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3B3AD8BF-62FC-4a21-980E-BC84715B3EFE.cms

MD5 6a4318716b47feb90864c45e539b74e1
SHA1 cd40c87af584e1d73bb50d91a6034e3421fa0e65
SHA256 2b5ab7db14f26898f82761470f6b4ffae2d0960ff151a289780d1fba2b601215
SHA512 8283c0ecd5f7d6e3ae565922f5e91dea9681b21c7f4df521ec395a28b9ecb3be49cc40f3ac1b3725c2ac49689eaf9c4c718b0629b8b16a8f505c2f3a7de38c11

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0CF669A9-C7A1-4619-A0CF-C939B8651ACB.cms

MD5 61139e2a36940ef022d19f4ac1a76a0c
SHA1 8ef9700f764fff6408e5fc183811ffbb62fb1aa6
SHA256 c13544d1d821787fceb18f59257f8acb6444f9e3332a5fd69932a76631982dd1
SHA512 94a8933f8ea7906811ad97b785ea82342b3723ab5a81615a38a8e444731d63fd4fdba8c2d4b015cf0d298dcc6716d480ad167ef15d2adbd1560a29c4eb759875

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4810101F-E0DD-4ba9-98B8-9351C8F558C3.cms

MD5 6a47630011e6a5b8c71f73c0f131a967
SHA1 543a044a5a041f640bc92342e2b8804faa6c726c
SHA256 13bcf6338b19a322b2e9b892a47a5483c84deb428bd9a2e624edabda57f10fb4
SHA512 9d488f06f08f5111881eeb3a214c040074765452437663c4d5751b16767519502dd454cf2b540957428527dda7ea5de1db114ca5ec323f14235222a0cc29cc45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2AB0AFBB-A0EC-4878-8F2D-90CBA73BCE9D.cms

MD5 4c933895819004f78830019e17254f79
SHA1 0195ed6493a5f07345ac846358eabeaf355a94fa
SHA256 87bab2e8fb8a27954d404dc86680eb446558d7aca074f2274f2631cbb1e36d51
SHA512 d336fd146112f87b860b3212b97a9cdf4b2b6392b22ab87db61322f3b32e16a67bddfed9758372cad4e65192dc6dafc0a5b1a2b34385e8c23ecc19beb71c187a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B82FAE97-3D5E-4d38-B67B-2E77912EC391.cms

MD5 fdbe7aa4da7b756326ebf079f206f18d
SHA1 3d6331635a6a470c16ac3a7ed3d6033a42db6c06
SHA256 cf2fc4b32f3d203b60364cfc7570603cad01b2cdbef6bffa1ae84d856fbe6cb4
SHA512 329cdb276c525e3966aa39080b7f09a0dfdc455666077f97d21fe586a3bf8e628d9f434a603a6af58c94b9f35b10c7b1f155cd74e02cebaa3f13ed3b05be5ee4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3A11EC89-4D80-4e62-94A8-19B52C44A5E8.cms

MD5 277b6dcbd04d1c492bae84c0f865958e
SHA1 78930b53f6e46cc0330857fa758588b57259cb9f
SHA256 d89595432a4daec6b91de794c6f87adfb7b90dddc5ce57423a75498b16cec755
SHA512 7118e65e6c2363d53814e04735b9bb2282470d3d8e4e1763c84b210432328bb2de51a147fec716db89de287ca0c1dd69439ef9145a940a3142c74e5e793a9284

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\40175092-143B-4f93-86CD-766348892BC7.cms

MD5 41fc576e94be8a69cac9e46751c05421
SHA1 8f3f0ed9cf89f20495a5a217c23f45c3228dc58c
SHA256 6c70df0656f673c526fa647e38cff37f7d3a8180d1d410c413d00659ccf5272c
SHA512 c0fae8bfa68739988db404c217359b9dfbeb002bac919f064f4edd242b749498f4125e7d0fa1de3f2acdca84a4a30781c95f0d33fc56202d1852876412875999

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\24722400-D906-49ac-B7D8-5F5A83E6CE2C.cms

MD5 13a607857afe72eef216e576f6e9b382
SHA1 f45683cfdfe9ce956ddaa26fd1e87eb3355bcf08
SHA256 66c589aab9db82da9f2162eb612bb2955e97888ac67121ebd3b4c75d5a39eef3
SHA512 d247f83dd4ac02ec5dab884e67e1a265e2b9cf62f80a44058ec6504ec0d8d67c5e3cd2260780e7f2907478b52912cf4310da34d634c9b1852825dc05124fe59e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A3A0BAC7-27F9-4a05-A716-0030363F1E6A.cms

MD5 800944aa227d47d82fe4508d97ffbcf5
SHA1 a48cf020df5f994c2b5c95f17506f4ecd0cb8204
SHA256 c4489e5843133a0720842f3e4da7673485f45fc276ebc6cc6f50b150809acb19
SHA512 02e0b3293a1afb84bcfcd24df7fb4551e3593d153874af25e2a272d76b5f15fc293ec6bb6df7103e5e171e694e2c02dbe47b8179d5ab5c905edf706a81485059

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\732DD357-8070-49cd-8B04-F671E320A354.cms

MD5 a989c84457664b205403276a8d718bd7
SHA1 c3328edf83a9c29bd37c9fdfe18ebec4e03c3ccc
SHA256 4afae08fee281194b37a4f558211ef3545eb0206c383fe246b689e922d4b4d77
SHA512 2e23ea583ab9d2de213c571b1e7ac4123551d073d672f851d5939b3928eb0514c0e592446e7befc7a77d9d7f96c4c4e462fd0779806adee84c2f60397f9c61df

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FB6D8F38-1452-41d5-B6F2-3F68A705641B.cms

MD5 aa91f52635299963a4e77539d541d1be
SHA1 fe1bb8950270a80034a48c8324477ca98bf538ea
SHA256 cfb883a5329394f7ff5f7f02ab6a002c92d92000c776face1674a4aff28e50fe
SHA512 b0a989718bd30a2e3bdb12cd9252191ca79afe628f096e94eca47bee1590bf69b0c78c2ab9c85a186f55dff6e8e05bfbe4c0c362208d41f71690467a3e23648b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8D2A39F5-91DA-450d-AC3B-A404C9529257.cms

MD5 64d0a691635131e05a6bb32eebd29a9a
SHA1 9b6bb5648a5d58bdebb85bd54cc9f765eff8de97
SHA256 7e12e1990f93dbc49c0e00562348c769a31d2fa415d12942302f23ef2147ec5e
SHA512 7b9fed1be5f83c50b59550a0eeeaf786e617f81a945d65c928b29584290b2fe4642aa8e5190fd781dbfc53c9a3e29733eff5c2e8932a6fa211897e0256c2e5a7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7405B67E-9290-4638-8EA0-F7D14B18DF4D.cms

MD5 2d89dfe16a1010fcd04abcef5503fec8
SHA1 a7ad63ad6a98c3f5c655b0b6c53f38eb9e2f1429
SHA256 c40ff589adf58f225117bbaa5c51c85891bdfa0a352f35b6497dc202deb7a32b
SHA512 87d4338c888b52be960d5790c8e6d3f624c9c1c38e0e730b893dee8ca8e1dc0ea307bdc02899c8baa6a8ff19b5cfb67eaed7972ef3d5ccc4064b698455f1b6e3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EF59BC9A-4205-4a08-9E00-69DEE7A6C8A5.cms

MD5 2b4e3cb67ec003438983a191deefcdd7
SHA1 6e48dd8ae33812129b42b55c02e6b5da597adf80
SHA256 7944b06714f7de939d1dfe1f35c06ef91422c283e70927f268abcc3ff41f588d
SHA512 c368e32fcdc98faf564f230e367aeb5ad44e1c15b0c8185513784a7d9b983cd3d7c2e51e6307873f5761b1f6ef61568e78db28f7729e860151c19da4eda828f1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FD5CBB4F-F62B-4a27-9093-D7FF33CDB7FE.cms

MD5 b26acfce540a5071de6bcd89e782a840
SHA1 28a408292fb93a6e0ac2e089c8472e724f7c72d6
SHA256 7462482476ee12f9c0ec2a143e1e8067f2286e908b4823b478566ba02677a407
SHA512 7737e1296d952e317fc3f8f866988a7b6a64d45708e3ee860bad849f64972dc31c502d0d3a254769fa5ed6a277f3ac0faec835bf0219f7b9175d8dd1e990db3c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8FE9F857-4658-474c-A552-17D94B0F4DFD.cms

MD5 edc7a0efb7002e049252c2bf251edd88
SHA1 11d1983fe3c89ea736a50d595979cc3f45eb37b0
SHA256 3de47b81f924150aa170f193f864762b54b440f31c586d729253669fb1d8ae50
SHA512 36274c3c3181022e5cd6fa9155f74666eede8b3b63a85d498657dec828ff1e83ff1ccfe7401c08ac1c632e9de94b94b8614bf88b911db4c3e84772b305537b4a

C:\Users\Admin\AppData\Local\Temp\461ecb67-1cba-4c0b-94f8-79b98a6f68bd.tmp.node

MD5 49ca10dae58cf5a1a0222f83f6df4002
SHA1 2ef8603914516b24d7128c50827def28da97ccc4
SHA256 a6e6d835cafa1fc93f4b6ef3595a4c2b8e54fb7c1ee416ed8e379ff5846e048e
SHA512 815d5b7c5001988d48d059b80df5e6c5ed6c43c89934c31f27bc6e51cc8d6239620161ddfcd0307ed58c1c823e5bed4344a089eaa8b326595a9efe3c484ca9aa

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\849A6BA8-7C6F-4cab-BB62-7CEABCFC9E5E.le

MD5 4de207e72f3031c43425572897710d2d
SHA1 0bab9d47916f2c8cd2920eb2c7d38cb4066235de
SHA256 d0dddfd360f4d640debba94ac0f9cc7a6de7301736953b1c40f835566bf12275
SHA512 555c0e250891400e869312b92f618bb2753998c350f2412b76982a6458fe9666dc86d6e58d28186c189fb33411701f94e3d9f3777e5e2992e455eddf35eba9f5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\28AA6B77-DDE5-4bba-B3E6-F8DD27C7BCF2.le

MD5 4655072364a587d2c46a7ca791fb40f9
SHA1 a5bccf702b157557cf28657e409c424478f3d793
SHA256 33bb18e2adcadc43d929ae919ab6a3b039954119252106060091782b7387b32e
SHA512 d4791bc8eb1b165e23783f3b9286edf15ba090de6d98106b84fd13cce7a38ac642fbd19958aa2c453534c71fcd1e1071ecb7b9ef8c5dd5fa9e530aac598b7df6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\787E8099-A3CE-4222-BF92-40110FA9EBC4.cms

MD5 3cf4b8e904502535903fc594ab2f9761
SHA1 34d02bc9038bf6ec77d3d469c74fb0ad93307208
SHA256 9b888dcf3adfbd1f2da90380e802c0945aa50f57f57d749ffa9da7453e46bdf6
SHA512 4109b24e4920c81629dc22a3d62795e0ff388afe3b4faa1458c554c5a143a91fc4046d23dc3be2a64ec1fd62abe34e3d60a71c239beb43dd8a41b3a98752a8e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\43A0D8E6-68FC-44d9-9333-74EF17264A47.cms

MD5 9bfba87b500bee66d047132cd753f8ee
SHA1 ce5b73002e2b8c1a10448a7d73ba52567d00b6c1
SHA256 9e80af82c13fe53184427b91b9e4403586f16eb29181fc686371d3359aafa783
SHA512 6654189632a3578a5a184c6c9ba0712e9d92fce9707670c3ecbbae8658caa7fd20fe9fd7d56c6089f7a1813beed659ce9b73d03ae7aa87bd37630e7bbecdb2e6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0236C7C4-283F-4adb-A5DE-319D6F5239C6.cms

MD5 8d567a77e3e3f1e084ad8cfc58dd0bc2
SHA1 8b94cda26de557f8ba6b75d45646aeda0d3724ff
SHA256 e2b51a9f951eb840b7288ec1a6585d89e6a70e88e572a1cf68242164fb3a923d
SHA512 ae56d21164e1ecfae87aa09ca598c563ca6c9872eedfa8cb9c3c1b7ad93eaa3d2e3983ed584b73f0a63323ee22fd3601984dc4a1b5be1cb5b19e27b28179e394

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3BB7BB93-B51C-4d8b-B0E9-77EA04ED5E67.cms

MD5 00a8568ad902655c3edc65bbf00111ef
SHA1 1e7ac030cf25732bb177381ed236f27b097ca0b1
SHA256 ed28a48f77864d752268dcd30f1f5619026f3f1ccbf8ddf9546fe1af40c3432c
SHA512 da7e1b6ee9e1b68ab8341e109e90fb98149ea5dc3caa02c4e82e640cbfa00bfe5f3f0e82a0830acfcc4874145e2f1a9cff5618498b6f21d9bdd6e99c052caec6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2C08EBB4-6376-477a-89C0-B9D0A68AA051.cms

MD5 c0cac5aaf07fea0e757aa8ee1f34f8e3
SHA1 f591de3e69f38d21a2bfce1e8498682b3c4bffcc
SHA256 9a2b7659ef77037d02aa74a92860a4d81432eb14c99854933ec697bda1ba5eee
SHA512 d2d2445567906b4bd044ee9d0efef056aa1c6454a3be134a89d9606899a8a7e1c3690816eaadb0dd2160cbabb4676a0a2d37ce8c93a61d3914a55526bb3f516d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\431FDD28-09B9-4658-8F9B-94210EB69C5C.cms

MD5 45711a14206671f748f0749c9475731d
SHA1 bc13bb8062e6e8250b09aac53996a70901c5b555
SHA256 ba19931c0dc4a4da29b10584f4ab6ceb1a6736d873dd3ca434da7556ed34ae6a
SHA512 268ca53360b19b72d065ad3e35b68def238a5713d1679266c49a33a0a53de35292b59582320743c8f8b965ce809ca87a8546930ceded9c750e08ef5df29c972e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5B355B19-8B30-4566-AD5E-5E4E5CAA2CE9.cms

MD5 580cee6c83d3bd8436875cbfd1430113
SHA1 c7bced33b82851597da3996ef5e5f439b55ced26
SHA256 93d1d9cb5be1d9afd245c490cba62d7e57ea99218c34f342102049540f17d576
SHA512 e232f9a2c63a4fec7da794d9344732a0ad9ccb112a885c69ab407e226ef7287e58a5a665b69d066d6d2accbd90c098f80c24e820846558014adfd2fee98a1761

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\354485F5-C056-4814-8527-5DADAB17BD70.cms

MD5 8817e6371f43ea86e5480444ab168221
SHA1 eb0eabaf34abeb303949b488d56c4bf11d9bef26
SHA256 995c4e1bea25f6e330c09ac953b06c0878883767b2cd0c94fc6d48ab977b7e7f
SHA512 354a72ac1aac8d9e61dcfb671b371ae3317c464963305725da6abac7b3cfafde03e757073cb6cdd1caebe309e2cb8fd313401a0d62cfb3b0ad2d23b5ddaeeade

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9F436475-F346-4c6a-B195-A571B7179643.cms

MD5 f7b77e165166ed958674c65ff0ec9bd8
SHA1 6c5243090adbf25444c185ae6a524d25218c97e1
SHA256 19a27fcbf9000a73ee300acbac569d697c02da4aeb17f7ae3121d9b4fec4ebc0
SHA512 40d1817d6d40866374b9ba867f80fdc9c9637a4623ed1e01a9b49df12c462c7b3e559e32a903daf5e2a28ebec2097f844e0b99bf470f404d1333deb29654c3c3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CBE4D18B-08EB-425c-9913-CE559C48544C.cms

MD5 14fa53328c2db2aa2cf1e9c8453756cb
SHA1 d7b822d5b66cb0700e8e508e03ffa0a3221f7f6a
SHA256 fffbda69e8b20f11320cfb710ee4b59ce490607a025f81668e89b6fcbfce3e63
SHA512 c63c61423af6dba5bfdf200d16b0c89a6d23adbbec691da336b4b4028b6ba26898280119b8a7d94d8875b27e7686476649f348865c2a15a4ea4da385dc2caedc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\488ED063-45A5-4471-94BC-3C4CB5B07913.cms

MD5 2161df8f175728ae2ed811e5f47dfd04
SHA1 986bb1059675afbf2fa1e88915f2d27b9853d343
SHA256 61040015f7564f52856864132f937ac7efd5ef91296718627532cdd0b8dff3e1
SHA512 36afb19abb8f39273344a986b91735b079980e064ba40d26253f16f5f29ee27bddb684221ce346bf7e64c3cf97e088d59e29f783604e44ea9055c0e6aa097e56

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\67D1AAC8-403A-48e7-9580-39D3CEDE7661.cms

MD5 3ee3c0c9a0f7d1f1025c0c85da8ab676
SHA1 b2cf4240c437131b13e5a56cf4ad2fb5d5ab19c0
SHA256 56bc627f7702b9a3eba0e745021458f43951f83704e30035585aa0358fad8f59
SHA512 49c517bb7e068ff916f7e87747b81ae975146e4a7464c243acf79fa9ccf3c57dc7840f794af370898a0559c3736c80ee47dedc33244aaf1a0909bc819f882ee4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2E81E591-D531-4ae1-8FAF-935EAC4B1630.cms

MD5 a543811038e269bf1f3c90b731b59d92
SHA1 4b582fb080dbd697186c5f2875c9490013fea135
SHA256 583376588657cd760f2cebaf15af2d7c10769dda1c88ee5e7b343087c24b95b5
SHA512 3c445df6d1e953d454d486a43d107b9997171621f7b29b5dc19bb13213c1189f59ef0c49367b65626317ebbde5e84c09212a915724a90abb104f582ee115816e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\DA415DF1-B01D-44ae-A38F-DDE6C278C7DF.cms

MD5 1d495c26f8ae134c0b3dd8cc85f0fe18
SHA1 212b77327ca1def5e39d0de98dc0b817254d4d40
SHA256 0b02fd06c81eebbac4e2b5435b2305b3acea6833bc12cd74c18a60c009737eed
SHA512 77560d2204178ffcb6ccb62391569959886f45cf6a7f595aad0ea0059c15a2e3988c50dc9532bc82e6b83ee1139c9fddd9f02237c85097580e6bef720f6b094e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\75211C36-F90F-44f2-8DA2-A1321A4720BD.cms

MD5 d21e01364ec99afd30822c935069884c
SHA1 20412a80e2cf53215252078d5f34ff943f7105bb
SHA256 5ac496841ae36192a5e46eeec4c16d0ff8b350bd83ac5f2732e52f29cc7bbd4b
SHA512 af669d309362f9213cfff125b27af33fbec63d832d3ce816d03dc75693fc6129c326472f0df29adae04fdaaebd1a1dde451db3f50fc3dc7c0820d665c4110b85

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9A41B4B2-F149-469a-99A1-0C9FBDD552FE.cms

MD5 c805b79723301a5638c2372262140005
SHA1 5ec38440c84db57a379ab50e9247b15b5d8730df
SHA256 b427647b23f4369bca70a744a7ba6fb803f0cd28074691e7a004c3513e981e47
SHA512 3affa6ee07aa2d1473715a8c932acd7c924c1f2451311d048bc081326302856b037b6f917cd41e68269120c9abbac499afbd39143c1329de3aa1116158b503bf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9F1DE781-7D89-43ad-ACE2-EB9A604E2D65.cms

MD5 18116f1b09efb0803ce0e669196b14e3
SHA1 5fd22fef1bd1915721434bef764afd2c01565324
SHA256 a0c3e21d6f89136242e1f1f651e410926b3b21092c732c0627acfd9381d08beb
SHA512 6ec582c6f96ca0a18dd8c1e19f0a47aa574543b093958ff119c08e75b0b5cc1087f66a840d62b8df3d9b47c2a145570b225bb37ef3c4aa2925c2c72e33fdee5e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C560E831-E167-46e3-9EFE-51805DD4823C.cms

MD5 8eb70b82605057f7599c705b82376c11
SHA1 016e0af94dc723597fb9d052bf8d56b80564b1c5
SHA256 62aa9a79b9b28735f2d6aa507791b4dd3a5c176bc62be05ec5800ad7d618a00c
SHA512 4f7494065da5dc814772476426cad1ae7a8f6e294cf12c48e4bea8e7b3f56a4996e49ff1305283459b328479ae914e6081ff60424e0e2b5e421d823a2262524b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\176B6881-AD08-4067-820D-7DFB44F8AC2F.cms

MD5 98b9d585f66c1a20427f2b7a06408f50
SHA1 7d3bb04a28a265f9f6a73d07ed72b9f1a0e95cfa
SHA256 5a8821eeff8c070178edb23af38499ba0fd3e11ab164b2b3bc8318441bc58842
SHA512 42ace33e87770219c2ea1e9c19e469e4fd77882c6c5360faccbced194267908f785a21900da3d11c3e4a9e092b39dc7dd8d4e4080b641f224a50b5bd8f9c14b5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\95CB088D-0C7C-40f5-890C-FAD6074E32A5.cms

MD5 754496b9e506b400b767b1c374d41004
SHA1 e8bb9cabefd2ba3a545bba26b0e72e8596609a55
SHA256 9c8c7affd2017748bf8b29b64ffa0eaccd3d2da89860441ee534ebe1c44e1e31
SHA512 29eda333b6d44cbb26267f04c36aaa31c8d5292691e25f0c2a8097dbc71a4f9bedc111510ecff23ca192bec3759fd5c0ee82d83607585165e2229ec55a1a943f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\21704345-BE23-4703-A06F-75884E5D4DFE.cms

MD5 645d5e999b7c0467e059b621fe0ff62e
SHA1 34fb3a29f2445e2243274d150faf3babc75f6934
SHA256 aaaa27cb4946746fcb0a9eec0872881b5280801909a15c086d2cbd46b7045805
SHA512 f690f189a005876d3be152b68c785545206fddbf7a335f1c01d1e38e29712b87c5d815fb3f8f32a366b00d9e1296b4620a8948b0f17a70c73b029c4f4c562029

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B292CDBB-ED48-412e-975A-518EF6FE7AEE.cms

MD5 63543f7df2cd6c13c83b025ff81fd854
SHA1 dcefa190478539c8bf0592beb5c3c611c1959d57
SHA256 1b94a5c53ee5fa5d2b3ca8998638aeb8ecaded70355b7620dbfcdb5e4ac644e4
SHA512 cf148a8485a026d1f1742145b5219ca50c5fc61b2995841cbdab9456f0c5cbfefc2d1368ba3d8119fa7379f18525cc7bf98ee102503e55e8175f5e58ce8b0eda

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AD76FDFF-655F-46c6-AF50-CF47722DAED0.cms

MD5 38f63c48d39cbf26a71324e0663dc27c
SHA1 7ca1ec1ad40b48878d0f8a7da08e406f16b5234c
SHA256 6c632c4408d48d7dccf8f650fbbb2b56c8a447d21bc9b3c3a7f454c6c2ddfb8f
SHA512 31d8787a52e8fc6c164f840383f5ea44673d1be5bcf2568db4b0607d2a5adf337fbf0c1108de7e227ae1de2fc70b3b9e9c33d45777883e10c20d5fccc22d1a76

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F4415DBB-2105-4124-B75B-E724EC80B47F.cms

MD5 acfc7c0b59d76044367ae137a7384cb8
SHA1 bc80d183503b09f46572110f1daabf95048eae00
SHA256 145edccbd47001aa90f927a1659ab97e82dc0b046fcbc41c09a84e84ed2a0e46
SHA512 bd14e543a093ec9c672dfbef91c7d6c7c44beacd8e4f29720db40dda3ad4a231d6cb3ec2bfb7375e11f17149639b36ea99cc49cee36c4aff00a3d969935ff154

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4BE2BD2F-7977-4d28-B0E9-4202AA3A6A4E.cms

MD5 aa262642a76a38338b3ebb4a9de41eba
SHA1 89797f22f3d0a1e019a40108cdaadea4d05b1a2d
SHA256 25f7d9c8ec21c95135c2420fdcaa3dcc212e2fbd958d7a70c093866fde9df4a9
SHA512 8efd99ea688d0072b2679def5f53eb5f923551f83d8a78e0ad28eee264aab46db4a9cd3661951ba09db058d3334bb3a3892e530e2407e3beedbb402c61a9512d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\37D34D3F-BB29-447e-AA1C-6398CCEDF95E.cms

MD5 68e6535577433dab10a9aa2c9d68d3ca
SHA1 453ce58a0993307711cf174c8fdeeae0c66ca4ff
SHA256 a488973e2cb67d4853b35bd9ab0d5dbe450a7da83f7b52269f805c11fdb05717
SHA512 9f28a73798c96db5b870530fbe4c3efc40dffb33ef031cd2ba8736dd03ea84348502523415c1e057d40e75b548c9bddb3d522abc8114349d5b35d61df46c6585

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FA2999AB-FCF9-4019-81C1-31FAD762F77C.cms

MD5 1bb51af7ba06f7c811412be4f08d3390
SHA1 684dd90d398303453d6b7aecfac81aad1996fa4e
SHA256 7551a7e67d5d61002a96d2a878c736f252081063148a388af3617d507aec79a2
SHA512 db978b1f72641748f06f4a0cef64d3c887c5002854534282927d56e68eca93c4d6e647619aa646f0ea8388e9bd2c9c7efe14f701150720947cf45400457a693e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8ADA72F9-8CEE-4cfd-BC1D-6F95E984A483.cms

MD5 c44bd9106dd86f5de8d61dba2dd44670
SHA1 cd1ea0d6d10e951b7489a8b3160f9306c4589298
SHA256 3623140cd39fde6317cf612f859a7015686e7135334be5c7832bc30ffe0d9c75
SHA512 fd5fb6b0450f1bb2ec67cedb0023dfa937ed5cf5acf80e36bab79449c6a3ce3916be66ee97d6367a9f8e05bbdd382bf3d1909d3a181b0d26754bc79b4b60b3e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2BCE9E32-D806-46d0-A866-3ADAFAFDD7C1.le

MD5 5861395c9f46c6d44a09fd1658d9bf85
SHA1 96e79c577d33c34868b68c1c856d53148e5556b5
SHA256 65cb25ae43e66275275205b1bf6562684a5cab6d67eefbb50367e55b1d63d0d3
SHA512 e5509b1ace6e8aac9c1eb2f11f5e90c79c2018f35162b8501a54be7cbb53da4d73552750f30f8b39eeb25909836866fb1faded8085cb6ac06f66ae3211d63ef7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6D7919B8-97B8-4f48-9B30-9CADF2B499CA.cms

MD5 54657ebcbdc19cba1959877413cd41d4
SHA1 f122a1e0efa5c863a38692ba9c7b5d47036db9d7
SHA256 0631f202adf4ea4a68fadd72251c13abea3e2821e5131da604bdf8adca4c8e8d
SHA512 0eb2e14aedaa467435c0ce5b5ab7d531650235a43cac4f672c9118e0f9fd928205c5762d79ac48a1636592b39bd7c3197d60f1c8f632fc22844ba436ace7c0ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E6124220-0C61-4544-98BF-332DB0F30908.cms

MD5 1b41ff35f4922c23eaa282ee9a946e07
SHA1 5dbf0098c3007005b2ef3074606ece2c87d461f3
SHA256 02ba9173f43408b299744f264c7698014fa2ab3991b9cc00d9e8a3f4cce8388a
SHA512 28ffc12e257463b47bd9f23b441a4b1ab9bf5c8c679ddc6ce6e2079644ee6f47e73697ce980422caa36f03935cbddf65754e28daefc0cb6ac6671cd288a236b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E307A426-C982-405e-86B4-669D3E411802.cms

MD5 beb996aab7bbdd1ba23b528b95110009
SHA1 a6f5ae58debca5cb7c57f369ca65d83b2b9274f0
SHA256 08352e4430f6121afef735c051ddfa47e551393117d29bdcb7830f280f31aae6
SHA512 48bcd73357212830ef6d1ab1b54e656afc654c3ae810f9d468cb7fcc4f8dbbfa3119866e0734b3599415ba9b635948f0cc983d7e4dce7f964a179f77f3eb61da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\4C4F2469-356F-4f9c-B3DE-6ADB20769983.cms

MD5 d93d387ed8dca4f99f8de18e9ddfe2b6
SHA1 cdb700cfd45d3ec80a39c0ec788e5a408082593f
SHA256 0c6580a8154ea63d20de2484ed846d4dd40eb00b35386424cc3e544d6fa6d9c6
SHA512 f63f617f3b92e152c7323b3c65103f1563467b5d83e8b74661fc757bed363a17026d0e93e8883b3169abc1109c8346e642e5c9ef39852e93fc4cc54ad13205d4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\DB48882F-682C-4ac8-AAF2-438E47404BDB.cms

MD5 9b7eabe0ca407b1f33e1f616b0d7194f
SHA1 b948016a667d16d8c7770e1a77eb2f411dd51c3c
SHA256 ade581fc0b3ea7b76808bb10e54ab8bdfefd30a377f6b050540824703a31f91e
SHA512 331108ff7b7aed42377eb88ce6cadb5fb47bf304abf7f7cb848ae0b377060c9354c05cb46bcc2de0c4396898b756440dd7e2e069b025cf9265128376d06b7231

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A0A809B5-B381-416d-9DD3-6824D26B74B1.cms

MD5 805fd543858bd198bd311b84467ed913
SHA1 c1597de1f380ffb0ac859ff9dafb56416c4ddeb1
SHA256 a4674e610924536758462a0490d1322f96309e7f10f9e87241cc76d13307e325
SHA512 44a41c9032162d85ee7aa85774b2e8bc01a871e1678a54e5179c2b73ebd7b4da27c5f28b9cfa5c63294914cb411fc67257e5373b5f647c580df9a0253cc30a1a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A883D702-0FFA-4236-ADB7-E0986004EC09.cms

MD5 97a634f14518275b5030528c01807957
SHA1 58d6d7e39cadf23e74b20c8997de3c7a8c426a18
SHA256 76ec7e42fb510dc65bf87cdcaa30fec215c2505f078241fb25ec2f53675a5345
SHA512 2feea29b0ee762af1a62a5b6770ca13026151e73a7184384be983d43b6223ec19ec79cc9cc023e427af5c5d15c15c774eef4dbd7b31c0c093c211f46aeb06269

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\72DAFC80-5562-4da1-A2FF-9B1C493D2F3F.le

MD5 eb310ad62870b96f0e0d5bec19e04644
SHA1 bddbd29184416fe002b2124bc5fdfbac7d8bdf36
SHA256 d2b733bbe8c30fdc8d6f7cde7853bb75bdab95e23d3ca584dc7945decc844d08
SHA512 18c2c92dc208ed16bdd286134b977cb09f4b091140582862bb52018a4c8cc8b5c02a37b0a54a6d99c25c43398b48bfa8b065fbda33e21f483a2c909900608495

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D687C3CA-2BEF-4567-93E7-71181DE53341.le

MD5 50fcf5dca58d158954eb85c1d98e02d0
SHA1 8d114bad648a48f1148504b93b9d83560cc20d33
SHA256 506e714917d5627cbcaf9fa9ca9f44fe3a618304ea2b66cb8596bd094937176d
SHA512 45a6e0cd7ec129d628ff068f037c5608efbb56bf269a9b16217b08dfc2f452e750737fe80c823a8f82af3bff5fba809c366cc74225ed4835f793e40889b6bfe3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\EDB0237B-E183-4281-9D82-0D56B005C01D.le

MD5 81123d1a3c3c26c23044e0778ec17880
SHA1 fe42221f8c9b9d58364e31a6a181c2ca4fa433b4
SHA256 f9aa3b8045af6dd6ebf501956604c526c9829b806263ac999c3b1a2068acb10d
SHA512 a1f0dccc8676e04a16f79f1cb85efedfa955970ef1343c5feedb16573795d961b2bcc1cfb109c8bd4d21960189d97e62b6b17b679c4b2e341c8a1ffaf965cb97

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\44C0EB89-A9C3-4ca5-A388-E731B5A76EEF.le

MD5 b2d64ba08c3a1bc131e7971720fe71e3
SHA1 bcf8c74ef5005f3789a076f283c19e4e23e92b44
SHA256 1a7a3fa5f6c1be0d945f3f70a016ba14a9fb8a058f5d9cfdbda8ca840be90524
SHA512 072120fbfd9856583070d1faf2d6b98ef388d47dea9ae9d92d073f860e0989c438ddbcbf03dd3bf92b91c2706580ae894f995ee8288fe005dcf837c0c4c6e84d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B0E83B5-5527-47ec-9F8A-63DA9052C1D8.le

MD5 ff87b08b169d46bd36c31e1094451eeb
SHA1 55ed77967132cc856f81d2a1ce37aa6016daec6a
SHA256 387e4764dd187978476e8f04164fa3ba5f0e21d2770c6c9f8e39e79b9b87546e
SHA512 ba05d0530a88506866d74698fc9fed296821b6d6a020cdddec4e396f2064dea397fea8c4228a5649dda62a903cf2989a1015bf2cc5dae44dfe2112741e87b460

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\DDA562EB-A75F-4393-887A-41B828708F92.le

MD5 a6da08747480469a22537246d569e961
SHA1 f33093f30468ae2533d6b8b8cda6641d5bce609b
SHA256 0f5efe548518ed31d9148a392d679ebf1aba63e6a5a014fdd6359c7488621f6a
SHA512 d73ea8ba26e5a5cf19ce04779f412bb6051c0f9158ac6974b53f317cb2fdbf9f23ec19c9af7e964e05638d595ce4ea20c2378e84a5225ea37feaa0606e1e6569

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0E28968E-AFC7-44fc-9A88-63A8605923BC.le

MD5 a35745db77b987d236e38811feb356f3
SHA1 9e5f6107143d775b04a503fb821bd44a2299a670
SHA256 a3c9a79e2a36239b34bdf86227c5d80a7314efca6a04bc8284d0b91ce3a7291c
SHA512 a5f43e6e08ae2e087a76400196c77ad415fdecd5b67ea421f4ad0db66ef81ea3a588e7f3869b2df3294e96982ed82a5ec78a364e033e2a5d76e070d01c4f14be

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9CEB525-1475-412d-BB1A-297C32438423.le

MD5 1d1ffc49a6d10745c951e51bd572b697
SHA1 0f60840efed1c4e0902ec2430d4f58e143b46402
SHA256 7183bc8bd90f5dbdb50e2bd48f0e9804db3b21516c52a2b8bd6163f865d5b18e
SHA512 34fc2435e8f9dd3b740e646af8934f2480298502e1af355270428fa16369f1629e2d9f2bf0e66ed534186e625d7d32ddf16f62d660b634108be3f3de16e78ffc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8A66600A-9B5A-4eeb-A208-54EDBE7331E1.le

MD5 7b09d0a0a2c9352c57c8955021cd3972
SHA1 0bbba5e825b04ea3caf2f5c80ef402410c1835a4
SHA256 9404143b838648ca6d8e0243de89d4f798ea878d5f01ad10465f2e7930c2f62e
SHA512 5a71215b718da5ee1caecca3f239fa698518bae178dceb4923818284d8effc392c4d1f57788bb9fa43b43546fe9351a372cbe67996b2f2ba1c009598e8859ee6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9325F87C-DECE-435f-B5D9-BB9734980B9D.le

MD5 ba63c5d10759200142ca73b3fde3da17
SHA1 55324f8549bf7e6842e90c6ebb12b73345001304
SHA256 fee1bb391fe447400b1ae0ebe31d92ee559eaed2ca1da6adef6d9cabba247e01
SHA512 1c5c2b5a97dba862ccc344c89ea392a33bf6d551ead4c9109b0a548451ff9a0ad52a2e143b3f8c8fdbaf1e0214da6e5e27704e2d59236c08c7dc29374bee8940

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B97A51F-F58F-4f22-BEA4-B37629DA87BF.le

MD5 b8804785844a6feab35e41b9ffc714af
SHA1 6956214d375329986f770f41dae871eab35acda5
SHA256 92f27c93af19e9e9f617da32c014343d29ac42fb3c18b025ea9d94cf768432fe
SHA512 c4377f7d7a0d646be3c6faf2c4d0d0e4f00eec8977f3305b502ffa2b74f8cd1272ef441ac44669dc30d738a8a45681063fbb88b906b3cd77ad57bd2c180a6f69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6561D3B-0345-4932-AAAD-048E8F3AC68E.le

MD5 0ee60c53e0e02890061f55413d2576ec
SHA1 fa6f487d7bf7956e868c06d0b2229a082ec55d48
SHA256 c7e5a57259da768f0510fab69acc86c76e53120cf838cd5ebf02529cda7b20fc
SHA512 ab8f564adbd7d6c9e7e546e7fc3a27b5f93f9d46edbfdd297379d43714dcce19a2618f52a6aa6d109d22bc32749e41d0b992779b0b055d63cd0c37007e2c15da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\08747B19-C8BC-4c49-AF8B-F4C8E2FE72B8.le

MD5 1fb84d2306deeeb29970a71b79f2b814
SHA1 3219cda048958ba960e2ce523069662d1c386b58
SHA256 03865775b678b7ea638c187fdf312cbc1ac63740255faf869808366dca1fba17
SHA512 d5860d7d5b43937867003bfaedbc2af67c50c09baad30f28649e16f91a703eb369094c8ccbe26d1ac2cbef6ae5676cd560e40a9634d2984f611eb5f86fea2edd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A4F6A61F-5924-4e0b-9E74-85B1C7445048.le

MD5 abd8b28426e1121901b621d873db5728
SHA1 67908ab60fddfcad06e37468322d0540c2311cd1
SHA256 24978f0a6b4aed31b115e7d2b7315d82b9c0729d7daa811679cf727d156bff55
SHA512 a607ec5e2ebac32a2a4fc80969de711a64ccec9729193c11cf985250d688ded2f2edfc50c6f9a75c2b3757da989b6ee1382c93eadc4bb9cfb0bbc30aa22bea3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\E228A719-C5F1-41f2-A6F6-8F14D8960C23.le

MD5 e8de3a80077f8d0e06e4036bcfeb3ebe
SHA1 f61fbf6b185480c4f9496602eccc6166ca7a1ea5
SHA256 5ed79b18d3ea10189bb8791e7f2c44d5fd3b7a50755ae6c39ecf423992a8ed14
SHA512 25ae7cb7b717b56d854fe96a8f2b614c2902a50c6dd92e3ae9e4713c842d1d0fc3b17b536196dbeec270ef734d9e9bbc0ba8ebb9a0ccfe411b8b210584b3aa0f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\56F81D4E-9C2E-4cdd-ADCE-6B2242A44013.le

MD5 26b5126077ced1224014bb95713476da
SHA1 5c2964c5608399996b2834fcb3c1c71899539538
SHA256 c8a2a4eb7493007754facca7523e3b360d47d25c47ff04a9724177139dc338e5
SHA512 6ca3b1b882326dc4c3e5d75360f2f73b233f5d02e957cc4908ba35e7357957f1417bce699be237db0daa11c9be264e78d306b1c5b96667445347b5cc61a14be1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7867893D-03E4-46dc-9691-862DACAE2575.le

MD5 5d75608ad17f04a2ba96e70386e7d73c
SHA1 e422e332bd16c81b379df89c121387eed2d56baa
SHA256 13b76f13d0101faf1bb167e4e33a20f5fb865b477cfb6bd6df32fb20cf3c24d2
SHA512 7fd7d8977e52f19a0ce1790b38cefd14e5d36622d716e02caeb91db505f7df0e72c2a6a804c58808011a578ed6d608c932846c3dff39f79db10b23df4d4f6b47

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\415B09D0-0B22-4cbd-BC53-A5A9B88019AC.le

MD5 53e2dfde1cb02341459e3bc6129b504a
SHA1 7e7b3610e15453b55cb197cda9aac1e349764dcc
SHA256 ece6cd5e6bc717829913d2cc51fdc8f6e267bc25d2e3ef7fefaa99cf06d3f465
SHA512 866e84d57bbda692223b879a64e86d99ce03a9dbb75ebbdbc4183153b14194b8326e0acdf6695d0290898fcf18c4ac8945da6091f8dd2e3673722150f36a425b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3C15E295-3CF3-4f81-8EFD-83CB99088C10.le

MD5 983d6bb25304d21676f43f873f5f673a
SHA1 b5602ae72c0ee1d49218ca6921e7aa334f4a6718
SHA256 3706b6740636552700ee5eafd458f231af3fce5959f6b6d3ae3bf1b38d978581
SHA512 748db7a7cd9110e622079ae6e3b9df396736ae2aef5b76031dc618a5d4e8ffa0599ba38aa34540a5abda780d1607ea02786149598123ac2f1558600aed398151

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A7593B2E-C0B6-432e-97B7-D05A1BEACE06.le

MD5 b519cd7d69746eb871c9b3f067043ed6
SHA1 b96171d16fdf3b91711c7b2d7fbe589ddfda49d3
SHA256 1c64329fa0dad63b250ca09bb4a6f9f2aa8a2635c5911af4d89bc700ca53819b
SHA512 994aa4178d442d6732d90b4bfa8d3e45a6c4af660f6630e9f3128bd49c568b8e08d97483ca42e4a24bc472ca5b03f1f3383d41b33fc936e4910e3542e21ad42c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4C6552FC-B946-4308-801D-E759BBD0B857.le

MD5 fa4a5a2b9644d00937f634108640b18b
SHA1 4bd5dc1118546ecef71c54bbfadc31afee3f0ac3
SHA256 2f0169105acb13e3906d5945c708cb7966a1bedaf7efc5068535003430391723
SHA512 806ce9699173dce76c568e44353cdcc074807af69e7a2c744e5186be5628bbc775f8cff3e61d05e9af66633eaa1749fa14f3122e49211794cff883e600322ff6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\92801CEC-6958-4dc4-A820-088A03C16124.le

MD5 e9a232d17f31f30e6bcf9e38ca4aa59c
SHA1 b1fcc9003d8c771664050434a666103ff0b84c62
SHA256 de320720498f7781831af3681333ae273fa0e201ca37de1cbc5c8914aba4a799
SHA512 b129082f9c2b0d7039eca6eda3cdd733bb695011cefbc005d4ce654fdc2c55899d0047294e952a063a8870e608c4e3c2ecc3302bd3c10ccad9c86e5482bacf3e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1794025C-C02E-4937-AA4E-1123B2636928.le

MD5 7a1a02f8e3c821f8f5125b4c0e127d0a
SHA1 9da9debc6bb0b15274e74d225909d00319ce41cf
SHA256 932813e1c39a34a28792d8f979422370f4abe66a956895ead252a4ff3ae54026
SHA512 d8210b0d5ca3acc3bc1210e85e9600b5eb8c334edfd0f476f846c4bd32825a2aec93de8f6cee67e35c21180ed15822cd05cdd3b9e61c8464c78b12fc1795ef0f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA70147F-F645-4326-AB5B-D21466F4ADC0.le

MD5 91308e2b3e86fa1e0e21488e260ce797
SHA1 e5432a185a0a94dbb445001e3acf352a816b7b52
SHA256 384d052e82c1e6a2f334a20e3f26bf2cab9d785a14b563d2c4738f07a3766a4f
SHA512 60eeff3711ccf29188f4d6b0efc813cd81d11db943987720f3046eb280e9a9d05529bd2157065b90d3b5fbc810b022d828b625a17d803ec12f6521c56a55bb8b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A7117973-E5C5-4fab-A0CF-1C7D08981467.le

MD5 2981a7fe660b233a7fa448d7b5ae6ebc
SHA1 2141875425af4d4fe51ec646952977b992a7ef21
SHA256 41c8732f4e9e3facc924a81f03b49b3f69d584c49ff0fc11687716f8be72622a
SHA512 bd2834c73474df7c7e7f73991441d596bb79ab8487b4afda4fb1cf1a8fd572b1db8a35edb39b2c26097fe7e62a09a9317e748c19a3b0e9de920b096634259c35

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\152F294E-E2F1-4e31-BF58-44B7F574A674.le

MD5 ae12fef925c02f26bf95d9f773d74113
SHA1 4df63791a69cb2b4c19d57131ccecf218f7a142a
SHA256 8ca2c88f14d60ac56adefb1009419ba6620993adc8677fefa57eb59c96c0e625
SHA512 aedd633e2a8043d4c1a06993d757403f50a68af5931f540e37c1d2c54999ee1cdb0fe661519c1cba58a41fd824f327f255671d00dbc777b99fef01069d2fc1b1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9021A9A-311D-4a9f-993A-D0E5B1469E27.le

MD5 5d50905ca2474d91f0cf620ef2de948a
SHA1 9d974024ae0352c367c3fa058f5a556eba6a13d8
SHA256 031b84601bcacfd213be0a029d9c22430b62fef345fd2571661f3b915d387864
SHA512 34416079190a82a57ccc83dfee5b3efd0cfa2502d29e510e2b130495fbc2b2ed6f47135f5fa2fe85cb125305f7d366d03ee48e345664f08d99364353a8aa69ec

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\AF4076A4-D303-4eed-B206-6D6A1EEA21FA.le

MD5 9a80012eb2f0c444514a12340ffb2b53
SHA1 37bcb51b500aa8f65b574b8ecc1c30e8d1abf521
SHA256 26ce554abe01841ad7ac56c43422e431a49f49551933b6bec2db48d38af20b0c
SHA512 af026d3a7726f44945a1be4a9625ae23b761d6075af80f8c86a82a143ec411c5cd2db3b45ec9f3309e49c34617a9fcb569f42801a406f4a3bee36f4717a6bfa4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5EE2ED5D-691B-4682-93E6-2B6D45C6BD68.le

MD5 b9f3b991c7068198065823a1df62c2a3
SHA1 b0e0560defb31987aab57335850471c23327d658
SHA256 a0ea2562a246f9e56a0d7adcacf2c889ce42515a0da423610971bcd3a069248e
SHA512 0167fb6deea519e78e4d9d965e545ebd17a0ed51e5dc9d8b6ac9f4508fa847ff548e7616cdb0af61a1402020857f5173c39c89006bbdd7211d3aeaa58b3cfdd3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FBF49CC5-731C-4010-890D-6D82E75B18C8.le

MD5 c7a8efe1195940c25f1f460b15d65dbd
SHA1 b6967d1f1dc0371eb06a8beceb4798e286f45372
SHA256 53cc7585065bf2fcc82b4a13d2a0667d94a08a4b76e76b22d7129e607f641522
SHA512 1ffa7ba11aa5713877ee41c1873dccc1f9c3a56bc64182fe38e5479ae01b3f53736c21d3358c13e35ad39bbf7f8a0ab5474b4470588d5590f2b25188c1ee3893

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83CD281F-78CD-4c9e-B14A-8AB2B05292CC.le

MD5 c7a2e4530e2cd07716ec6980c99579f3
SHA1 6a97c9d7aa6eacbf7356f79563c638560ba2d2d3
SHA256 e3ee45ba5b4604a85e2c65420cd93beaddba16f861736a6ebf02d47dba69ad57
SHA512 31f4e6b58476259cc5e6c55656d6c06646892e42522961d601a5540681c758440dedaa5b23e96a595f0e4d830485814ebc86f5e18a132fd1b0717c6e93d31f69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7DC1DC8D-E428-4da4-90D1-43F6E96B5A6A.le

MD5 92f0f30a8d4e346f16f936f34f93d0b1
SHA1 bdc0dbba5f61078cfb1981da60761b4968e44e90
SHA256 2ea9a376c6f92f9ea5fdeb1b2d182cbc4c2c1cf527f330b5e87562149dc0f071
SHA512 be8334a83f9a199b38fbfb617b6ebd4a3d7507348f31d2a9c9757c0281a38c0a04d890c8bc7e7700573ea2563fdda9a4d650a0a47702b19ee4c60482290d6631

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9074D2C-9995-4b07-AA7D-F9DBDFB3ABFE.le

MD5 fe921dca481f9990b91de9b3ddbddcf5
SHA1 55747cb7297c11d22f35b56b068a2d7937692968
SHA256 87dea65ee0bd5bf6bf3860269a954cf99cc3096678e37c26be03a7c52ed2f798
SHA512 cb4130bad6f6ef1c791fa17314075ed94278d1ba2ec73ddda8ab683b0f295ac582e89acf1e829372dff285b4ac97d03630211a6ca7e285510bf596bf46f0ee96

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\286E5C34-7EC4-470f-9BDC-D2B456161B66.le

MD5 b879c26106aa157dbe956692c9ec903e
SHA1 d7eb757ce53e04afeed2d3439216c497ca8c7b86
SHA256 a4da8385615268892cf2c3ff8b0b0c8b3b191f498da84ce7ef2439417d6e36c6
SHA512 32899d19c3c6adac85dc5cbbf663d3a1f9c0a7e7bbda27a47db2135bffe6b678503f2d3c9f65f68460e006dec121370e40fd7cb6db638276c97abfc5ed372c8b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\66B14E2F-6627-4671-A9B9-F1470B553FB9.le

MD5 e67e9b94f5e973f4149c36de416dccf9
SHA1 5d918c0215bae895dad2e9ddacec95bb572a709a
SHA256 77f916511968082226ace27c36e8f9911c3d30bd681cef1070fa6b29ee7a8df7
SHA512 3e085d6274c2900a31ebf846745b452aeb35f91ef9c61cdb77f2e1dd8b818e5ed41393f5c3837c1a334badf2cb59be2f5aa90d0f8e72b002813731f21a98f4db

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\16E57649-83E8-4e78-8EC5-CECB53EE8E36.le

MD5 2b99746131b6b5e82aa9e360ac6fffe7
SHA1 af45bd320c9b47568251d9e6fb3e9710bd79742f
SHA256 87e713c5ce493a4b3a6f00a9d76c6839e76809580816feba585a30c64a8d99bd
SHA512 2e902781d8c35390ca8def97f0ccf842c2ed6621f753499661bdef34e5fba7f53f24bee012e1a7db0f5a139e2742901468406e8b45ad1c2b46052bb681491ece

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5E597FE5-111D-4696-8295-D4B5F5DECEFE.le

MD5 b5f28db162dec58a158fdd4dd181d086
SHA1 3a9d8b6b0117b3c0741492da5e177435690fc2bc
SHA256 3cb51219ff35007a8212866fb6cb19bc0d3b1bda284fa182eda00d32d6222b43
SHA512 f70d1699df39e3f08cec757a46d6f3631bb0de56980e852a4f23aaef9fce235a0728d74e16132208fa842227eaf971de68d221e6207756dfce0e9cdfac6b8734

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6D18CA10-284D-4266-8113-37794E437543.le

MD5 224d49574c468b9d209bd151f6f4a724
SHA1 8984b3f33bd31a1640ca9c3b84253e4e5c26fdea
SHA256 34cc7e9dbc76daab98a84b48dd4c1e1cbfbe0e40af6fbd2cd859ea97a767d160
SHA512 1428e76ee22b48b18950e28f1306c5a6e46a7d187b6d403617a65d967a58aef1eb0c144635e687d1a7f5af1936fd44f0bebc9ecb2d2accc85638899fb24fc530

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\729C0435-D1BB-4816-80F4-DDBA9AC6A05E.le

MD5 98eb591909d6748967e07e8c797aef4c
SHA1 20db3cb2421fa5f357295d426f7619168836e60a
SHA256 02c2814f2363a5b6227803728b8a92353971cc5b4ec3395519426bb9eacd5908
SHA512 a73652ad11cf83741585379023b7d30e823c8f7a1271e3473a66841e7579510f7e37824accde8fa49391bdae196b859f97633aba54912fc145376fe423f5c882

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\14BC0DEE-E7DA-4896-873D-38CA669D34C6.le

MD5 77743e61db9d8cc3de198ed81d2c9b03
SHA1 acf7ae1b30866e1ad8fa0fc3b174fe5d6a09bbb4
SHA256 f70196ead91953f073c5393688ce933c668b02ef5611f21adf05cdc2b925ec0c
SHA512 5ffa552f795129e69117158cc368b9b04d23cbb714430dcd31459585f949c43d6e7e51964948b703bd8660d7b6fab2d4be426a63ea57802f112cea7f03530645

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\142030C6-F69C-4474-9444-AACC51FE4496.le

MD5 74919ef1081d582561159b378c4e03ad
SHA1 9d2d159b4a52a360009d94fe5a59a50b84ea6737
SHA256 772a3954c3e875d55dd527454260b73bf59fe78661d74b63111181b1c2296b2f
SHA512 f49ad7bb42f3483dcd0eedf869bf36fcdd73fa8a37927ab77d4c3ec25f8a413611db716466be4e8ba3d5d367bedbafa25e278407638064edb2316e9338e6c85b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\41E19459-784C-4564-9C10-B6D9BA9C6E83.le

MD5 cf604ab8e358341600219a1b4ba62ece
SHA1 54c95a73cc4fd30e2d7eca78d97ddea05652bcf4
SHA256 3ffef1470af1206c95a1a4da1c3d3b13a47b46cc8646cc44acf8d4b992fb0ca7
SHA512 b92f3fd507596fdf5005c232a20d44904daced46a21f8c29a98a66eefc125a3edf5f637db083827bfb99d8686ec8a3907d3adf5f26349f975de6bc5185fb8385

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1BE39DA0-4161-4292-8B43-B626128B74C1.le

MD5 822602c9e625a34c34a4a96366bd2320
SHA1 e0c9b0666005fe14037f3157ef5d0cf1c7ffe916
SHA256 3ab30d4eea55f412d8e32d3bff7e6b1b5de13b8c6027267a2851451ecf2c59e5
SHA512 e5c56912924466a15a0ff13cdd664ced71bde6be7938f6b1dd1744148070693252b7e32bfbb8f1044759de65a65bf8b478dd00b3bb55eb427cb9e02bd67b1834

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BE88009D-16A3-4fcd-8BB9-99452AEA32BA.le

MD5 67454fbd35c13bb1b992e0b42284f55a
SHA1 930eafb7f68fc8edafd8e910f2aa3fe6d1e6917a
SHA256 ee7e11131d65f196f5c3b5354df8dfb8821ffb8d3be143349dd6a6aca78e1ddb
SHA512 caa7face59625c8a427a16e351f9e4efeaee9f5cd8df2d95a25bd0ca0a03118be8a230289515bb834a2ceb1db52c94c8f98deb289a27347e673a4e9d55d7a438

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FD73E2A2-1EAB-483e-AD9D-14C6BB21F05F.le

MD5 c00ff109087781a971b222a3f5c8cee0
SHA1 fda7c3626a8b28797993b335d979e00bbc608c57
SHA256 06c9ee6560fbd814229ab3bca37b68a18f51c6dd15ce2801ce18b4b7ef46796b
SHA512 31be9925b615f363821aaff0f3e9d3f31ad5c9c07d092b8a1b129f6fb2128608b18e15b301cc5e543a1d7249378eee6811f51a607a138be94a395729f937a0bd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2DAF69B8-FEFC-456a-B006-8F57C82EA421.le

MD5 18073995fe359084afa2cbadb1a390a6
SHA1 135717c1d86e3a09b1d739e57f627a0d14cf13cb
SHA256 8ff48802aaf6071224cdc3eaa9661e741070f2dd3e1a1acea3f0bd88434b8866
SHA512 1851076811249f2d626b9004d8ca5acfe7b2cc3d58dceca4cbabd35c175bca334bcd1f936cda409e3282798cefe8ab135c77451906de648c77d5142b78b89373

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B193D50-EF01-4617-8E7C-8552290EDE76.le

MD5 848a243e2216c601b67099d50fb1f141
SHA1 25966f3745814caf85220574bf103c5ad3170176
SHA256 5d939cfc6e7b88fca7c878ffabbdf96041581f61f3e3531f1c5ab7656fe43223
SHA512 aeb8b1d768bac24262815e943915e0b60cc8470bd27bcfcae49d80ccaeeed052707422c3ed9f7d806899678c005420248d641bd9f9d9aee1c420abe23e194da5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA163A21-86B3-45ba-A705-427E1956FC46.le

MD5 b0b4337b3360e1b2bb0c073836120d4e
SHA1 8cd19292bb26756d79bb85943fc697b6eca208cf
SHA256 2bb8d9f95a6a7adc7f2bdafe9ce18b67a2a9b49d0458d32aa0e5c27f5135e17a
SHA512 989876895121ec1ce36061a552a59d65499332ad506d0ff494dab478611683e702be9ada343cf2cce0f82867cfdfdfa04b36eb14542f242d7374b7024fd0ce78

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5AF46B12-DE42-4b00-BE66-B2F07626C0BC.le

MD5 e4805cb84fd46dec44f60ed4d00a098b
SHA1 f19fd00f395a7dcd4b80f36e2e636a4a691a387a
SHA256 9ea354a58db240b0acf41bb84759ad3b3a42087333db0be209386d990408d15d
SHA512 5ad9ed02ff120954fce9765d05d206fa6a45ae55acf6dbfd0923ccfa1175680bb6cb0a9ce5deab3f42acabf57f12aa990b5a41c5b938528c89495f8c97c676a1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A4697BA0-A8A6-489a-AEA8-DF6AFE9469E4.le

MD5 131112023f9282865191ff9c0a4c9325
SHA1 98df3911a992546ef39ed52cf2d2f6e820738fa4
SHA256 65dbc13ad1f6ef3a8bda9dfdf6d199092b22ba443d09a6ca51eb733e1bdb20e3
SHA512 5fe24f608a29512621aaa573f892cb150fa8657eaaa122bd62af6ef492097f9f6e22e369b3c20ce2366cbbf6db49e633e85ae05253e3e393d494b1838c3d567d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A3A23C09-8ACF-45a7-96FD-796EFCDE3FB6.le

MD5 2c0fbdaf66b5eb104f31b80e6d07e560
SHA1 75e84cc789a5d566a49a60900fe3c421851ec4cc
SHA256 1ded031ac80fe63db68035e81139783f48c16767a1c883c9310c73e184a6f597
SHA512 2981b1933235c4d7357a5d5a3f275fd48bbb6dfaef2fec2f248e3b5ec9a168e9ef3537410cc3f19b1896411a12ae324c9cd31d7884511777286271ef7cbe7e93

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\406931D7-3D67-4d0d-AB2C-67DD6B4DFD58.le

MD5 c2c1f6ca5553fa6b092800533f0a6bd7
SHA1 157453ba5bd9db8358b271d9dab80c800be6cddb
SHA256 56d943c4acd1a289ed8a6ef3c1d44cc4a81d1aaad3211d9bd29cbd2e4d495ed7
SHA512 3682377ffcdffe244b89ab86e8e8779e22f078318da2656fec82ee14f4b7a7b3abd1561099486f364576b44986d1a485a3b5fd89c65e1d483dc83c5ba2ed059e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\037C2AFB-0D92-4941-B026-FC61E4024181.le

MD5 125c0498eab78dea1d5b28a34c9aee25
SHA1 49f1e6195f2601970e153f4525ee1fbad6cea70d
SHA256 4b98398f0f47c3a7c8c635f784cfd1e4a4bd268854a0d4b59a3dfb2e708488fe
SHA512 5437f1be7be39386d907a844bfb8ac085cb0399ee6aa7b0377ca40fb7bdef5782e5c5ac5e46268d9836abbb5909da777612bf20dbc871dfc2efa0e1338f47555

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7710161F-D779-4d9d-AE4E-8F6E5618C82A.le

MD5 b13cf37e98fd5e14edc3399aedaf1a54
SHA1 3205db0d0fdc8bcc601900e53d641c16d55c4422
SHA256 3291af7057dfc1bfee126f84c25af491e265806a1e72707d8de2a76a39bbe3e3
SHA512 48ef5821222b56ba7965b48a7324030e782349aafad1af5645662ca859711f1ef3c39cf85a7bbd001cd8e66e49367c80e51779e29c066e3814a89bb9b8ee9430

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\86F9A695-FD6F-4991-ADDE-D18DE8E982D9.le

MD5 7c1811d8bff0d7f20d6c6986b5ae371d
SHA1 33bfe6aa83c97228a0729c502ec40792d22a46f4
SHA256 5ea77742dc6f4ce246bbeefb20b6636cb4eccdb17eb76fb0a5d6c6de60aa1829
SHA512 38116fe9677de16df70828d75f222addddfe76830b5f78300bda7f4148fb21214349b6df461adc43eb5fcf0fc429ce805d563d60c0eed4be3f3ed55bd38522cc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\25EB4826-0858-4e48-BCF0-41813AE9DB23.le

MD5 bdaf9fb0889868d6f13f1dde1ef21623
SHA1 231c113f8cfae90e8d5227dfdcd8328b479c337d
SHA256 684ace39dfdbfe16c9652b3781008574b1ab4b76c843a70dc849d12fc258d967
SHA512 b6188c40d8aeaaa49bb5bd625cc6e55334d2802af9eea3c9195b0728d595cc83622fb60dfccdb44ddc994509bc7e146f5b332d74224d13864f29e54530dddb69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\90F1DFED-5C11-438a-A835-74C6E3403524.le

MD5 18e253bafdcd90c578996eb67f112677
SHA1 70c2e9ca1715f4f9b85f3547557e9f4280fe394d
SHA256 bc955c207040b2a8cad4cf3fc9e69e714f1df9677412cf89c971a9d104894b1e
SHA512 7100280c8e70eda1c07182c4ee09a85872540a267e94856acb5649a406eeae1580006858deee1f19f03b0fc86e8b56c9e3197c8b6863548f4c79eff05eb86b74

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FEB949EE-7491-45ea-8D8E-948295DB80EA.le

MD5 c7936e6dea08676b7454f12765f394d9
SHA1 cac4c8dd466d48e0f807d4bd2c467342988ba539
SHA256 523f30dfc16358441c33c23eacefb194c75b0c1ff051fe55232407398904f239
SHA512 a23ec357b1cf26b8408f09866ad50eb61634f8488333cfd323d2e225b89612daf420e13a95ed5946c6ab1548ae0c5b4480fb60dde9db1ae794821a81f539ff97

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\45545AC4-B450-4ed5-918D-6AD5F5969F29.le

MD5 2608781a13a83d5d0679aad2d6e4e5d5
SHA1 9ca3daca30265325079f8b3d49d9b6a41111184d
SHA256 3d46cf39c193ac4f1b8f5d76cea80458e766373a3a5d9eecc3e93c00a9e697be
SHA512 59bf39b49adb2f85a92da44eab6efa2d30cacb8c3792977c09f82bc222e3adbb8bd3bc8b59995aeadbbffec81b29092b0550bbd10f05d23cb4f9d83f5fecae43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BB3D9CF2-7063-4b37-85B5-B8C9F38D819A.le

MD5 d0b17b0c8f09bf6ce5bbba02f7a99b6c
SHA1 24ae9ded9ded82cc5b2ee45dde404c4ebe997ceb
SHA256 c6c42d77a85e02cbb9ade969eab783622f9a50f738f1e996944abaee7af0c214
SHA512 e444c2df0e9a5e42bb439044ffd9729413af5d32fecb0fc721fed84fc6030fca2ffcb7d69f077b6af791faaba164b7a014d855092653d361db3c2ce96f256e55

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\5DC44DDE-914E-4090-9C21-6FA3E649B449.le

MD5 08c34f29efe2d5cf7f9b1f879d697705
SHA1 c6f47c47cda2d50ac1c0d432952241aa4e4c138b
SHA256 c1991727b405de6590cfd3ba4114371b2f5472a2ca02eee38509b87aca1bee43
SHA512 8d77dedbdcdfc396e0e8ce0841622b123515c744e50abd0d83d60add302a6437bc1b1d8be57bf63f128fbf5da530d74c15f7ab7cc4fab2a42edc201a4b4c7d65

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9E1D4237-22CA-46e2-8D51-A3945D107825.le

MD5 043dc940aed8ed333d488a73e41a1f01
SHA1 8947b186f34f79c03a2cb94568f8f273ad586fb8
SHA256 ba19ba1a1c0d7ae2d03dc497cbaf39744363e1be5836f62349c698b2d6927bb5
SHA512 9bdefec7c9a6e0cfec622d3542cfe64250d55cc8872853c12d0c27ad4bb009e76fb53219773bd2c1e228ebb4e6118e8adb1d64e37edceb2351404068a8d9c7d1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3504C1C0-6EC5-4b6d-A3E5-6A28A279A620.le

MD5 d95a835b710e229ed39e5d6a2766665a
SHA1 aa1e02b7d30e61daa8135746362cbb7c85d3c94d
SHA256 4f0bb369b2a6e60722215937da8420582bdaed848df0afb697c2a4eeb0d04049
SHA512 a4e58cde18468b70674da6763c8c0913293fd73acb6f967e945438c698caa4e2da2dd502571f86d453c7db9fb9691b185738c9f2c1c2f987027ffa91ec72213e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\65FF33CB-5FD5-4a72-B29A-DF62E6DC7311.le

MD5 847ad41d69691c675d08ac56021a190d
SHA1 d57a6113b605fd80ab617b13f21f7a4bad532413
SHA256 950ab129f429a11adf58ad0fc80b2ec4c9c75a23e118cba964865905109dbbd9
SHA512 ff4e5ed762647fab8c1cd13e3bac7a89f590638b2dd8f592b3e53665742652e9889560a22aa29fa3b1763bf4b0673131a9aa841f12f1622ddd170055f289c300

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4E18397D-19A4-419c-8DE7-34FE1DFB8634.le

MD5 13196ba7f1f01cf63cf33103f9330d26
SHA1 917b63190a53d016b03a85db2a61dbb70c3168fc
SHA256 c673dafd0c2d70c82976f4dc238c5d1de0bd7b5164b15dd6304fc693c9630511
SHA512 ef563952139aa16538c649e71fec39a0f10eeea00c567cebb715eb905e54a8315111c7adb4f5018be24d637584fa0c84a4c8d6d96e9c70929ee74fbb147190ba

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8201889D-2AE8-4bc0-BE08-899557795A45.le

MD5 5e3b2a9490ab676f5a48897ba8da229e
SHA1 13909ccf5749955eeef5adabed46cf32c6ad1ef6
SHA256 48df84521e4f35293b4f70b15824f0191741761ad5623dce158e0bd3888f1d91
SHA512 8e1ce8afbc364dc4117b66f9e3503bb797ba025a9779e5e73ed66f4f4f18730dbb825a2d1d60a6449903e9523bdaf0e9b07b418a49b36117a8eca813c1b3ea94

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\304110DE-00A4-4d4a-8A24-CAEA739A0303.le

MD5 e9a08c1d049367bb47a2c31de4f14127
SHA1 42b225de1c61d488949119d6168ba792be4f3ed9
SHA256 e37422ec042f56548054824c843995b09fbb582d6f5b759121b159f145fb511c
SHA512 8e28dab6565b33a31d5f55145ecd92eb1bdc58922da75463db0d2b7ed6c3077352a80cf41e67f237326b93a466d5ca936fb95b8d05d9acfe5291b1a436dd44ad

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\3651411A-6076-4586-B21F-F3BD42566630.le

MD5 b385d73f865fcfb710b40099566038f3
SHA1 533cbfb5573e5e1d522555d475c611924278315f
SHA256 3ceae5b3ab6066db304f909a66337c25ebad0a0cad394a29b2de85380fa12fcd
SHA512 2004a478055d5e74016200518a316ddc74551ed0f2c0013e9b30af4287bd52ccad94d9d0f4679e98f3168cf8e620ad4b19544635ceed2eecb41235fe28fb324f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\65F5A876-E4E1-4bd5-9543-781AC3DAC791.le

MD5 b473d062b4172576e0b469e205c6217e
SHA1 0d9aff501e2cad03bdfc340ef1844c3b4205dd79
SHA256 4db5d4e930deef030295ae48c9eef4c5b5adea9ca5a645e97a3928c47d4e89e0
SHA512 58f95cc4864e2fc949893d712d86428e88dc86393118471e80c5b0d9e34b54bcd92ed0cdcb241e160b046519876da75b0929a9d77b60106badf289fbb828d449

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2B229551-3D2C-4cae-AF77-5AFF1CE21CEB.le

MD5 17032e61aed795faaccb91ddfd2147cc
SHA1 099b6a8004d6635582cfcdcb4febaff27d9fa008
SHA256 6a642db8297c1dd19b1680c404e13f38be4e8a1c27edf6d1c4af3ea9bcc4c5e7
SHA512 8d835cda3576980259b9318a7c20ef1e44fd02dd1804a32e9c3a9e21dd5bc7d647a01cb02faba41cf36d15fc134d43ecfaf66e4bb5ae54da2741b907f1bdcd2d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1AD8F682-9629-4991-B7DB-E422C2FCA808.le

MD5 5c7e8d0dd2c194e7aab6a9a402544a08
SHA1 8b0232014304eedf4ddda136c6963ff01661e775
SHA256 4fd4c0a6283e1ce293e34e59c917f317b583176941af803168bb2b7aca142f88
SHA512 471b3c7ae7d6e5d7306da340a2789a1d20e366049aa0225716b01d51f3f31bbf310f795910839b2465d313c49f1477ffe70049f206bca311408687fb3ca36295

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C31BE9AC-D417-4572-B242-C3D592E02CE3.le

MD5 a75dc5836abc0f86773b82cdb6bdfa4e
SHA1 0653aca48134d94559532fb81150a75ff54bea1e
SHA256 606f38a5807ef9cf9b1f0bcc7609237e315c7d97b2a864b11e2cecc332079683
SHA512 35683b03bfd0d41871cf1ab4c54255e09c532d7e965812d48f016964927a406e5d0e46820e02cd6108ecdf77ef69540738da08c55deb42376f0271a7f2a87567

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0EEFA343-3E25-4368-A332-665298D91EBD.le

MD5 aa9ab24099484a988d8da57041e675ab
SHA1 8910f175ba6ff4d619ed9cad787afecece8b23c9
SHA256 2bcd3c3bd70273ebac0abd59cdd19a314b25a8afb128f3b300b1dc5ec97db622
SHA512 008ec95964ae7e0a0f0a572f4aa007c5a9087c89af1715a843e54356a3f06592c4df66feac0b9707ada41d41819b6c7e62d5c562d71f8b3c2107e74e51b4a201

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B9221CEB-F80E-408b-B074-EBB615DB93B4.le

MD5 2357bfa53cbefa1eab9e3a316085ac33
SHA1 88e660005f5440cfcbcc688bdff371764e4082ec
SHA256 683e1b577585d234f1c0312d35d5cc47f3af1a768fe492334685e3bb22b232f6
SHA512 f72e58279efd99eeb70a3380a455b5c413efd9cf4c061675e814b282f1bcb88e48fa6f61debad34863f3702d14c53b59050873cf68fe2dac844b8695fc7a9c69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6F3292E7-9D9B-4166-99A2-C128DAA7E8E5.le

MD5 81230eeeab3d2941b8054bd865c550d7
SHA1 4404e694ddc12de1ffba549969dfea51347bb533
SHA256 693aaba6aad2703b0c8531a4972c415826a1583b24c661915072d823db16b5f2
SHA512 348ff4db5273839867e930c9920557d684a6767d90ed2bb90a1a99d4d49cce43a12f2a157a901a529a1210fb5a891486d01fe66dbe96ad94a216efa315b560da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D621E59B-2AEB-47ea-9CDF-00B9359E810C.le

MD5 dcf9d8ae839b7b356d98640a2a0d1e36
SHA1 c10068e0d196bee2b482bd27150144e2d66b439e
SHA256 19aff565af9e6f1807a528e411e84b78fc03477f61e6a06ae7a090ec1d50b842
SHA512 64c8952b0aa261e3ea9e3c94412a4ae27a33bc366500285e9627661d9c3d76c5f5f5f15653e4a7c0b5b8a511ee977046ad5f3b57462aa78f30b6df7949017dd8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\806098FC-F845-4187-898E-8A6259EC6326.le

MD5 87ca0f6f24934ccb21ef44a8a9b4604c
SHA1 77fb593c07bbe9ff44cb0962adc3911327c96de3
SHA256 b3b81aa1a85b4b489d5e9c308e98685012bd41742b5877dba7b5445008a6fad5
SHA512 96c1f8eb6291a14dcd9ab2f62b70f44d99ede3c51cf25a0b51ae78350d85e6e843a88dc03ae1f8f55c68f7bfa6fe17bada042efdb3e2f8ac80b96a93667bda37

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\75430B47-A033-4ffa-95E1-41D0DC98393C.le

MD5 3d0ea32d0d9913629ac09f9a84beb38a
SHA1 db81f3143469af57ad8a4e39d303e0c0416e7e45
SHA256 e1ca32526befd681e9038125923c43a26a95d1c221b582b99b9335a75b43785e
SHA512 01638028d7e6e76f3283a4d1305c652b30a227ae14f668cc357053b306b441217c79787c7172478a56e70805a3c49a9557cb06fd08034b1455272a68d4e57ce4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9E19B278-3BFC-4e96-9858-61AEB84AF17C.le

MD5 935fbbf59732236dea9540b56c1eae62
SHA1 d0a7ac1e8aaee193e33e08d8371b9a6e0c777858
SHA256 7b580897fdc59d6eb3109af0fd278554e3694520530cbf26577cc68d925ec12e
SHA512 630b06318f78e9780f7e12799de2a13c1f279ea710cb9cac7b1e50bd31c5b8210ab381acc3167b28b23b94ed31442c3fb6d27329fe1f9bd68ad7b845647a310c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\99B3BB2B-E973-4544-BC18-25C92A3F1A97.le

MD5 1d99ad02cc88f74cfad6bce3e1a60915
SHA1 dd0a781cab6e04829c5be1b6a266a9d1c7e465ab
SHA256 0886710d9902d47028ce9a8b91f32a9da9139dfb23442528bae829fe65676f47
SHA512 1054d304b6ee15a688d6120bbcd0b5dee95d515d8042333b11337bc26ae1baab887fb11286bad788ccd791cb1e5cd9ffd9a4fffea5353d9df96f8d7962e0d917

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BB2F8B7D-61F7-46e2-8566-054E95AEB344.le

MD5 d53bbc9329bf6bc223f4ed85cd184f2b
SHA1 2f7a73e8515f4b47c770fae491d56bcf1c75121d
SHA256 658b26703188ae9fa65992c6622f40a95b8460afa42757596b8202c6a51e10af
SHA512 2a0c154fcd4d082af8f7f165a79728032d5bd9e2c499e93af8be468718ff8958debf95785db7d82da238368741f21a3ee1821691bd2d166207ddac3b388a6458

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\26D4E615-0A05-4208-8295-6E3C333FC98F.le

MD5 8dc921befafc4a9337ca849728602fa8
SHA1 5d3dd729d8a9d9d5919dab861ea7e1ac6ff531bd
SHA256 c813a81172c6e754eb434b4217dd57b1036d07f107537dff1c1c411ec9bf671c
SHA512 f7a347dec79d562154e2fa853019271beee690c5ff1d9a496dfcdbcc0b9db1575fe48a357f28d6413dd61b4a12d1b3b69f44d6be22d047308c107a13638154c3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\31EFF8B5-3363-4905-924A-B4FC9D31D084.le

MD5 8a50efe23f3596c2c50dc391e5971958
SHA1 53f1c8d83f7b81715ae7a628a646b8950456b93a
SHA256 de9af7b7995bdff1649265d7af710236ad7679a0b98418fea8545e212e232de1
SHA512 b432d5dd8abbb0057b3662ae67e64c0ea5427fcd574e70b7edb79401447219e6fdd8700cf841428fbaf326fd96573962fc49c8dc6931a58cc5f4f2c6fb3be3ea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\188805E0-0322-4fa6-BB84-E9DA9D8CD482.le

MD5 45b264b0d1f20a672715e0ddc15ad000
SHA1 a0da444b0e5ba1e68a7cf15e6a38d8bf452e3c57
SHA256 5b3d45be270b405a12bef6076ae8a44e8759743c6cec711bb89a53cc083246d5
SHA512 7365305df5e14d85145379aab86af1154c9f3e1129de223088fb133556836aaa224afa6840748fb5f5b109518744b33e59530278c4019b86b53bc72a605f1033

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\553A5737-BCB5-4814-BB16-36B7DFE4329E.le

MD5 775264ba5a6ef7b9abdb334cf7350275
SHA1 755f081ca2bca15df3c2b9e4825eac3843402d7c
SHA256 72562b7411778c60fee15c72aeb421c65375382c040c5ddc0ffd17b847a79c5c
SHA512 439daebb84e1a79602068fa7890e7cbad8b99a18a2f2e0396d7e7846c804d1e38ce536735016b405aa15dbe2540412759d2876ddff76ed6f4bc99f38c7f64519

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A48178E4-1617-4f57-B31E-191B0B25C898.le

MD5 981a30d0848f89ab7b1f6d6f18fbb206
SHA1 085832eaf871b0347b22fcd1f77c6df4ca83d061
SHA256 57a85e956ded494d8937c62be343332622e5eb47db2ec1c2cbe236075e73414b
SHA512 ddcd367fdfd9f3c4d9cfd14e7f8ea7eae5d574f85ead78a3a92a505fab9b471e7c8a1eb2c2f6f8293b4eb7a04b885fa90ae87e4277a1e8207838489b85417b7e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1272AE09-AC03-424e-81BF-9FE422F30D15.le

MD5 9ecfe651be3571110a70f67eef5348a0
SHA1 f24d77420585a8965af3ea038a5a8cb9cd576218
SHA256 8f91441af1c4738b6a62ec3acba2415cacabcf08b35d8ed2809cf1faf47e1631
SHA512 26a0ac96f2769593394992a9bb3dd4c48cb11aa44a49ad640aece8dfa9ca8d05caeda16e20cc29f8f0c8ebc52052b9b2f535d55745a7026442ea38961cfe9992

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\062C401D-A908-4083-9C7E-DC0CB1C93A8E.le

MD5 7e9674c8c4725900b626a161e819a46f
SHA1 c0ab8ac6f8c21928ff8e8d91d2741daf399d8f27
SHA256 d27a260d19c434c0df9d97ede59a4c73c00c8da0e6e9f7838c974a50dd2543a5
SHA512 53e8a10dd40fee26d25612011c3fd1ea9ee6b6867bb2251cf78a5e994b8f0abd8b3ed1c8747f07f964bbd0543fea892da50eadc2084049873f4af9f5ef4fc0da

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7FC41E34-FF7E-4150-B351-07376BC1C6C8.le

MD5 f1a24e5ab528acb891c3917b4f631ca6
SHA1 a58f6fc4508aef322736d8092e1e5e89802b7a5e
SHA256 0c21a4e5906e586cde1f3090653775b7fa5b13ec9f568ffa49514f023062be6f
SHA512 72dede66ece68d2e82249e031f15c77e03052832a42a7a3460b3f3c6cbe0c0b99cab739451f397ceb553dca6aa7052061f31703798dfe502c5c99b45d7590b87

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0051FC09-7093-4320-ADE6-28052EB141F0.le

MD5 fc8934172bfbc1c3c6468792ae4c6976
SHA1 ff8856c465c7554e43dd5d71b0553febd535817c
SHA256 ee177fb716ef371f35707e4ce0d329bf94b122b185b6d1c8259a739ef98d1074
SHA512 79db7170ccbd8b4645bd6870b26f3fc40005cb3479af1564e77a7ea0443ded7e1229076fa79b9e3bd0c2008c3557bfa899221f57718331272c02b8c7cc474381

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0D9BFF78-3427-4569-8419-D1715CDC06AC.le

MD5 6c6c5c94b700a908e7c2890a64434b42
SHA1 e33268e3825100ae129bd3b79554719921334dcb
SHA256 3ed074f2b11d62a9d36b64adb2de9262e951ea08735ce22d00cff9c6f83586ea
SHA512 e0024b3b9c65a0308f507fd5d17267b538c07bf41f5f3215ea81c5fbb93fb2d9b4ef934cd5640ecf3825fb4f6bfff8528bbb542119675cdecc779c3fd487b224

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2E9AC818-0C23-41f1-9BA8-B35FBDA3F3E4.le

MD5 2513fd8000f4140ba4fe0ffee58b4ff1
SHA1 7821f88618749bd9d3640be2e8534ec224587743
SHA256 6084437ce82e22e7b243161f5cf55bfdbec356ec51bea709fced958c676834cf
SHA512 e23b751be0d23d45936df63a505169c40f91e3444720f2a863aa07f5d2fd2cf2615d73713b23338b155afd56cfe975f3b67273f05759aba52f09498650b12576

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\081497C1-F999-4c76-A622-B08CD827A58A.le

MD5 407f83f549083544082635511610ad07
SHA1 e5e2d0df7c3b73edb8d00451786c838a7a149e5e
SHA256 6b2c4fcfcee0e90224b4e362e979cc837b3634f18f38425fde792b33afd28c4e
SHA512 2d359058dcb0404baee59c53b6acd10db8612cde829cc479cf70ce1c5c6f5bcf34cf1d29c3afa495e5f3eef3966cbd8fc42fca502a8e43b3f5ea9f5c3fd8fff0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\BDD42643-67BC-4a7b-9019-E2824F718442.le

MD5 7d36fa7688313d5ca5f8c226f7409136
SHA1 cf50b84b4036a41c140f80b12758b785bff3c3dc
SHA256 02f44eda6118b1d10e7c8d0524f8bcf59a9fc57c052ed183c843b8c260751d45
SHA512 af9bd206f67283d1ed772f16c192f345bc92723ff6fa9ca50456e3a8d9141cf11312b8599eb654c82183e0b0457f63469aa1a6d41b618ae15dad517a1dac222d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\64D11D2A-B45D-46b5-87A3-49EE65A5F528.le

MD5 126deed954f57593b6322869c9d69fea
SHA1 e74fe3b434db07034fcdabd0574d48fc7a61d21f
SHA256 be86e522a082fcc0462ad659b5a0050c01e378d424fb4864ded01d70df6a4ddf
SHA512 8af5ca2a5688fd81558c782f1412792f786947b5abfcc7db474a4779ca302672d0d182223ed9c94995e41e21a1401abda60e0bc1a1d9642b86ee1e979e1dba9e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\71775289-0685-4c00-8F80-5E44FF1E173B.le

MD5 d0c6a08e0330c679403f2c4ca3e694fd
SHA1 ab434e63a946b0a52f816114c2e8540166d21cd2
SHA256 59f4693211236d4292e63d7dd414dd3291da38ff4160967b80607f14e1735efe
SHA512 32a7bedc9589f4d0b69c218bdf80562f896312b181ea9687b8364f619bab788ab2e8798c5ae1dc43ed9f7633bd9bcad1fb539eea1fed778798362c308dfa2f2a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\423AA6B6-1D6A-4ec9-8F57-FE9E2F11DA31.le

MD5 afe3867408a654f15438bf20b8ec8af7
SHA1 0d401a717917ae1b7d477d7e17def243f0515484
SHA256 37cbf868d2dd28364b7b9fe2526a64ff3a30cf6e9d0ce82f5e5ff3ad4ea5a05d
SHA512 7a2d36dde0fde2d213263f0542e5a1ff587fa4989f0a353c9e42960debdafaa006dfbb8165d16b064b339136e567c0169937f4b83868794d298d3eadfeb6881c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\642A72E2-037D-43cb-9ABD-BD99F0D26DA9.le

MD5 e1591265112ba6a49978cc47aef56ac3
SHA1 744990837a7add37c6a08c394fde2e28362186da
SHA256 dac3998de6b2b8f2d7863183a9eb4beb303ae8de6d47a2ddd655f4ab1587363f
SHA512 0e289305526136a205908bf10be41a3f2de863bc1ccc747014826b8fe536fc76c2013be0a6dbe1d6ed7279f0eb1a0c1146b98e663646a196e96d9dfbf6541db6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6107B7F8-5C91-4ee1-8220-D80C15715710.le

MD5 ad13ac5e7b6761881f8d8372b274b64d
SHA1 f7f594a365acc42f525efc40916b8c134c7ae9ba
SHA256 f71882be92cc2e338ac4ffd2ed20ac6ee95cd0048c9adb6060aa67eeaaa72d56
SHA512 446911455b35a84af1d68986c3684c671cb3934dc2bd31dc5b3d38ce60a50b41b3438c6293bcab5f14721620a09d8b4eabec25900fa238af15fe252b60154896

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B0239EDC-6B9B-44e4-B2B5-BC0C2297B9C6.le

MD5 23064e4ff257b21cccb513e6be3fae64
SHA1 776cfe89018d04f4733e8f30788376a24d67e62e
SHA256 d749f223c019db63b2015b48bac309484151ed6dee4e669c405b0eae18598af1
SHA512 961cc24a5e0a490fc0e5d4b0c7ea56a94b666bfec33c2c74f1d31f6473b56357647bcebbba20722420a7bb0593997066780a70effd5557ae04ba298b04148364

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\908AA962-B0C8-4517-8E61-1E4C106CC4BA.le

MD5 c911a48beb15f3d95b608dc3605641c6
SHA1 ea5f408997c3fc41a3ff13c77b8290f8c6c8515b
SHA256 b4c515671a2ec469c7ba482532dcc8ca8db29f0c418f697314a8054ed28a3bb7
SHA512 3809ee1bc941277f441dc2c7741486b7b915cddfe19e468d1fad4975629ebfb8712f9204c1ab008b5e156293810cf49535a73f336274ca44209b14a5dcce32c0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\186CDCE3-FA12-41d9-9B6D-80F3CA47B360.le

MD5 b9cdf9aa730e86b9b20024f7097ef52b
SHA1 055ab07951377cc69d2f81118868babacb75a47c
SHA256 67e7f956707054eef5f37af44d338df31f368ced695450fe19b535be8f636c39
SHA512 4610a3827c1c48c398f1df6084c94aead210bc741604de79480840748cf89a083e626dab3a2c7e4f0a168bde3183f15894b5c83f58adc89e5a213ae813563450

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C72F3EE5-3B74-4f5e-A2B4-A71D008D2731.le

MD5 01df276f419cfbf562155edaf1b2169f
SHA1 71c9993bd6f47acd81a12f5ae347e9302cd19f90
SHA256 906ddfafa10e1f70c53bfb11e7542299be31bc7194e39d397afbc7e5dde7848e
SHA512 274d99ae25e3f61a705602bd51092b4b37e1d5713a3ffe6d5e572313d555f2fc7e1a8cccf304858e427e0155c1e066edf5597c567e739e7f941299b4f07159e7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\586C6562-3006-4c92-8B44-50920FE0C213.le

MD5 ec0fbaf7dba115b13d751808b883d31f
SHA1 69b7f764927adabb2d228be832688d82ee9b8da7
SHA256 e9a3da42aeec5dececb79f06838cedf9e8146c067917aaa96952d79556297de1
SHA512 d6f6387717c2747f3b89782e8494e660fed109f31fbff21c96e3f6d60eee00031aa4f9a35156ec08b69a11428c030e1ac84603e0a535fcac1961dbe17a0f5a51

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83D327C0-CB0B-4bdf-AA1D-37C1D81BDD8B.le

MD5 1d923a2d3f6dfafe420079321091ba97
SHA1 d951d2cd32de90b19558fd0b86970a0b5c34daa1
SHA256 ff22e9024b91ab968c9fa0f45745f98d7c1cef9af5e5a06c8a2bba753c82282d
SHA512 fd5e44974761a87119d85565a1b9597cc801b3ed710c9dd8b84eb5990edb9efa7db68e5e45fd245ae34255500f0d944ae42756c4bd951fa0c4c0f192c07b1caf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B09FC694-4B0E-4fcb-83E7-8EB4A77E566A.le

MD5 4e5c96c0e0b4250c2a0d2977f7ce255d
SHA1 41336224fc78bcb16e70dc8ccbdb105d3bde4914
SHA256 8e1e3a9a1d6af451010825444269cedf5ee27d667ed4f1fbe07e21eb37d1a8ce
SHA512 d23078ab1ad7dbdcfc6f2cf7ba6add650aaa54cebe7276c5b035ae74d06434b41d790a43922ae2617d25204d8dffcc5fed8d499391e27c150405ae3d2ec5864a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\71FFEFF4-BB1C-4d13-8FB3-9598C757458E.le

MD5 76c48db43a412bde4485773fee7260a1
SHA1 463f07a82300d04f5a16ca50592a8ae42ebd9126
SHA256 864fabe0f61337175652a6514bebc3ca704194c7196f39d8b931fa0b9cf64ee1
SHA512 69300db07258ca14f4624dd4f193b0390b5320af9ea9afd7c7e098cffe22102b67a902ebae21875797541b5e87830f99868d4644c482fdaf57e0102e01801b13

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\66D1B9F8-888E-4d90-A83F-7FBF61D0EF01.le

MD5 4b84aeea38ca72cd9b56042a8eab8107
SHA1 392820585dd2714599cfa1a5d9927e6be014c405
SHA256 12a64444fea1e6ad3c12ee4a70a49f88f35412ba406d5f6d0aa2dac469e2a0b1
SHA512 12871a31c82c7c1b99aa5dd44f43208d5aede357003070d847a344ad0a09b9775d7c00f54c7213e3b066c03106726cf089cb489996ff339870301165d40a2595

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7E8488C3-EB93-46a8-B505-F9E95FD67322.le

MD5 00aa3b3b68e1136e6b9723fb7462b494
SHA1 263d5bf68dad3933065d263f5ece1941a7abed82
SHA256 5dc824a16c6a0e51ddb39346cf679a67d56e46ff6069e6827c9e9eef4e423a27
SHA512 87b1d02cdd5eff42ef6c4b9a21fd0285b4c43099638f3f3a6647af1a1c7ba096fef8f58ce090d8bfc195ab1fef7b39078ccf8744d0967928190b7a6cb116df74

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\51FF89E8-8E4D-4fd2-8B26-B1BC7F2BB57E.le

MD5 4c3c69fca84080b4356d1dd03ca06bf2
SHA1 6ba4ee8b9b90518318372964cfe68090188fbbed
SHA256 1d9ac48f8df7cc486a4e60b95b1f287d60ddb45d031584c2577c43b395de4134
SHA512 755183c1ec6eec0937fae101a810aaf88b9c55f73e3a3612e007b7236f9e00469550b6df4bc01ad74f375c23c4e30cd2661f4a4e7639f64837a4450487bc3099

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9A5905BC-25AE-46a2-AAF0-25B13BC2BF3B.le

MD5 9a0c4f8162db57adeb26b9e5e9e18392
SHA1 108c5d5c81994200b726df0a778eed3bae3e8b35
SHA256 ad1b1b3bc5d753792aa6c7b7738e3000fa9be9e5c5b6ad599a24fff70fae7ff5
SHA512 287351bba80070c7726b364ca7527b9ca96d405a644bd536f23617bc30fa7c30a50ba8240a4827ece4625ed0b3a1b7415cbf2b03123d47b39217046104a04468

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6C3B992C-55C8-4c61-B1D0-1789B9E4A8D9.le

MD5 a57e52ab2b5504599f9d4f441eb3ffa0
SHA1 485a2aa3c5840c433e88be30e3ef038678f389d1
SHA256 e30b07916a66965886c4676edbe725962416dc95710e7a12ef142ecbbc47984e
SHA512 d76a674fd89f3760244deeb623e45054381fd9037fc4c9d2bd0f1b02c5ed67a1f8262bbc513428e30f6fe498e857be28acf6334fdeb32d5082b7238e52a67004

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\014D58A9-7E44-43c7-BA92-1063623B02DD.le

MD5 4a0883ba6cf6174859a7da1784eaa93d
SHA1 018356b14b046e468c8229351deafb50c260c05d
SHA256 945832039c2cd08182f9b2827d2921211743581e09d9db1b20372c92c8004673
SHA512 bc87e58a9a96a2ab56d7a9bc58abc609134796a600571434dc8a283737d49f9f3fd31fdfdadddc9a0e4f1956415351b20427f0faadbb6fd85278874e2e9f264d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\26C232E5-B89B-4b17-BF1D-75DC61351A93.le

MD5 707adbd0d56a02ab859ac8d761db4531
SHA1 c9d8a38c509dee79d13ac8f75934e2f75e3eee3b
SHA256 246aee48ba62d3cd0a127056f828728f5c54b3c92b79ed374f67ab45a214e656
SHA512 c1b225bcaeefae7eb36f56aa6fd3a0cbe661ee7f314b12764b72b2325140f009ca94f147bb1de5a67afb911f3fa41422ec45d45389714090eccb43333cf7f240

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1B6DB72C-6093-43ac-B4BC-59670CA31696.le

MD5 980e1e268042f56cee439358472cb2df
SHA1 1cc394fdfc5194c1c0384bb4e52dfe03f06dcd86
SHA256 046f8a78f03674d7ed4a7765a401b903949c29207cfa18b33f3167fce2ce15c7
SHA512 556851626eb18dbb9e14f913a2e8624ae220108e66f70987a5f33b2690e0cdf1375064672bc83cac8d9a18bd4967b9d46c1f32c090138e481327c83e4bed42b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CB7DBFD0-2463-4aa7-AAEF-0512BFC1F6A2.le

MD5 51d2efea0fbca3368b5e390188233ea6
SHA1 38bef0ef716710acc64ae9ae3dc67a55aa96493e
SHA256 cb50f91b75006fab0a3b81dedb6cad2e0823fea67f0b0cf64c4db5e1e23336fd
SHA512 d7a4d0e857c4b6786f2c24cf30b106d738720d02569175336a6f52eab8f03e0fab69a37ed3d6c5b8fd4a35c32ff9c3c29f01c594f552a29d6a064f9efcc5d020

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\01BF5484-6303-486e-BD3F-2267B53C3926.le

MD5 94f65c12e215e4085ba472d2f2be1a52
SHA1 d160353aea94098e5d7b84808aa4fc81a13e56c8
SHA256 cdcae4543982912221f6b861682290984312bada5608cc0eeb10f7472c3b6e9f
SHA512 415a578ad7dc4ab2d042feb26e396fc61445019e3a3b1c81f30958dca9feab85f0aaf25d1cb0ae5640be96311062eec409b7b098aee9fe0a9a43f92921ca723e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6920D09F-C280-4e97-8734-0054FAD4D770.le

MD5 13e0c73aaa888d1d499f337c9faa8e7c
SHA1 dfea238f271796fb68a64a541ac9d2d9d470b9e1
SHA256 53da0f2c4f50829ff08d99d98c07508712b907a088b31f931261d7679a578e44
SHA512 83fc5bbe41cbbce46f03263950c3bc5cc9048afca90105cbde50a79af25efd5baf02676ce316e3a4fdf841b6e23b33da77313d62f85f1c436257db96b04319c7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\61B57825-DEBB-470d-B39A-258888529250.le

MD5 32b00a854ecd72248c6c07f35215d8d0
SHA1 88c5c5158b99613bca3abd4bb89c146511834402
SHA256 5a82bef5383692dfb6e22b2a0c27dd1488351256865acf760e0e0d735c2dfad6
SHA512 6c52c9fc7fcabfd3ee64d594527e0c95799f3412825adfaf48177454965b486f21dedc3d9a1af76fafc4cda9320eb9388b2766d3c5442bd022da99a261659c45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\96D9DB51-DC2A-4f26-B7F1-CC03C087D0EA.le

MD5 56af79e75f2bdb58b20d7a1e082b8478
SHA1 fa8a9abd7adc9397e8893f49ab4d344c055c8531
SHA256 e6452bb38907f02a8cf3cdb8c5d33b1cce0ffc279139139a605a4dd17024759d
SHA512 e44e9838a00dd6745b3e286edb75087293f9d31619ab3c445753323673b31eb758ec498fd287201726260d615fa94e70bd979a7050021383b54bc170c3ffdc81

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A606CEF7-17C9-4849-BC2A-CFADD27AF02E.le

MD5 928f442f9e2bb236418804dc36765e2f
SHA1 dbbd4c336c7a52b100312d1b6891b603c4f4800e
SHA256 0fc5e2a971c63896e3c9463e08de472243a13ecee955c9ca2c82c3be3ed11d7a
SHA512 c829a7d5d503064adafd8550427c057162229906b92c304c087860773dea404e37c9523dc32f94c490b1dd566d0dcac5d46c13dabb1e378047453c0c6b2a7ad6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7D765D1C-64FD-4033-90EA-1556502AA9B5.le

MD5 d53fd03211dc48aec4c607920a3461ec
SHA1 95321cdbb01289be124fee44b29e3d88a3e3e316
SHA256 3229e35120da9f714a8bfeabe651d29fae05dd60ac7f0de0a5514c6ac23249fa
SHA512 7cc8d9340e5b0ca63125da79a4c31e6a7316bb9a7e9fc2acb87eb3731a009ca405b8aef50f0c4ed10764ec946f15475e58b91e9a6aa9fa4308ab24cddbd6ab90

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\EAE11DA5-004D-49f9-A5A6-050F00FB9038.le

MD5 3a276f28fcefc089717c4f67cf53cffd
SHA1 ac42fbaeb8a8de1ad737030873dd79d208a31c86
SHA256 5cab50470f19d3ab3eb9e833e1874306586d12ad21adc3767f921cb98f08de40
SHA512 1204a0ad61cbe46660fae890521388fe8e0c6e7be79f66c1acfff8fec2a4c8bbb392896fc5fa5a87d456ce500fb40b4a60490614081461186a21148da375885b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0906FE95-9A1F-443d-A52A-74119DAAA790.le

MD5 81a05f7ac6f480490ba1f7487da6b8f4
SHA1 3846efa26cdc4980c5e528a00c831c82e8ef9b6d
SHA256 80110f0cfe24744e2b7cbdf1a84bf93d8e97866467772ab02671f7f26fce5923
SHA512 749bda9e4fd27eb40890fe30cb6c1e5c5eb71e6166e1a4693d9ea15665dc086a70dcdbc19d055eb9542ba961a3b9692fabb93189a0f79477488fdf5bae883c00

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8C5B3D2E-7C99-42a3-823B-F59BCCB649CE.le

MD5 7725ef65a41583c7aab213ce3f6f0003
SHA1 80dbd79fada4c64e42c727158d6d84d6b0df3352
SHA256 1bb2026bce2a2bdfcc1733387b806b0e2183c47ef9066f7e037d13924711dcc3
SHA512 9bd9e415b808b9b0d94562d01af63c89bda5339fc3f6daab5d6e8a8e31b71ffba73e3c3559d45880a44de166f726963a839dd6dad9443bf67b86135c7358d48d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\83CB4FFD-895B-484c-8708-8DEAB1D620B5.le

MD5 2e61e3a42412a8f39ce44b890cf2e6e6
SHA1 518fea5340666ec3cd59b7e547f89cfd621af2f6
SHA256 d332a5ac8d8790dafacebe883a28b69b70228025db1b106b0a57f2385c1c365d
SHA512 2c4a996b740b09cc1cf3f7ce16bb4200636dfa11cebd8fe3c21de2ed12f8443dbf492bc33b3e506b9ef3960bfa4ae89ecd910c73451cdf50b8bb368f0c41aa2f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\43CE9D4D-E131-4f22-AC36-069DF45C00A6.le

MD5 061ff7a2199a133ac3e9896b874da3d4
SHA1 c56308993bc950eed2f0577866f70180e9ddd33b
SHA256 1004d9def8d5aa0ecfd30b02ddab3899e4d507b50980726f7f3fc63e9398f3f2
SHA512 418e55a6e8f3a605ece9213d161420d9234d0def0cbaca640ef3d13d1a5eb3aa12ba7b9d4e7c3709ec1cf70382abb595e5b300ce5b7e985b27bbc801cd90d56b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6256FDA1-D694-48b3-B441-0BE885AA88A1.le

MD5 4395cdd04269d21660c55d9f6ae5e5b6
SHA1 3ade07d00a6171b96316de8ada86e27228050050
SHA256 3e5b7c572681d52370662f5d34616d1d2e47ea222ca2d062498f834b2a741620
SHA512 91edf7aeaeda425897233ded59fa88d6c704419880fa06959a67b43e8cba59eec17af54be008d3766304cd9de2754e9b39ab5d1e714ac074431b161d24eb0e29

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C90481D7-B35E-4a4a-83CA-B65798964DDB.le

MD5 2864ba9dcb96c214146eab3cea2fbae8
SHA1 b46a0d75f0a398c0506638f9362cc943e873b576
SHA256 897c59a3c2eacac4ab817d3190f47677fb1d0a0a30ab123e3977d9b23a61cbb6
SHA512 9561646b877f3b660e3965ea2b5daa4bdf2de3d2f5c6b4229d0f298f3e0aa959a922cdb63feb626a5d523e2a1f57515e33af1532f7ade0a496aa500ede5ae12a

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\2BEFFACF-9539-4ade-AECD-A0E33EC6BEFE.le

MD5 2f1cd88898bb6b3db80da07f2b0c7ce4
SHA1 a1c618c9eeed96dcd9f943bfb70a994b3a66b31e
SHA256 bac5fbc2c2d45e8d66c096d3611259176d0b2e5fa909519447ce068244e75ab5
SHA512 dc761d0e279f95738fd1ad364f041da8194d77255c13cd79dab350721ab70e17f2212651454d639338bedc0c6545d005496b76f0f72a71505ba9cef35dadaf37

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CA020A92-F4FF-4fe1-8B9D-589B4B4F057A.le

MD5 267da58dc571dfa3dd563baa106358e3
SHA1 c1f173e89871f47a68e0b01750c650d4b4284362
SHA256 918dba2dd76d31fbd217297dc1c0a1486fab1b50fd735fd1b5b5bba1e9dcc1a0
SHA512 9ac7aa7a28c45b456bb8309e6cf1d354c52c56004ceb9f349dcca1839a71f8dfee7cd3c645138bb8d97fafa6931ad4ec743bd7b61206fb43da3db563fcba9530

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B65A5D44-CF46-4300-9877-8C3822AA9634.le

MD5 12ca5e77261f924236f0aadb354ca322
SHA1 2e70f8c131fe21b1c2ae122ed7f99b1bcdd1fc28
SHA256 c5722ee9e17306f9e900386f4d008fb16f355f903471596811a1eb4563af329a
SHA512 5abad85f6f85982f2746a6aa09b06ea46ec8ccf66797459be0e5b1f28fd4e8a8ff52ac74453f8a34872ba5dbbc6c35bc6280b2686dbb189dd6defffc6f90e071

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9C61B688-2411-4c10-AD82-A45519C8C3E3.le

MD5 276533264afd83f89db2a9a2b9d2b101
SHA1 7f8bec68c82dd003d91843e0aa8f94c6e572db15
SHA256 27791a8bec3f9f144596797bd07c9f3f75657ade3e3143ffafdf9dc8788d5832
SHA512 c89bfef9ec7c0be9eb8586368740b1241eb8d183a74709eebb0cf58e22fed37db4253684b65c0799a97df9a9d2232c27e8039fd43f08f3465b2ac7c62e55ed2d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\FA7E0A89-CAF6-4671-8744-41EA0212DDE1.le

MD5 8b0b05e04e823af8bd55a3026e49dbf5
SHA1 c1a89afd10190bdef6cc6c058ebf1b6834ddc31e
SHA256 9a1ff392f2dac0bd16e9052d713cac4a8d3975426ce0b101ae641d186c14c6db
SHA512 af942b55a12cb7ce1e624c0faa83046ba4d24a1efc7a15bdb6070f66acb5f7c96996e9427e0cb1f681ad771327ced708d1f189d0052d93ff6234163b0edd9700

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4F37A84D-3244-4181-ABF3-6795762A48D6.le

MD5 d825f3ffec117bbd999c90b4db0e38ab
SHA1 f8222f4945def273b420f6bd7242d5e5aa8f061f
SHA256 9d781a5d94156256597ac972363e9116bcd7b1d14734aff03e1a4ddaf58806cf
SHA512 cdd9a9270c99260fd817ccb34b0375aacf66586d24ad404e9956efb0ba301d8f5f369f77f2f8fc5b188dabd8a57549980ec641a507c76578aac994a85120868b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\48195C54-9E36-4066-A266-85E20527EF83.le

MD5 40a4fee0965827c9c0303e695f9471cc
SHA1 4dbc7a527153ae117bdfc39be447e6c45f42efef
SHA256 fc670f7f54c446ea1badcb9bb64d934b81e8d98d5f65a40da1e5404b5e910983
SHA512 6c27ad066330d5dce806a638e476f905752e5a817786d51e530d9d3f3e9d7448805b3aae4872e93c007fc63d1b272cd2df24e391d1e712db73616c08a0f8c58e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\161051F5-6014-454e-9A4F-7A3B67BA905B.le

MD5 aa6006a950052a569ef3494e1c294a32
SHA1 43bb8e728830d2f5270261b2dd60b2fc9547c2a1
SHA256 ed021242ebd67c5d8152ed373e9ce09ac69cb0378eeef9feb4dc9f2d9f880c3a
SHA512 cc713e29ec93b535c591973f43647fde929b08ec60546cfce0f7e89056165186fdd2c705d2adc47a5e0defcba1ab2dba4d0c3b624ec037295b0abfb6214f21fe

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0769121D-4ACC-41b8-8E7F-CC8F72F49975.le

MD5 cb68416533c8ecf740201ec3ac65e87a
SHA1 4f87585f21a8c1c64589e0be923418d908f6206c
SHA256 89263241aaf521679d6c0701e5589dde1650b03e59544202797062b5ebdb6686
SHA512 3d1003920f35ecebed7bcd9a0d34d99981dbe77a0ffedeeee55fad63840fa7f176768ef2bf011b2e42053e21cf5fd80018c7dfd70a876b013f5c15ffc25736db

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\C1FFFBC9-8C6E-4b94-94D5-1F7A449DE57B.le

MD5 f44dd50e18e4525bd26f987d3e1b9ce6
SHA1 cf90ea4ccc4e7d6cc46018c9f5de5217e006ed99
SHA256 fa85fb8b2312df5ac55980de01c8fbaa2787bd126da1d9775c5ed9256d3ed542
SHA512 5c7beeca0cf709486d59e7702b78364438537345bbf2809a8dba62be8aa408a43553a39148a474fbbf7000e24cd14846969fd3f3c8180e9d2f3c69b346358071

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\96775CA3-3586-4a01-AAE8-1B9C3FE01D5E.le

MD5 d8b0408a47c3e73b18155bd272e0aca5
SHA1 cb9a1ac2a403ebb29a9cb002febef83473b82f7a
SHA256 e51b6522e472f5d42333067bf4113111867defdb100b62c4dd02698e5de25aab
SHA512 3c899bbc564b76bf5ebaa6c69ae2be28a47d411d355352f829d392c97824b9beb944de8d21a14f3c38c6ca7a8604b1b661a27e7fa42bd1ee1c031770cc4189d6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\8307ED76-71CA-4432-857E-98CCFACD96D3.le

MD5 4cd247f76a03e74f8cc3e880b04ca4cd
SHA1 60e5eb3c41d4d3b8bcf6952f6704d1b0b60837e4
SHA256 6424098def0fb97c62dded3870a101539758fce89ba2e5e758f43135947a4368
SHA512 bef4b8998ee625cafe53b4110678168b8ae71d705fe733fead14fcb29dd44598aeb93f3b77ad1b1767c36f3fb77f0ae9cd404aa9e160fd9b0f7df34c7ffe9fc1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1EC1A2B9-A5A8-4c62-9268-B9498E7EF3C7.le

MD5 9efe8112d5e420d3097a276e74cc1410
SHA1 87e5d7de539b4656f10a47103e23bf47cb1a8d9e
SHA256 bfeec32df73b47ab59c9d0b3b9a0577bbe9355b2f6054ec329053d10a35f0b39
SHA512 8fd40300c15908e4eb0de13d4310f58769248738ccc6b16340704400ca09dfd12c463269db7cd6cd3b184a7c21291272d62a9a19c40073837567e1e16f3f43fb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6743740-C759-4843-82BA-91584E9ACD90.le

MD5 375642a4374db5bd29ec3dacf0c8fccf
SHA1 d9f86022be25a2cdf1f7e0f2dceb1ae1eb4f999e
SHA256 ce2a080cfb683ab26b0a4ac8e5cf5a9a879ac8dff2c433d7c9a63f83c1f57567
SHA512 21a3fe0a6aed25f0683be461227c8672b4f87c11b2181585a0bce61d0995e80d72196991508c2cf1d2b5abc9790c1fb66070a20f4a0c47ceacce40f072c18598

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D1EE3B44-1F93-46cf-87E6-7D7AC132FD2E.le

MD5 c7e50190ef92118b0c2de8c0bc55a7e9
SHA1 3d890ee0d2b4acf51fd61da84c086a15d2413c41
SHA256 4f93e5f4b75efa0a98283aafc2ea1438ddd09ca582fb3196cf2ffee3847cacfe
SHA512 6c997946170f2edc77a6d00c1f2eb991b75c5f9de01079d53ec94f99b4b3bbe6730f1bee258f0fd23cf62dd9982370c7e1a864a2d0eb6594df0c8251def0dec2

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7AF6BF8E-3D55-46a6-B53D-25F280022967.le

MD5 96be2165f2f3aba0964dd83b822b8301
SHA1 ac603bc67e5d3ad8a53820d2502a360980ca8e7e
SHA256 256ac91a896bd6117e0f5391c5407f5a1f9d67363fac9f450a10bdf41ec1c59c
SHA512 106200e0524421bf2cc8da86f9c6c717b0bc2fa9b2c33ffbf24929ed7589f8ce0e11640128c9c04b826755afe8e6f033a70aae7db85aceec0f04caf0e3f6a44b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B37F7AE1-F791-4780-A302-0D56A9061D21.le

MD5 2e9ebd231023250e87e4f5cda778b290
SHA1 f67c34a2f8930d619be71854abd5704dcf06aec6
SHA256 4b637344b2cdf78b17b02c6f844bd491ca10927ede0f4bc0cf57ac69bf903389
SHA512 ede62568870bcf50d6e24ddf9cc1e017e894a1983c480e08b4849a4bcb8acb2e133819c9225728bac8288bd23acba04d38fd43e71f5747bebe0f13ed4e2f3d22

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1263A412-C744-402a-A3E4-9F81D1071634.le

MD5 57770694f84d3da7ae23ed864d251b68
SHA1 012fe610be7872227335687fcf0df32cba8ed5e2
SHA256 3db3a30e6ec754cc66951fec077bcaedc4018bd27346cb2966a19725d206808d
SHA512 c5a5db9742262a9876e5e3ded3d9cc74b711815a91d64a311840bde658c36463710903bf02dc7c9c905ab65d21c2db286e3af2604615911e16a51037301183e0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D0E0FEC0-BFDE-48fb-B26E-6A8AFD391B9A.le

MD5 cf31055871b5c15af3d3c1334b3b715e
SHA1 0ef72b354c00a426cae05b2b89832cb80cc8cfd4
SHA256 8f51632757037dbec67acd95cac08a514ea47a6cf4e20cd422f189900db38b5e
SHA512 78fe55a71ccb5010cf1ed83ef238d7c37bb2ef920004565be0e77f697a1f1a546f3b2b135f242100319699bac717b3f778be929a39d1db7fde8148ea363ab576

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4E0380BB-C38B-48ab-A04B-593757E0339B.le

MD5 1fea723d48062dc8f87352e3c8c20d68
SHA1 3ce8424a14e34b2db4b6fb19b262709a2e567279
SHA256 1aab6d8d95123eef68414aa94d0ff2064b210e4c5d72e19138edf6880823b8b3
SHA512 ba2f41e724fede75a97f22240039b9bc329cab4a5c18d9c5e4681d1be45c5e703c74eb7b2ee9f7a06dd1e21062a6afc9f09193239b4040db003af27518e23bb4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4ED93DAC-2475-40b2-A77A-AF29A33384EF.le

MD5 7061ea5db377e491ace5f6b924089d9d
SHA1 b150853c38b818db3f1b5e779d5f499cf5771e9a
SHA256 17687273b474acbadd55b31b07acc7341bb4632e926942cde3351f449aaeffb4
SHA512 c792651a5217950935c4a336508f1b05730c950577f7ba10584c13e02325176c4eb2137dc1b168106bfe98f39ee2cc132f0ffc644a5a05dc3951788561715869

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B912E04-A3EB-4fec-852B-4575FBBF2980.le

MD5 3e01e1752741132e352022d23e4af627
SHA1 7bce14c1b9bcb21a9ddabe2df95aee527b0e2662
SHA256 28e20ba4b300e8f8bf1d985787cd11ce4a1ad5d240174559365d86e62978432a
SHA512 bc0f0c7be68deca5b1fd5c7f3556ebf0e31af35dbbf376876ea3a9063691671ae001b79949d9a967f085076438fdf24a097a57345ca3684ebb7a5a5b012c96fb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\84840307-472B-47a6-9C63-466288B2FFD5.le

MD5 d1f3d611265892bc1d5c63d23b6b748b
SHA1 3b2d72e63ebec931e501c1035e77f67676fca6c0
SHA256 9d47db0df9ac67d0b7eac2fe416b004a6988d7289f5fe217ea90ff28637ac066
SHA512 4d233cf4479bf9fc9265f8b0c744448d19f46fe9531ec4a3563033828b1f832d8d88535a2296be85f764e9475b24ac6e9bbb8cd599f83153b147a58285d7349e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\81C77B1C-2585-48ec-B5DD-2EA2E34D43C0.le

MD5 378f41f848a4bf40e9e3b2bdf0b9d6f9
SHA1 b306d9b28d9b357b0ac9ad8bef7a97d696ce4865
SHA256 55634c4f64d566e725378998074c185d70b731d3701a245803c855c5a3057c7b
SHA512 31225d2ce0eb7602508dd5f13e5d1d149d50675ad7407fa43965ef61d8144d5738660c041d093a989addbc0b9fba3e684fa74b95397a4764ea878ade6b76b0e9

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\48B12B9E-897D-4e50-85E0-883B76C0F88F.le

MD5 aa809a67ce5a90bcfd3a378d1ad34d38
SHA1 18d11c1bafe2bb56522e6d5c36c9bbc18bee7bfc
SHA256 f7f39430a3730aa53e72a316a3d57af0151d83add760198edceded3ee04ef183
SHA512 006382d87742384b9f3ffcd80d64f799414887b46cb1071d91f98648b16d99be565cff42aa4c364fd11d3943fd7ec4cea131b90f6e7edf485c82003ba5a76b82

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4C42BDD5-DCFE-4d60-ABE8-7E573C3E1F46.le

MD5 c4bbee9d2354439785f52c12453d7bbd
SHA1 ffe94ecaeb9239d8787e93df0129f3ff0fd2badc
SHA256 6a6f0914180b15fe45e6e3b5aed444dbbe4f03607037955d6095ef88c1442f99
SHA512 59f11dcb26fc31bc0252d5cea6a370964e8e21d5fe1868ed3041d11399fe6af315c48a23c216acdbff9b974955423236cc32978e95e40c1a8d387a7acca67e43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4B8FE201-4B61-4cf7-BBEB-D7B3EDC37326.le

MD5 a1e1ee0df629835dd821737534d77af7
SHA1 857499297d8506503815984f1068c5060ab64924
SHA256 518a902a36c2136869b5cdb50f90f1bd8e45d2976470d279827c6bf4e0d6f758
SHA512 82d0c18a1cbfb55b5cf1209888ab144ebf2431f31f4ac3303f7d6fa4399b7c67a62fb10d5418fd7e6283833681714cdb281750406277377c9cff96ed550515a0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\1E0EB05E-DE43-4143-8E41-A3EE9C486B03.le

MD5 c584ff3e4b8e2ea8fd013c732a9e8482
SHA1 beeaf2858ffc288f1dd609e1f0ecb5ed0f80e1a4
SHA256 41e0c8ebd44143252a2a01e5ff86538021edaa9d52c60b23af5a7cf6ab4ccf8d
SHA512 b34445ae46ddffc4abf1bb9ec6a11cbedc43b555eb46c86b45ba9a8ec4a85176164a84b5a874b7ccadc5f0e22df480884eeedfe89033dfb0f591abc2c8bcc89e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\77E996FB-044E-4e95-BEF3-1F9D19B994FF.le

MD5 f031d8c056a0bba4a26a39ec78374743
SHA1 eb1dcf57357fa1ff7215e8ae380f423807c10291
SHA256 94dd2fa8fb1dd724deb05fbfe6642a033566ef68c08e3557a112cd090cfc4464
SHA512 917731ca97d6ee370cb7d9c11f34c3ac9cd2df0eae0e495a030c96bc1c44a7e41fe87a8a42c0d93e2d51a7ddc611b71f2b9e7a6af3705735c8f3ef3019e2373f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\A311847B-D68B-477c-978E-AD68BB47FDE1.le

MD5 09ac7c196575f5f929cad6a4e019e648
SHA1 f5473fd4706d8f043a3da2d23e1b42e926cff939
SHA256 0282f54c9299733f22bcc572994ce3a80302066b993afd6996c76dd5d53cd492
SHA512 6887edc8ff0de56097bca1fe4a9062af3b288fa58457eb04a65a676695c1c52d1b77839e3bc9ab4113f987f94f6c2f2141e8f03be35068f32ed6f8736f454ef2

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\46818228-57DF-4d10-86D3-6FBD94E98ECB.le

MD5 8d960e4251ab80d53a2adcf604158231
SHA1 82bddd46b4030be8378fae8c878c922f4fa189ef
SHA256 251cb54ffe8d02cb9a9a56a1fe226e77301d573771dbdcad84479b5b5ff3e953
SHA512 7e45cdbfb113f5040a99a3d0d9e8350199207cdc08364545a03bf76eddcded4708039d8551980b8e36e82072e9bfaf2e4eba58b0bd32ee6c95e8517805913e79

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\51F4BB4C-82D4-442f-913C-715EFF89853C.le

MD5 04c9942a860926a81dbdad678da73a72
SHA1 1972c7965a250bc67085a7bf39b6459231f37b17
SHA256 6cbcf3e38bf69390872b2c0f91cacc913fda6f9197f465d41a89680b44790107
SHA512 24ced24aeced7c1fb92e311f2a6c57d6937ae0f64473eba4baf5e754e8ffb89cfa9ead8c66fac483510238040ab1cd019c40122d8b132840545244bcf1d0db5c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D641AFF3-3BE1-4022-AB1C-0ABD7F55989D.le

MD5 92e2c2a5221a940c4f8d122bb8af1902
SHA1 c5af8183040f685e1248a1c0e09a94b54d22c482
SHA256 156d713e26d0a160e1f618d84c6e1a1defe4dde03db88fdb939d51ee7b1eacbf
SHA512 56ab0fe29f8c8da49e35e61b2f10ada59941afcae7f30137b1217b7490f07a83a8901117e94ef9e026d5752ab1a5d6cf42ad11eb7a11d007d6987e23570a9918

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6C635C54-846F-4539-8AAC-765851E87A10.le

MD5 0a99c80a57b755bc8a56467870e53491
SHA1 7216ef4caf5967e06f9a656c2ca79212f2e1857b
SHA256 a728ab2e10450b163ed5d95d5ed03d532c867beeddc014b5c29707a1a2d0c99f
SHA512 74447830a2adc638811939aa8c8a3a9fdda13ee1f5c09c9d76598539efa3acae3481a78b69d4014ec3d4d7755844ab1ffe1f0aa449aad4a11cac13f7bffe5954

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F39846AE-6897-4b7e-A2C7-A32E1DFDDFD8.le

MD5 651cc40f4f51d3ada24538e92aaf1f55
SHA1 411319a7fa529c72727cce4baa3ae6163c02b0ba
SHA256 907d0abffa07b0a80e63b917823f9727626cca081b0ca5048378e319699ba1f4
SHA512 b2b3a4005aa6e339a70453b57bd3e51a08eda87af5f00e555f60a3b2c38221063d96b9d65c6b314ca5c4a8d64c5aebf593ae5b353acd930249e0872e481083e5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\4EC23E13-4653-49d9-A247-17BC309866BC.le

MD5 99cd71e2a284305812eca55a55dd0ce8
SHA1 337cc61361d5e5a112995d87cf76698e32c2ac19
SHA256 5008aefd17d4db4dd56c07042083af30977925267e576291b30b143247c7e0ee
SHA512 9ca46641d6eccbef8159fbd0eaea819102904c354ee26cb6783097dbade6e1b081146af908a5afc4fe25ffa48e1844590780bcccc785cf74ca00be7da2e0dafd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\31B50ED2-38A8-4b56-A98D-FAC1516E2E20.le

MD5 ec43439cc45817099e924e8bd45b7375
SHA1 9a4a01ed73978e2856322728aa259038268b844b
SHA256 03bd58b2a9286c25299b053ba9ffdc1ef8aeb7a2881247f7a3b7422e6b8a952c
SHA512 141204f49965d25a2e7349530c03c0a1118e8fc8aadb8689edebee27520c6132076b2b7521ce567e25316416307a5bcc8b6078b5836266ddfdd407e59054558b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\28832822-89DA-414c-802A-8BED4F944BD4.le

MD5 29054480f093815503c659887de7217d
SHA1 d928875780742fa3b8c60494ff3ab6155bde8112
SHA256 0d4e39365df0951fcb589cfa144610d146e349e870fc0c0bc70465093c691cf4
SHA512 2156d7bc15e4155cecfaaf9e4d3e6bdba6ffe764feb385b92ef89aaf8110ebf900205c1d12dde00ea3106da40fb95b03fdc942259c8e1fdb53f6f9124b7e3d61

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\B3E8785B-EA2B-4ac3-ABCD-0817127C4276.le

MD5 062d3cda4e0d71b1f7a963e62bac73d9
SHA1 2ea171a7fa4e29a9c5c7544c6c08657241b66ae7
SHA256 15b5097f7a8eba39851d16827f01f81862ed2b04e2b300dadaafcc6d49d40988
SHA512 6434982ccc1d8cf6c60b5cc74e8bb35a71c9186d990ed50ca359db3c7837537786e884ac2eb96078d46b145ff67d9b07839959663cb17ff632d99756631b602f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\AD8652EF-155C-4f6c-BA4E-306908DC0584.le

MD5 5e822cf8412da84180cd8cae03a1f4fa
SHA1 78de8bc517c59ed17df5a2daf167be33787657ba
SHA256 9b11fcffac97c2302b8bb00320258f11eccb556b0c1c9ec045e3e770390fb21b
SHA512 eeb4a4d75ed4edb922887cdfbc70c72bd86dd8048e47a7ec833176aa5c89c75e97a77e2fd8b41c7b855abfd54d85aa64d89935c8665f6b5b04a77fcfdc45c8ee

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\6A7D46FF-324B-4498-ADB4-3043D879EDD5.le

MD5 15fb101d9141951a18142a3af1476506
SHA1 da9bee564d730e46d01c9f2d11c10bc4ee34a7ac
SHA256 6a02716f1a52c51bf978721419a7f893a683ed10116173b080d6477c6280fcd6
SHA512 614b645af55d9ab1f2b5e696cb7cbfbc33397a33db46ada538b0e6db94b770c8f4568ba2009bae2cda8a6919a2f9a7a4cfce1a1b8bd863b6b3057835eef74524

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\E38935F8-621F-4af9-989F-73F29FE93675.le

MD5 6beb4a50f06daf144a84fc404efb8764
SHA1 0fb42bd2c58f0be8cc4aa74022ae0a9f741c6875
SHA256 229e9bce7d12e9affc58e1c489f0e98205c73cc8c45422d5ad1c7ebe71408df1
SHA512 f2eb600ad6ce96167954b7e83bb637ae6867a1394d4510e93280253de5b2cae09758a18dd281de07afc0001716cd96887d344bc6fc52c41a12e8ab4bf5a34eb4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\CEDAA65F-E9AB-4ced-BE76-974E4F56DE4B.le

MD5 7abeb1f85f243a852085edeb91772b8a
SHA1 a835e1f82d0ee4840ed4096b8a16d2abbd38209f
SHA256 c14fee2fd8f046f1a39ed33e120e74e01974ef3d70418a277c5a512cf44b0dfb
SHA512 170836b4fed091a738b11a77fd9c0087d26ad4f03e6b67c30c5a6ca4b6ce17a3f815ac0caded2a85479aa9f64794d0ef2693b4a36e15a4689685e702fb6d2831

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\D6F9B55C-8B54-485d-8C16-EDCD691D74AE.le

MD5 29e91bebb036a3b717471ea5048a56d7
SHA1 dcd8c73e813c48ecba92f93d45fee8f7383ba36e
SHA256 3543eead879c6de4bd9322d3a137ddef97bc2831701e3060591af162db4a61f6
SHA512 9c6922ca678f4630bac20a34bb8ba201f39b8726c767420a6eee0814052e513bc26069772d91f8a02250bc4b27b20be60252710035b95fd1fb2909e772580475

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\0795CBB3-C232-4914-9424-E614E4C9F688.le

MD5 726001a71e89d252b36d324432b537d3
SHA1 92266020da22dbd3fbe4246f8f80e17f78fa927a
SHA256 6b6de2ad7efad51d481aca90db831da859907107ea1bdfbb76bf2fc6544337a4
SHA512 08da4c7e8504fecd2df7102a856aa7f709f4f7609ac8c4013a3f1d3f54ee761c834130df69003e4fa643b754948f44d3d7e68d53102265dc9f3fc3b816174921

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\7F31C6F4-DBAF-4eb6-A2A3-7A6251495F1A.le

MD5 705edcc5f0b4b4d372759b5e213d9a94
SHA1 34caa16585743e4390b0021fd2e255ccaf173aaa
SHA256 8eda684584fa2c20a34adae83f72ea4d1839c2dadbcf519869f4699a323cc22b
SHA512 a05a34f87725639fd5db447eff845305d916c66d410590f27e99f15c5dd0fa61323c9f0cde527ea5a3c22a5dd90bb1146f193b85961be9146aad6b4cf6368602

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\F6686425-3D58-45ea-81F5-047D4CD725B6.le

MD5 1b7f2f59c3ecec52b2c50f480d13423a
SHA1 98b34c88e005987f37d7a5b758fb656d301c01cc
SHA256 b6d367647507c6ea6fdaf15d958b70ac12cebb37c06c8707d81b801a01f6c116
SHA512 e135a654074a4c73f34d8e44d1be91effdceb1396809fc7870f8ab9eafef8db4eef7907383e73da88a6d33a10d5d24145c1695ba018dc3ebff1c645c6ac38f96

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\9026B029-F1D1-4cff-9478-775D082ADBAF.le

MD5 d873c1b533c346433f8231ddfcf36382
SHA1 df5872e38910cc0240bb363c7ca905170530eb4d
SHA256 6d31f08555770acb9a9783759725f0be6606a6a2b847fa092228ea22c24a94ab
SHA512 0143a91461b9ed96b13ba14459f5c0d92abb33e3cb5aaeaff54b7f73e23c16f31c0f00f49fd8ef09c6c30196b203567b3574da36fcfcc06ad57563251462cc76

C:\Users\Admin\AppData\Local\Temp\78c36da4-26e1-4ed8-ba74-086b6befa769.tmp.le

MD5 0064bbed7c94b48d3c8c1f674a6b3f13
SHA1 a74eeba4ca628616c09832bd1ec6fbf3b4d5d79e
SHA256 dba6a061c3a19b57276ff324ca4ec2d26e7490327b4ef43523d57e289365d23f
SHA512 9cc208164cd001546643f46f207a22a5a1f7183e577e50be397172a5a2279176e378d4bbe37a974a39833de5409d7d0e5514f45156c4f8349587376d2a2ed968

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FFE79BDB-FCBA-4faa-94F8-BC6FA58F6804.cms

MD5 3192155ef49dfaf2f38e1b84b3a07e80
SHA1 8bb4f824f3c07d5d0a0250f7ba5ffd1b58bce58c
SHA256 ddf5d388310dfb13c50eaeeec3e2099af2c082647a02169e186194a704f5cedf
SHA512 6ac607dcc4949c6b3b8be457895ccd4611546712218da0d216b6fb665c34d686b065791bce38521a6f441d07940955a0073e0e78225d59913e1010608f880afb

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\89C2F754-EA98-42e5-8043-7A053D99C3CF.cms

MD5 a6e160f638504150555adbe33c67f8a8
SHA1 f05d827b5a8f66e4d52947c25339a25cb68a25d5
SHA256 129a4657d1a4ff286e249c3fa1deea915095a608935db67053b60baa831021b9
SHA512 b4ce92889a08fc077f8fbe45c1e61e2e030947ffbf13fae8a6433ab61f5f226ae8a327b2a6c7a82a9df5fb3808e561bb2a265f976438a5b03d9aa2631262a9b3

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7015D73B-8CA7-4a58-BB47-022F9C80E109.cms

MD5 0f3f761dfd1977a964a2ddb14e08384e
SHA1 28af3e71bbcbd2892f5d4a64dc7db39319955a05
SHA256 2c75d7f043c82e362394fdfe67bb7258edea44404b3679399f4f8cd796be7c6f
SHA512 414a2ce8caed8e8d2255de3fabbb28cb65509094773c578776857a47f64acd809c646cd09de2b80ae0452c858a6d13997598d46da94c24cfc67c2489750ad7d5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F5E9C6C3-5989-4ffb-BEF0-FA888F5B1201.cms

MD5 0bc07b015c363d614af8209ff5a6e9b6
SHA1 09ed2a2b90fad14cb82de26e168c13e0ff557d61
SHA256 a59ebd767d02354dd869e93fef143a42f44c5f1c39ed9062687c159f3db73275
SHA512 e178ca42b10bda16f41ebf59e4f1f44570fb0b9bcd96b2a96979a1eda2bfc74cf279dda1e5247494f4e9943f9063c67bdce58404c79c6c6763a0ef5b9e7ecbea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7A14C12D-2708-49ef-8BED-273C9A709FD8.cms

MD5 f47da4bc7fe39c3ed091399f990736f6
SHA1 9a8c62e6a123b13a9914956dfd9a765eb9d34efb
SHA256 644ee66e18969db6cfe5e42b2278854f2ec8020facb4ef49b8c0b688355a63aa
SHA512 c27e1e83413c558bcb3bd7d133c895a9714d4c92a18658703c248f4f99f016f9ed6defb3c91cb064b4c892150427464e2ae4367ec2508d2cec65a99a2526b2d7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0F564880-EE9B-46c4-99ED-44E60EB2EF4C.cms

MD5 2e9402ebfa2a3005d228c646308aa613
SHA1 dd12e29f4e4bc2055abef950fd73c300365e713c
SHA256 a014e4cd8cc4763ac50a333464cf718a27205fc5c814bfe4d90723e7a3f91729
SHA512 e17fb871a791774c2489cbb25b3c1f85a0ab838549b671a7aeaf6338605f478607ecfa42ea75499dbc58d8f523e51bafcc334ce40e8e66dabcb42c3155195ccf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\78ADEF0D-06C5-4812-B447-64E1616CA2A5.cms

MD5 5f960759c9e781f5c20385a478d7f968
SHA1 6a422755eb4e81060a9ca30bcfad2f112bbe7d38
SHA256 6f910fbc1a8826e52dde4a3de0c66ffca755fdb4648c6c5c287b5d8847a44cd3
SHA512 6101ae98ce2b62ea7585ecc25890bf901a34f0afe89646353f6846cb53cd5e4480ded0300999c56a4dd608dfc17acda6ffcaad7c5cafc384cd48f5f6f5ec3119

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3A283973-0B48-460e-82F5-34CD671862CD.cms

MD5 db5803d2c79498c16015f8ad6e88164a
SHA1 199ae61ad676b0960af8ffd9adf889f451f7f65c
SHA256 2b2ab5e98388eacdb2dd6edc169e91c0d4a9d72a4b629e16589fcb09070059a6
SHA512 6b2ff569cbf53e38b9851fc868a278f75ae59bce3221e90588fee9ce1bb46e947c557e7bf001145548e5505acd765faeaad6040248edf5574f8169df57277887

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\93E84C08-2E8A-4220-B25D-152994A02BAC.cms

MD5 c104f5d2acf921791c7a30b2c1c50798
SHA1 0831a74b8353b9c48db44f447cdb6deb96946114
SHA256 f3c62e12d264df3901f8fe30a2db6b994826bb531493ad95769842539a82bba2
SHA512 99528db60d214e20549de0a63bad000ebaa952c48d275e6bdb9830c652003b356a60c849ace620ba46e53eff8277846321a41a659aefeb12fb82b7d294006138

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D3EEEB5F-8697-4b25-9DE7-A751B3B0C9C9.cms

MD5 4148908c31157f78670a69d3912190a7
SHA1 0940384da9b819373856ae7a12da2f607cfa3413
SHA256 e696cd4fd75f337869917ce0cd1f9493cfa129d37c36ef7fc51ad990bdf9ce7d
SHA512 7a35bd6b5f21d2828e99705ff0347e4e43c05e305daec19412dd462e49c452684f6ce02393f1df5122ba682fc52fa3741dbeac861672c7542bc8f7dd4aeed330

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A6E7A1E0-993E-4484-86F7-7E406F1C558D.cms

MD5 5eaad0136161bc8c949c337af476071e
SHA1 e498dea795b3540c417532426b0fbb5b791624ab
SHA256 1beb19b67799bcbfb7480daf72ce4a1e16a7a1b2960c218ec87bc7478960bb93
SHA512 c2f99fed1660d8d712c082e67ca3a753efa2b5fb7388b13859cdf2ea48f08a4231d5581343d93d8103f1ed902cd79091d4a1d3af21d5af9f7c90cf3114c10236

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\17538F72-3FB9-443b-A610-A3A882EF61FC.cms

MD5 1b91649d5e3d35203c6e53c2eb88925f
SHA1 d91b13ebd6f0fb8ba04c6752a8dccd96aaa051f2
SHA256 812c4b8b6bf7f40fe44d42281aad361f0b0d7758fad587f9c3daefce1a1422d9
SHA512 b34477cc37f735ff08042c588486cf0293879721377087ba95af98bd5f5fd14e48da19b04e8f952c967f90af86bc800c5325611a931677f1d986924927a497cc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E743CD12-8B24-4128-BBFA-E406C3BD2D01.cms

MD5 26298493f7fb560a8a5e6c0ff3172ad2
SHA1 b8e22d06404c4be96301ee33ed55e5103c715b3d
SHA256 8f16828e6b43e4d6975bb1049f5c5e30ca52e82c5476ef475b098d1ce85123aa
SHA512 cf7184dfbae2c8d712ccd59693a8865fb07ccbbb31666816d9a62e94505f54d28dc96f3baf6eb1c893ad73b01d46dd1c587ff0e2dc344f9348468cec739d0a69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FA2BA166-C8CE-4f75-92C2-F6B99F0B88AE.cms

MD5 3ebe9c31699552017505c7126bf8bf8b
SHA1 df99fc9802935287dae3eb0ba6fb0d0aecd86f73
SHA256 6e96fe98b1e72c973de11207a366738e0cae705780ab457ae2e14aeac99fbb8a
SHA512 90ab3862a53a9af86b48caa24467b4b1505b121e7c05140e7395767aed7c8f458041231709ad18803de891553ea74fc55a60f5ac0ca2a7667b3c674aa32eb43b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F9560536-D3AE-4326-AA65-4298DFF9FA95.cms

MD5 5c87f567e0583832601e1c93e6c8c2bb
SHA1 e7b70c2f07d402c9ee5cbab04a02fbdb1722ea85
SHA256 788514d08ed699d1f6e2c2dd2d33304aa3bb386b51e96babc3be9517ca3d972c
SHA512 8507a5a028a22b663ad9a9af125b9dd415c2c560fdb8f4f7a386f9962396f87b3e847f2cdd19f9f62bea9741f59a291dbb1e0b5020bb36b5457d03ef164b4765

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D941D80B-62B8-41c4-BE26-7F39F8276FC5.cms

MD5 4f23d7dbf11807c16bcf077f1847119a
SHA1 fd982892bad5bd15d43b40e01672c9293f3edf1d
SHA256 91e75a784cf97ec552f17fbc4d04ad588ec503259e9ab4113a8c8e1278370beb
SHA512 266d488039723be1a855a5b632a8988924dd89c0d68ff59a53e2992e1b3cf7383e8e32fbfc0f02071c4158745c145e63bc7e10ec09fb3559ce1381e3e6c607be

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\45104374-7EA9-4552-8423-83E7E9BA9B9F.cms

MD5 344799a1e9ca782880ce1b432b6141f3
SHA1 13ece905dce569364fed71a4fb8047bf72f8f5ff
SHA256 7938105d9f92d985d40c870ad89a76e90f43e644a12878c3aaa89bee4a9f97bf
SHA512 60de166cc862c44f1b37bccccd26e19870e7259f5378276131e75d626e6e950245ae7e7b5aaaf3b3a18028abc4d266c9728a31a083325c763bd54258a76630ac

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3AEFF452-EFD6-4023-9C75-303049F309CB.cms

MD5 20e48a0bb370c8600068b3f8bd6f5ea7
SHA1 1ae8e6a3a96f3d28d62df6d8264e42e0f9ddac17
SHA256 3c6d9d20246106640e6797652ef63ed9c010f7ad676b8cf09bb3904853070a96
SHA512 9f2c5e43fd3e91827f58fb1dc2e3fe36270f9e4b160d314662c888277c75e5f0fd8955c529027f337156fe54643711ca8289fc9ecc89ad07c13ecefd084dd55d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\06334EC6-F0A2-438a-A70E-3EE2E961BCBC.cms

MD5 2c73f139a35ee7077f6528daf45ab930
SHA1 606f02725bbe034ad213e87648823f32b07033fb
SHA256 b5b1917455211d6e16951c72bc84d9f34c0988d64661e761a832e73862473386
SHA512 05f4b4ee58892dab0dbc4e6c3cfde13054026e16d091cd9131ac1249ad041a6d0fde7b6a3e7c20dfaef97e24d89e79f1bb44f87063a3a223f6925aba6f4b0362

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C65AE605-81E9-48d2-9591-42BC474EDC7C.cms

MD5 92d66a759e68967e1aee0ad1646adba8
SHA1 5335f1580a9bde54bb7087eab3f5d88f6afff9c5
SHA256 ebfdcf9f72a954ea613b5035f23523bb1f6f28d9fb4801310c287553007a67eb
SHA512 38641e9a0caf2a93b47a0f86f41781a2bdd59ba23c25d7c1c2a8fdc7ced25359465069ed6a1730ff2aae3cd6afcd8ebc359afb1203c1056c6f6f01532760a155

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F340BB4B-9BFA-44c6-86FB-DCD1075BBD6E.cms

MD5 6100f43330e48697fb30ea059259cabb
SHA1 940cf1e62ee49d804a579029994573db73ea181c
SHA256 0ca0a7f8ddd08cf533c0fd400efe840268a4337cc03c7baae64fdad9dbac670d
SHA512 e11601f3b8b388a0bf06795da65e47b6f0c266189fc90d5a9410e75fd69a728690b2729f5e89af33b039cc1efb25dd700e80390db1a09a680feacc9f79c4e4dd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\B27EF080-90BB-4521-A19E-1D40BB9D8AC3.cms

MD5 4e12909265721630bea1930c4f0e0aab
SHA1 c3187b03f08bc05a01eb65bcc334ed56525cdb75
SHA256 1771c46a3d48994c2a3381a2a7b0ab2a197aeb18996c7f5b102ad45e73ab8c95
SHA512 b58630f8e1aec2451f54c011c61a36365ee7b737536d99a4935f780341c6e5d518816145a0b0cff6cff64760846c1f6069f71582b45d4966053ba5b8bd2393c4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\D001FCCC-EEE7-4b02-A680-72CD92262F9D.cms

MD5 c874dad088e797a37a77e0411c10dcf1
SHA1 8b9eff551d01c61a8f23b2644709598f4b3dd77a
SHA256 01f3e033519a55fc01006ff822dc8b708c9df3609f55f8ae6a88bd5f7183ac49
SHA512 9459917f1eca4f9a6c2830749b14ecb0e9d563d0b7abc895bd0664a175d704fd7aabb5107c5c683473e4e0a56babf3e47651052271db17b33da8ff25d4a47acd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\5978C6FC-DE85-4cd2-A2CB-84E8CDB5B3A1.cms

MD5 559d365ed81295c89f7f55ce9d84565d
SHA1 6f0dc099c2754fd30a32874b891f71f3ae483d95
SHA256 7373a0272c38659a5957ec371b33c3834b80636bd91b28ef89088863e82ceef6
SHA512 a0f172052166aa3b1afa6cce4cb60b24c6c71b58610d61ea6116191c936296f3d102bce5dc59bb880225f171502b8ca3145b0c03272699e33e2fb212c9e20d63

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0C6D11EF-7941-4c28-A8F5-892369816721.cms

MD5 bac11d84b5d7cc1f634b54d907d588bd
SHA1 d9eafd4f42584f00f378a36febfbce854afbdbaa
SHA256 e7ac3d0ce1599e3db60b785219c29def33606151758f96f640a82992b6fc7520
SHA512 7aa2748dc2e04249c18ab6ef00caaf3d076070334f03f275952ff231a82958e778c8d69c56a5ee094f43fe400538524754306ea7f1ac240caff894dff1f373e5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\3F7340A9-1CBA-4679-92B2-860FE2A3CDDE.cms

MD5 05c320ed8c463ee1ad08273e62611708
SHA1 d0a904dca9db1fbf963097a0d566b7d0b33fd6a7
SHA256 79a5e94891ffa61263ca876aba7869ead68edf83d096868c6c0deed415048cf2
SHA512 ae3ae06e5bd7cb1530a68e288f163945b9bea20effdc91b43f16048e27378e8734a13ba5cf729f5f9db759871bda22a8fcfed3e7f4eb7f5a63c77dd8aed11a5b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FECB8D89-03EC-4ae5-BBC6-09AEF40BF382.cms

MD5 04cdd0ede4283eaef96c7dc962602b65
SHA1 03f7a1a502c3ecffc0928b8266de18ed1f536019
SHA256 5b0d4e66b548d7b8aaae4ff0ef983ba18430e4b03da38e590696614173c40633
SHA512 93d9430524d8a2c556a8f0fa8466c9e7ac3b22723c281e5e2b37a7fa4af9af56a1a4bd433902e2cca8f6349d51b271076a6c7f35546e36386580e4ca3857d775

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\613E43FB-DAE2-43a6-BDD1-94AE177EAE84.cms

MD5 956319d6960115e6c6bcd9ef0f900c1c
SHA1 f48d2014438689e9bfea3f9f96eb4f7dc990c04c
SHA256 921371a800d24c1526f6c928efe91d6b8040cd3694a6a8d77dbac63c05306bf1
SHA512 378cffad84fd4745bb51ea38e3cfd04c60af78419b6281ceaae40b28bec9478b92bca8f2cd84f2d0a25c96ad3a8660e28623c4aa40358e3df2d5a8c245c24007

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\74CF7A80-EB4C-4923-9E0F-EC9AE9ACCD71.cms

MD5 bba7447553c0a390a0b8929b9a9f4fc3
SHA1 722074ed15e18237179026b4c6192ae69d14c41b
SHA256 47af5c4bfbfdf79894e91f73d36d39ef58ce06dac9600bac28a06f3dd74f7866
SHA512 f37f5d1f06706092d746ecf1b0c8deccbc8d346a7088454956298734205160d09b4df6a00545939631d4259dbae3b6d86ee5a4deeed4f9fbb8e8c2cfa561cd43

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F7B89178-6467-4d0a-90A5-F9552A753415.cms

MD5 4783c7031a959db0b5cecce726ef5ebc
SHA1 5a47cd6ce58901ab26882ce4ea7db08d4cd4451d
SHA256 665b12abb021b7f50963a0c1c74b6ab805d4e22d165c1eb5c1373967d14fd3ef
SHA512 478d81f7bdb639fefa47fb9b81cfb8a0a88d40ccac910870927afee92b2b18f5ba77f4efe3cee621cf704004cb75a3fbf7ea12eb4593399be7c6894eff7aef94

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9C5BB1D6-2421-4100-8717-593C5C74E230.cms

MD5 dd116109cf77f52d72de67cbe0b2dea9
SHA1 ee746b18ffcac160b55d33f6aa1a02510f7ab406
SHA256 948d53af74292a1d05b03c260f0348fc9553d676dccdfc33a37355bb17209551
SHA512 fbc62d0787c9e2875420119345ded9ed221dc53675149d8e2acce946ddd9dea939a7bbd9957aea917970e4d2591d7e43d4d39f7608cc83d383b0db1749a1aab6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\1C656883-D293-4101-8040-BA479DFCAE17.cms

MD5 a2a4dad1368e1fb81d4ae128c654cd3a
SHA1 03195bac1e62817302a6b9879e5b3f2293b1de9f
SHA256 b3a9d76c8cfc86af98f40ad33d0488ae4cb31c0cd767ffbf10e80170846dddfc
SHA512 ef5469d77cddceaaee5a082d6a77f088cc11e85e9d585b134eaa16d32a9324caf4e4e3d954fdfd0608c9e458106861918e0e3916521bddd5c4667a24434a446e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2D10C713-3131-43c7-9B23-64F603D5CA2F.cms

MD5 5b934d0faf535ffd5987d027e212bb9e
SHA1 8fd44617a5b9071ce568154406b1db58d1fa78c9
SHA256 85a60c155d2ba7f4094d8e7adeb8de6430416e642378ff8fdedb759fe9655ef1
SHA512 aefd8a87a3264b07c8f1893f8884b4892ad8312d4662416ed8911f19b5a418b98ad1e488e775cd0a02e4975bb3b649cbe4d8eec5ee1a2dddc80a23564956ef69

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9878D070-EF62-4493-95F2-3B115AC94747.cms

MD5 85935a1d8de22e627e3f2f1d99ae6236
SHA1 04fa38e7888ca0da0b01fa1cb97cb43aa4c298ce
SHA256 c2c2141bc346d50eb86258ca9622e9646d074b141d86c31270652b031051486a
SHA512 ed2ec4383698679456750330f67c17adb1cda57025636e51c31d600ce84b50e9b87c91ff228baa5e11537e1dff9d5912157f5ae13119a39c2bfaf39aee288148

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2BA7BE69-0898-426c-979B-15FB311C929C.cms

MD5 ef02f2c3e99060e53964c6bf509e4859
SHA1 8529969c17c89e1c370e39193e19ce68dd8d4c65
SHA256 ec190bfc1eefdb3e6507574dff99d42e7658e460fbaf4c1ada9ea22ce6a2b159
SHA512 87c36091c707986c6e9ae1023dbeb52226748c691c650dfbee2527d48f86ded6b280ae4a45d5629d69ce6a757b57e5f996c74c6f096358b085325973c6f0fe60

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\F587AE87-B001-438c-8B11-3D749651B0D7.cms

MD5 785ce28559f6657f23a4d9b8139bbfc3
SHA1 e069b112fb3153bf94dc28911cc669b61f9819f3
SHA256 a380b00e2661dc21e6eea7219cad53ce8914c593139dfda13d93fd11065f3b12
SHA512 2d6af0ca09d8ccba836bb9025bc0f3e6393f2132ef47216463bc78c1b02410e0759b0f211b1e8af9624aa8d5178744e48dd722f236aa8846af2262e1380fece8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\7416E872-540C-4841-9165-FEF929380961.cms

MD5 8e51efa94def8c64738318f18cae4062
SHA1 b3b3bb266e25897498806adef046e6e56c8ada26
SHA256 0c0a4bd318660db72b2c6408e5db9ee1491d33051eb2f5280848f98b74f742da
SHA512 e4af0762a913a39d4d09e98e847dcb15791739a87dc89a12cecd23efa6559433fc45bb4f75f27f3a66702cf5f8a3fe209ef30022406f733c3c5556accde5e68e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9447D602-6720-4e2d-920F-002A10167248.cms

MD5 67cfc140a80ec7645a1d2db087f0ac11
SHA1 3d407956bce29ad1cc15aeec9105e3e87a9356f3
SHA256 170c601ef33723d5a128d7959292f4f5af7b98f178234ac21b1a918b13c682fa
SHA512 43ddef868f265a6e2e03414e339b5083e5fa7e5fc262ea314af13580ffda56a08b5e0f0bf00a98fefdcbd4232c2818f322a27909b2366958a2a6e34d29597153

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A68DD1B9-29D8-4e16-B267-BCDF5C4B969E.cms

MD5 728c39c728c72ed07e4af3438b0c28d2
SHA1 0a13357785b5cafbb92dd8f830cb12259be281a4
SHA256 9c7f952cbc2dd2ff3aa623f5018869433d0c0ea7f6322b048a40a01b0983a33a
SHA512 c09e69d0784d01fbb8c2f2ebbd18cd2ff30b1c129379bb60db13576972519c9be20d9382572baab3751478482100b29986a2b6d7652748d280c6cc39215cfb68

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AF3703AF-43B4-4a9d-8299-0D7260B8538E.cms

MD5 b269b6a175c6b9660ad7e65dde3ccecf
SHA1 29fecb355eed9379b7438811d74ce9d174617550
SHA256 2246fde68a2250cfa0a64e59836fce9f73384c3e2681905550273af531c9f310
SHA512 3f308255a7d610e376ffbdc6f1a92195de32a8172b5cdb985c6d680c262b6ec0bb70d51671b93f9dc8e14bea0ba40ce362dcc74a5ae00b207200ccd7ebb732b7

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\058C16CB-640E-400b-B532-F11F1A011E3D.cms

MD5 7b62cc8b745e9cc838c8e00d1f49aa4d
SHA1 0b4dc282c467a7bd8d4a061c7c873afe21ed6d24
SHA256 df2be2e73adbd5959c33c368ca8585797ee97855e726e4551e98c3de5fae25fc
SHA512 787f1825f68bdb143ee9a75634b7fd5c0cb6036c8ed0bbf3f06ef185ea53c251889980b28ef17cf92e2261733fbc3e1ec4fc0694daa7b1ca0b0a6a039e0c7262

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\0EBDB6BC-4CB1-46d2-94FB-9733F8408B71.cms

MD5 4f9111d8f7f5098a553f5703111e238f
SHA1 16b6dd924169235c10d4746e92a63d776604262d
SHA256 11c0bac0507373c5b17ec09a94111c2b0424dabb4c5841fdefa4ad9eb83cf47e
SHA512 0db02f741a5bf498c2f9555870f88c440d73e1d8b48a002da74ce5967ef16d69cb440c9b138958426f6b0e9c016280edf2db2f94daa1df548383f7edc80e2188

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C4722B69-94AF-471f-90E5-B112BDE51C8B.cms

MD5 7367dabe0af8eee15817afb7211f7227
SHA1 aac3fce9b00bbad20245984ea7d5bf98943f9995
SHA256 bd83f8596cd981278995952c6bf14ee4baa0f7e0476737140fc2f408700f3804
SHA512 d09fea49c233719ee50df097e028d8ef1b1d9e5df2faee312635691551be00161195ad7658c23c9b99667f35001eced35a5884a12f2c9b9708a288d49f645e04

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CC8F3C48-0D00-471e-8365-968648D1D329.cms

MD5 28d815b82872b23d6f3fac4919424d0f
SHA1 0e0bece09fc0d318786668b1052036bb282cbef3
SHA256 60364e2b3facc58c1629b7286306d9d318d52ce51b77e20abd14858d0d5903d6
SHA512 0437ecdff4adcf33f72137b26d4e5c4e006a9ef0f27c61bf5f64d29532ef62cc78d1e3289665c2e00b0856d66179bbb3689c23d4efea9158e61f7f49fda55bd8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6674CB37-99F0-47a7-B548-F157EE34E347.cms

MD5 9ba0781b4591c9bf69c8b040b72910b5
SHA1 84409f7e7aceff2cc1f5970681f5ddaddc63e23e
SHA256 c127e4edbf21d20c63db4b1548b23af2390b1c73110551c57f57ba69be2687fb
SHA512 3d19cd3ced90d876e512b1aff72be9b27f6ba6e193b3cdb8780be9ecf48f7feb54a05ebcbd1a335def1eb02ae2b5855084e402b042f4aea0fda2b3acaae5e74e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\93619a13-8e5c-4c74-bb50-4e0821dea2f9.cms

MD5 08b34509e74fb93b96bdc0c1ceb791b6
SHA1 9f81b21e327d907e005313ed592b927019c332fb
SHA256 8d0bb6e4fc2a83e219a11948305e9e9e52b82d91846ed936698a3e8cf4175fea
SHA512 ca133aaeb2e3afb679da633c76bad2acb10b1ec3460a5323bb29d23c786ddbcc4533628d04e3f164617ebf6e18f18806e3d8ff91d4536431144d81ec25b5215b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\63C04E2E-D0EB-4fd2-AF29-D27B4F577F30.cms

MD5 2f37044da743ea2fecacff61b5e9f150
SHA1 69dd2f8d1c0b5e18e3e2e38137948ac19ff5f4f7
SHA256 26da0a8007c7a6137f59cdaf46250dc317e223a0355c563ff275c499c64cc8ef
SHA512 3f08f44923c278d2721516e3589a4ae7ca61d682cae53e47598e4ea48867439ec140bfb2de4970fe35b1ec50840187a43de45b6a00e6702c79f206ad68abe657

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\FE2EA40A-003E-4429-ACF3-DE55948FAF51.cms

MD5 84645472e61d4fc2cbe176ea26f66e6f
SHA1 457b14995b865250b0dee838d1403ec062fdc905
SHA256 b9945b6500bdd7fe4c011b5570016db0cdb9ead3af77eb599cd0bb8029f7cd3e
SHA512 a124d0b7efbbd6f29e7001a3676a30a939ca4e8c6306c91f2dfa3c31c23eea77e2e55b6253c6ef64557a691c2565ebce736022f382f93d0deeedd03f896c57ea

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\CCD30162-E6BE-43fe-B79C-5BCD4032168C.cms

MD5 90d927442fb831af4bda809288ea00b2
SHA1 91001518f92050a1b02091a717e4269c09361603
SHA256 be7edfc44e75193c7ec5717cded1c7bb6a498c60200fedebc6cf44212fc80821
SHA512 3ec1c34d8e3eb5d550194dc84dd249e4cf3056fb39cb8a3586db41c0d10c794d96dabc2627117d88becba3fd58126decea4c7f317fdff4abe443699b6681b453

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\29051C6F-071F-41c2-9F94-3189178BD985.cms

MD5 13b1fda60fe08576d13923c4d92c669f
SHA1 6cc73a29ee0c246739ee8829521a2f9ebecf8fc6
SHA256 0345f3cce21222d6d41f2834490fa3faae8b2e39be1cc43a737b3d1ba77d2a25
SHA512 6786c86acb3e97b5986708d8d704b3fbaf3c6d74f94358cbc44eeee0bf9d42bdedf8f03af4ced69991479c25fb0a0453258ce6492d12dd5d756970b79c4a4594

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\8FF84F5B-1EE5-453e-84E2-23571A0C7BE2.cms

MD5 40809998fc9be6f56900524948bf4c5c
SHA1 40436906ad9a89baf0f49ea2dcb7ff6e8f7336d9
SHA256 3844db52ec58e99094bea1c2d492f02dd13456b31281b06c293d17cbcee06874
SHA512 da0f2828e7996df127b47571e8e150af02b058dbed8325878466ee7cdc9b1ce1da572cd0946518efd1074d383fecbfb77dceab389a50100965fd12db97ee72b4

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\2343091A-3841-47bd-BFEE-4577E806489D.cms

MD5 c80a4c12e240cd13a620c8d7035f3ee3
SHA1 b1206bb5474c5443c3907732882776153b0efe8b
SHA256 62f8e92bb051ef911d3d3b96a610d46c2d0922058cf17c7eb5afec2a66e35130
SHA512 3775653b7694d6b7d28ccbe04c3825125d8900b9de5ac7eda4fd399f96b6f3f4c095c9a1123a2d158685736496e04014abacd7193ad7f98b9af063d9377fb58c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\795FC7AB-3614-4806-9A81-6B44FFB3C3D7.cms

MD5 dc625f5f30531ae604aa1bbe25ca91b0
SHA1 c303798340e6bf800361eca2f6678cf1a2754874
SHA256 e19c7670d80f7a538c83b8ec5b8fdf89f13f29ed8ed698a93a5bbe4713b93727
SHA512 655d2c50bc0383256bea83ad09a2df51418a2e7546d1161dbceb14d3f0898e655dead88f6539d430aec688977035b3328275db61e216cc3a60d9463087e537a0

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AE555895-2697-448b-B9D8-0B0E58080FAB.cms

MD5 2851a1738c2fc5a0a58aff80916e5858
SHA1 22a4a390a212c3da2ab7495dc9331cc84d429419
SHA256 52a59d0fb2f2324f2509fdebb99f054eed24ecaca3031fb9618aead334f0d986
SHA512 df09ce293ab8b7cd503dd9da36414276b74c062c27b7919a70d7ed17ab6aa457318d8eb30e526650dcc3ce06287a0cd50581d4d3ae572c092d28559d44114645

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\E6F1432D-A58E-414f-A400-0BE7DAF00D1A.cms

MD5 415816c205597d521c4882a0aacbb5d0
SHA1 0fbabf0281f030e0290a66c9af3d9fb83c12d932
SHA256 c0cac3151fdbc560519f96d77f6a470b6cdebbed36f18605afe2310126160344
SHA512 49cf8406b69609ba5d5f5f6b88fc2a96ce4adfa80977dcc1f09424d40b3664f11e1244140889a40310b24b5abd3191953d32523486f63ab0ebf60d3d20b4bd56

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\6252D73B-DA78-4c7e-8D04-3C2DADD43BDB.cms

MD5 755b561006ea60e0d05b98bc266ce60f
SHA1 0e67a4de11422602f7b50819083962ea07c2d3b7
SHA256 c65c409c6e599fd7e337c4a9ad5ac7ead84ca6528665a53b95630821f42a991d
SHA512 c9af4508b1b0c9d09273aeebb12ee386f5ae4f3b69fb04e90a5fe8049db9de7b770aa513afc2485b800557fb3df2b872248e977377d17bbbd4bad3be0fb3047e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AC618063-C441-4242-B1BB-03B88B6B93BF.cms

MD5 9ef9343114cf570bd008b97b89d7f195
SHA1 729572caca273d9a3607e4e811963a0e1c1308b4
SHA256 a33dae0f2fd67e050bfdb1fab62b7fadf66dccd94e5ff162e346d907693b2810
SHA512 c56234ee60c3176b95a1784c68a42c3c58a923598982b7e6db056bf17cf9c6fd020a646a935f5fae8d3aa0f9e71d6698cc17ba3da4d5b2632f6b5166c6d597be

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AC906512-B594-4b1e-A338-DFA04E5B7787.cms

MD5 ec9d3f57df7bc0e956321f77099c8eab
SHA1 a000291a1fbf6fa790f39cc893156cd066d2b0c5
SHA256 87513c518a68082adb618ac7f8914d98826655b9ff4bcab40461c2e03cf5b63e
SHA512 3b0037ca2be100a6da6c1224c994255929ce7d03879ff0db51614a65a3a97566a76f18b78ffff87bd56de921d3a83c67b511ba7f3cc5f49a0b96222b57323377

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EBD7CDA0-607B-451c-8512-67E365390900.cms

MD5 072e126fe23921df14a9eb1fe5828a00
SHA1 7ed8fd21db68486c91857ecaf582054a2c27b02d
SHA256 4333747705212eaf31c189fc5aadfd9a761079e5ed40265879855fc57bb85157
SHA512 bb596bd206cf92cf6abb633dca378e112ad718d82565da0835c8cfec20b02ace4419a2af918efab60fd418b383ea84c8799a23107d4f9c80c5283a6946b87707

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\19D676CB-D5CD-415f-9315-3815BD09E40A.cms

MD5 72bb9d4c669f6b8b6d0e0228f6fe682f
SHA1 f44e0865a67c05099a63d8923acabe6841b56e9a
SHA256 0902ea48cb72677410b3743fddbd430199418b01a09fc922b7904a37e0e783b0
SHA512 79e741fa4551f6dae9951bcdcf2591235f8308971ce83795a7665a90e68c1e73e966e970eadd3f269565a54381023ff391829116798bba733ea09b9f7e882efc

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\9FACB88C-68FA-4b71-9797-34E0AE969E7A.cms

MD5 5064ac677662e77c47a1afd43a3d4d8b
SHA1 124ae0e7e7291c9ee1a455a1f8f25f530b086f51
SHA256 3745e76de2c9738539a9277d909ea3a8e6f8c90a2d7acd354d6fe64d20168b11
SHA512 84802d0b82588370738798f66c1f0869927ba8864c0b9f82efcd78fef3ff9a059957911764f1ecb4dc98e691c1f8aad9e20ab67cf687671afab5a19329eb7f48

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\AF3DF062-72A3-4958-BA22-D3FE36386D34.cms

MD5 15a5ab4a5d0713f5690562de2843f893
SHA1 7e260232cde3e4c8ec454169160a3d2f41d9fc95
SHA256 4061d15ccc46dd74c4a1bf44441ca984407e70a25c69ee2aa7c7cd3ef16cf98a
SHA512 f2b07c627fc440921096da0c27ecd26c7b085e5555c4177ae2c470432112b1f76a7e092e5324ad89ed9ce09430604ca116a640b61658a39f3a1f729b1282952d

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C0C747B1-A6A5-489b-83CD-CE3777F47553.cms

MD5 013e9369f2f7bb1b8e96669289892cd6
SHA1 14b02ada923fdb3b44898c220efe9a29ed7a681a
SHA256 96a1c8d9465d486152cb8500718af86dd68366d3fa1f188f97e67e6826a43db3
SHA512 e6435324804661a4b1150e5e44d05145659e0cdeb19ba60909889598c3b5a7afc63c2ab8ff95c3ef8e77ab81ce6a0025dc99151f742208ae38ff3cc858e73100

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\828A83E6-7B45-4739-A7C8-EF2B33B02A78.cms

MD5 6806c4485dddaaa0b891e5af06fa4468
SHA1 96adce0abb8a0c52209b774fef8e2a5086d089fd
SHA256 6e6dcffead5e1d8d48e26fcff3d302a344ae4e2d5370bc64ed1009b7e4718cb3
SHA512 c899674ed165f0c42cebc3c5811301c65eba54bad9020da8571d7aaee23eb43fe50d0d43ad065cd75d5bc4a773ef547cec81abdf3d1b7e205e4a0f0e339c5cd1

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\23892D54-E91F-450b-8EAD-687CADCD8B61.cms

MD5 35cd594b40044d568843164bdb0ba258
SHA1 722c4c8c20f5540a693d82336f7e5ac6a2511531
SHA256 2e233112674119ea0eeca844eaa59087047d1322eda6d46eb286ba74e0a1ffc9
SHA512 cc65ccb64deae4731dfeb51dbc4de3db1a9d881077f3b0eaa547049c6971d88f9611aa69467c21a7a8cf5504558e44f178d3b647c331bd01299447f067f2aa45

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\076C3D8A-AF66-430b-892B-06154B7E181A.cms

MD5 9ec2a9a4ec106acff82d4bcbea97169e
SHA1 ca523d7658d39b0dda2507b05ffe2ce7b37061a3
SHA256 f64984886704c20275ed8f0d68e93bffcf3a7cf6a70c0d7b51f673c3dd36e126
SHA512 aaaa1d8e6444d1c99e7af28712e5940116c21a0e4f6cbbe786b86e7ea80438b71dba5a85fae2defbb8f8fd9cea096a95cf0fed9e3dcf810abc7106cf375d1ebd

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\99A4A1EC-329E-4eb5-958C-469897F875D3.cms

MD5 c769884c41184202402820ec9ee816a5
SHA1 1f83f86378ecc56079a5026b7fb8d4a2fca581d7
SHA256 c0c8f5cda1db5a27a437d8500aa4be3bf5711118236cfae82010788c58fe7142
SHA512 3c4ba1389f8bdab2eb473e18749a1717d9ddb3dc0cae885ab17c66377036c8f56ba351846717e1684597dccb459eee520ed92a08995ba45277102e2a236fa4a8

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\04E7D91F-1884-44e1-AB61-09626F752ADA.cms

MD5 874d3d7a281337f94baee40b7d3c5046
SHA1 b3afbb551a96d2ab66e63a541af3c285c26e53fb
SHA256 508355412787212952c562f75cba38ba33d5e5a44fc141e76b6f22742f25b1bd
SHA512 40d9b7d6e010deb33c3f9e1e9d3eacb32aef6ff8fb539dff651b293a3e05733bab1bab0c92a00c7f79584fc6910fb52a098eccb90f6d419c6b4404121ec1659c

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\EE3BE443-81C7-42c7-9324-671DC5853374.cms

MD5 5f15f0660d096e6d90ca746d92edf750
SHA1 48df990a7ba6d073063e0a332effc86161f24e00
SHA256 e3f571c7483ee16c6562f536c208a2dfe2593080c860001914aff78bb3a851b4
SHA512 113828864ed31458deb7e7a4a6102440beab99396dcc35272b874049ed2297b11a773a3f16b2d2a96f9f740614159eb286e5c3341c43356463e6a11c0944799b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\C9C31CEF-0A34-4bc9-A6FA-F94796F3862B.cms

MD5 41092722bf599de0cad663a4edd87011
SHA1 5ebb7abc2e13d56d90f2a107fd5b0659822e0326
SHA256 8f285d18984a544e9ec9d29c3f5cb9176dc73179be113255a3a4990cce43c719
SHA512 2ef6ba0a605fc36e0a6c6d3d2524ee1b4e9ec20eda090b3b78655264f6b970a55d76a8f34509dfd6ff87fb9ba7da73e9b3d2d90dc2bb71a18fd884a4144991cf

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\A77A7C9B-933C-45b5-AEFC-5BA725C56DDB.cms

MD5 988aac2e0ab4356627695272e52690ac
SHA1 345169274d149d47764986b384d6984716b68ffa
SHA256 1e9b3f4a50429375af0f9bfc71f72d71a0cc605bed4ba900aef351a8e3810b05
SHA512 f4db983ca0ebdc7ba2aa065f6060cfe8027d2dcd6dfb6009f9b4653bf9cc48b56a824cdbddbb570d19feb685ad711c83822e6556a756fbce1fb1465624a2277f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\99B46982-980C-4855-9415-190C122E592D.cms

MD5 d48000e9b74aab890922370ff96e0430
SHA1 12aff267c1d0cded59bc9d6023927b8b11dc1de9
SHA256 fa7a5a9cc514d82e87bce08c0dedc60ad1eb9ed8800d7f790215c2bfca87a5fa
SHA512 6351f138b55030d5acbc03f3129a42eeb5fd0be03522740302ac920cefac1b3dfac6e0d17a03cb78278145498abf88d23eeb6ca9078a149cda57000fce8ee18f

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\716C5CA8-9823-4659-BF8A-8188BBCE473E.cms

MD5 483668f691aa2e468a78cb7c989f93ba
SHA1 ab93f6baf71f08102bc8b1f6f1835597e4635cf6
SHA256 63c40f3521ef6165e6600fac62c8536199d830bb000acc5121d4b864ec975e64
SHA512 7cb9383226ed3432ee06df34c10374b61018d8a768db60f541a4d81bffdd5a27a6830dbd1a0b8cd9ed25d992ccad1ead98c9d4539306d849b1ab6a4eca21189c

memory/3172-2502-0x00000172902D0000-0x000001729036E000-memory.dmp

memory/3172-2510-0x00000172902D0000-0x000001729036E000-memory.dmp

memory/3172-2511-0x00000172902D0000-0x000001729036E000-memory.dmp

memory/3172-2514-0x00000172902D0000-0x000001729036E000-memory.dmp

C:\Users\Admin\AppData\Roaming\GK6+\Network\Network Persistent State

MD5 4ed3b143848dd5c1cfbe2cb11c4a7578
SHA1 fed798092f85e99c6d44633e18650a0a52edf30b
SHA256 965803d1f1a10ca42d14a150ccdb30cf2354334e0f87f557cfe1c72722be4331
SHA512 308ae587914d4e4d9685813e572d5e3eadb07e3718258bf614ec92c32ddc9bb63c061e1b94afa44d43b8f6e99a8ff5183b7e572bc6c776c4858d7efb37e8e6d0

C:\Users\Admin\AppData\Roaming\GK6+\Network\Network Persistent State~RFe5994b4.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/2240-2531-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2533-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2532-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2543-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2542-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2541-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2540-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2539-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2538-0x000001846D080000-0x000001846D081000-memory.dmp

memory/2240-2537-0x000001846D080000-0x000001846D081000-memory.dmp

Analysis: behavioral18

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

120s

Max time network

132s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

143s

Max time network

160s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 181.129.81.91.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 66.112.168.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

121s

Max time network

127s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 240

Network

N/A

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

122s

Max time network

126s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2332 -s 220

Network

N/A

Files

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240708-en

Max time kernel

121s

Max time network

128s

Command Line

"C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe

"C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"

Network

N/A

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

120s

Max time network

133s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1340 wrote to memory of 2300 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 1340 wrote to memory of 2300 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 1340 wrote to memory of 2300 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1

C:\Windows\system32\WerFault.exe

C:\Windows\system32\WerFault.exe -u -p 1340 -s 80

Network

N/A

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

94s

Max time network

149s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1516 wrote to memory of 3028 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1516 wrote to memory of 3028 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1516 wrote to memory of 3028 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3028 -ip 3028

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3028 -s 612

Network

Country Destination Domain Proto
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

118s

Max time network

128s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\StdUtils.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 220

Network

N/A

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

147s

Max time network

151s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5032 wrote to memory of 3856 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5032 wrote to memory of 3856 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5032 wrote to memory of 3856 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3856 -ip 3856

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 624

Network

Country Destination Domain Proto
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 104.246.116.51.in-addr.arpa udp

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

147s

Max time network

160s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 24.73.42.20.in-addr.arpa udp

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

92s

Max time network

154s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2064 wrote to memory of 3936 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2064 wrote to memory of 3936 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2064 wrote to memory of 3936 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsDialogs.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3936 -ip 3936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3936 -s 636

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

121s

Max time network

125s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 220

Network

N/A

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

117s

Max time network

137s

Command Line

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "437750106" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1E19E691-A286-11EF-B38B-EAF82BEC9AF0} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0d6edf29236db01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\SearchScopes C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000078a0cc6b0b830b4fbbc12dd3fac6f542000000000200000000001066000000010000200000000984ae40ff66c806a1df8a2c88fe25b9bcc2e1fad92ccccfb461dbee64b512f5000000000e80000000020000200000001c7a9437036d1a9ea915b0cb982c91382a1a9f67fc8693887ef33329038ac09a20000000b73244af36d0a0ec6adada8630d60358e30e77df17133b7396dac972629720b7400000002dc44528e896f853c597085a2165b5f7c88854cd4f209bf62930f133c007142b9d8bc84c75050760b9a2d1f3f79f093eafc6c1b21050f29f59e7f4249a3693c9 C:\Program Files\Internet Explorer\iexplore.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A

Processes

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2

Network

Country Destination Domain Proto
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\CabF856.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\TarF8C6.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 dab83addade1cc4130629e28e9c8a58f
SHA1 dca2efc957723fe9fd5887bb9b1ce8b0ee85da17
SHA256 a3a2ab77a36f847131a06dba3ee9ba558f8862211aeb0a48f2d5f06ccae202ba
SHA512 e3e2f46a5f50bcc19a6585a4a35ba30e0f8484f9714f04d2f402e62756ecc3be68688280e8e63a624e7d25e20e5c0ad33103654ba59092ccbcb4ca6ebeba924c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 b52db052b93049ebf5015ba01b09d16d
SHA1 1bc4b11a7ad4f0933476e21efd197ebffd44bef9
SHA256 921346274271e016c780dc82d34b1f2693d91453452574c45787772673803727
SHA512 b3e27154883fa5bab409b36db483ce54ad5353c2b457462274e2965f9572500254420373389fc1b506c84e281a3c4e9025af6f14741a0ed79c635d3826b83b79

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e9ce9e1a538741ff502bf3482925d949
SHA1 2fc463d7f9e37d4299e44d4bd5b0e9cb87063229
SHA256 c6371291ac39748dcb2ab043601f1c2c4427687f98d8bc8a0aa0025d4f6c1da1
SHA512 b19f127e9736f3cb795e05c57187b689ce78c1883a8cf8dab9789aa93f143d89c1e422690e71bbaecf7c4e75e93c869d46f9da6481c6950396667e5303068d33

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 440177ff192432bfed523473ba6a4031
SHA1 c9228fd9bd5d1247641ffb09bfef217f8eb6927a
SHA256 0d707d692fccaa0a8d419c9165103b12ea3820717c4932291b5209d71329c892
SHA512 ec90b0622ef5dcd546a396bee4749d56de2a5265e711b1bdf1b7c90ed63dc4edd54e066599321e870109818c477044cdd5f10f51c690ef10b8d28f21c8d8a5fb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 19e409ce4d779b9ae6acec9110e0fff7
SHA1 3b2a960852ba89a16e07f31aef767fe80394b016
SHA256 996a43b0668d6af19afac691628e76ab591c92a87c2feb4e6636c8a0ffda1bd3
SHA512 8cece8bbfacadd4c8666730c142371adb9a0f2acadf5babfb4e40005c5bd5689fb124d4ea78dd83823c607788efa786e4a9830d4b44afe812767dbea14d5d499

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 dd5e3724ec081661d811c0c19945324a
SHA1 f50dceaeab0485c84913d68ecbed469d38f47b71
SHA256 c0f0de6a9d7101b20ddd1941018371da993670503122ff2ab4a6b7eb279b3865
SHA512 17c383ae555a4e0f41b280489c4f39035fb8549d8ae3c9081dc12634698e93d8b67562411900dde4c595f19cd4cc32803c0301bb55b8ba6508ec2f72d3259425

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 9447e9d0b146b61442111d6abbdcdcbf
SHA1 5e7ca4da7413602664436c82a6777f1806e109f3
SHA256 a9e0354ee82f939c4b86bcc2ede1862231d41ce2d80b7b078b55d0105013ef33
SHA512 00d5b5e5e3584e93c7eec85cfa1c53e706b19bc1a19327912e601c263013202c99f3769961d8e7fd4cafb06d6e874729439c229989270586e48aee3ab5a3c24b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 5edf90993a0cd8e3d235adb7fd888ec5
SHA1 7f6501e2737bf218b82486551e1a7efd19ec92ec
SHA256 fd172861b22004d6a281fa40080b394d97ba6ce26acf9c699e3e2cfb58a16a31
SHA512 9e5f9e78554683342ed3e472b1ffa1133ed8da49cda12f55db81ce79111eb0a713a12f3aea00c254a0dadcb814e58d7650003496afc3edb34c8968190f06596c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e685b0d4235d7ee90d1125bf83f84279
SHA1 d920b7f7e61256abcca26c26a724c2b115838212
SHA256 ad692bf5835ecde742f874789e72e7f8363e634220656df65df2d1c0e8587744
SHA512 0a605d1e1524ebd7683a3a8e67e35cbb972ff5becf90df1342c8a8d5e5495548f9e42d3dc7c365d985fb6157cb91a57316e71185d18453de8da0f270c1c1e5bf

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 08e96c457861c6be45e61814d3314ab6
SHA1 0192796b1f83944c5446cbdc4ea8b7fd151978d6
SHA256 b93ad7b16e1d51825dcfa3d1f8ce2c4bc21ee0528da4c28ffe674dcb2a095ac1
SHA512 e260b9b49434f738f43fe4e684b0dd026646053cceebba0fd99c540e11bbdcf72ef0074ce0de98e99af172ca1d8e19fe7844cfe4fc2851aa12eaa8861ac53785

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c06abbf53fcba9cbcd8f45b8fc019b7d
SHA1 a1c8feafd21804fc05055e5ae8c6615cd039ccdf
SHA256 364e23c9e687d584748aef184ebb5d7fb272d02838503f280aa93efb55436c84
SHA512 22d1df629d544dfa9a688558f9fae32d6a396a6b456bfb2a1b3e13f7971f358eeb7ae932172c179496c5342929413f71ccca375f44333b4e8d0bb11c8624da23

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 4305b4ba65228fba3dc1f690a6e0bbd3
SHA1 660ece662116a553eca0bd6bce707347ea4abaec
SHA256 4c4bccb851fc15920d7cfc8d5a5e4e8bf0cfd9a07644fccdb927c7b848d0b219
SHA512 787f74fe4d693027332bf963e6d28872bea1f8be6a298edd875b6d50affb944f6d5011e233445b0dbfcb0c1d682f0071ac9eb4d47653cdd4fabe7e6599d845ef

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 abd12ad55a418b47f4714cbca611e639
SHA1 fc445262bf97cd3adc33621115ac991103d70ad9
SHA256 07a7e5fa1597c2fd4d4d6c270f0ba7470ab9fc520224d151af47be488f577f1f
SHA512 cea4ec124eacf588355eab95eb8df270157c2304cf0a598b24b4e4c9ad8fda171bfb6239ba416b3f4aae5a034b778c861d621aeff50b6030f07d399cd19a604a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1b8b7e2da4ff9a859caee0a39417ad38
SHA1 6aa332fb5aa1701cc8962dd3e04e0de83e99988b
SHA256 f2fbd350fe65aeca7a30d13312b9126dc22a88c83f8433146fbcd4b0c62a1ce7
SHA512 229b4fdbc354dffe22b7e0ff650b8928615946e7d9551d43253ffa235ccf9b5b582b52e537b97fc4eecef0dfe5a2fc2da57c1b0c556aa70542392233421329d4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e53cbe67c6e5af4bcb85b472bd34fbf3
SHA1 3afb0d80365d6836765ab2fd77d5075e1efa812e
SHA256 759618c31d9fafacdf9530f8ce67c2f1f83bd36bc8413034d486834af7d1d3b3
SHA512 e090dab3be86b5a58880765e78f0a16cbded9ae5c8edfafd710261cfb1143e32d552edd32cd5fc695a92070cea5642334940cb9cb876badb81e54c27b27001b3

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 7db9410f1880f51ed9b9af085bc798c0
SHA1 8671b24cabee405a2f129fe19b7a62a285be8d0f
SHA256 0c9293b1bd1eed76897ab9896054950852fcfda007a306efdb53b47dfa636b4f
SHA512 4c888fba93e79d9492b610b55977e9faed3661eae9a4e95cce1c5f1f97759d051c29a035becfe5b796c52d09c538d4192dd48d7f37b0f76c0c0cf67b98df32dc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e2f1a418500efffb8aab78252b6d8536
SHA1 0cc18b6def48ad99f5cd55d2b6dd386037fe1658
SHA256 73f4d8e2a168067ec0dd8892ad5c41e5e139700dcbb007b4187ef315a83c599d
SHA512 6a9cf258208de00fd36d03c86485cac3f83eddb6a7e81fe6335c5084a4ddceb7445ab55e6c0ebf0753daf8b92cd2778acdfdf8bd7c14211dc5acbdcd45f3233e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 73900815f96ea194375ba52fa0e6b2df
SHA1 b292ea2eebd462c486ad3a063c3176b31f0ed5a7
SHA256 8f51f2e199cc8866af9cde9b31fdb13659b35343a3abff3aad6777b8781087a2
SHA512 63341ee4bd1f7c16a4b5aea16cda76e14449c9c48203f65c54f0e14fcabf44c05cfef52efc22a4c81359bc0b22aff7809ee5ffbd624184dc02e9cd4b30c5c93f

Analysis: behavioral16

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

117s

Max time network

128s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

135s

Max time network

165s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 67.112.168.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

51s

Max time network

136s

Command Line

"C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe"

Signatures

Renames multiple (148) files with added filename extension

ransomware

Renames multiple (181) files with added filename extension

ransomware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.GK6+ = "C:\\Program Files\\GK6+\\GK6+.exe -- --openAsHidden" C:\Program Files\GK6+\GK6+.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Control Panel\International\Geo\Nation C:\Program Files\GK6+\GK6+.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Control Panel\International\Geo\Nation C:\Program Files\GK6+\GK6+.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\GK6+\icudtl.dat C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ko.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\te.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\Uninstall GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\vulkan-1.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\fr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\uk.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ur.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\hr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\resources\app.asar C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sk.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\vi.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\bg.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\es-419.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\kn.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pt-BR.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\pt-PT.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\chrome_100_percent.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\bn.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\nb.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\vk_swiftshader_icd.json C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\de.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\th.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ta.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\zh-TW.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\v8_context_snapshot.bin C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\da.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\en-GB.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\nl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\ffmpeg.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\af.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\language.txt C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\et.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sl.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\he.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ml.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ro.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\LICENSES.chromium.html C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ar.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\es.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\fa.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sw.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\id.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\sv.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\tr.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\zh-CN.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\chrome_200_percent.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\el.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\hu.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ms.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\resources.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\vk_swiftshader.dll C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\lt.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\lv.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\hi.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\it.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ja.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
File created C:\Program Files\GK6+\locales\ru.pak C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A
N/A N/A C:\Program Files\GK6+\GK6+.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1808 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2688 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2688 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2688 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1792 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1792 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 1792 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe
PID 1828 wrote to memory of 2824 N/A C:\Program Files\GK6+\GK6+.exe C:\Program Files\GK6+\GK6+.exe

Processes

C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe

"C:\Users\Admin\AppData\Local\Temp\GK6X Setup 8.0.1.exe"

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe"

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1064 --field-trial-handle=1136,i,5717146951654824052,1089578453906955579,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --mojo-platform-channel-handle=1380 --field-trial-handle=1136,i,5717146951654824052,1089578453906955579,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --app-user-model-id=electron.app.GK6+ --app-path="C:\Program Files\GK6+\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=1584 --field-trial-handle=1136,i,5717146951654824052,1089578453906955579,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\GK6+\GK6+.exe

"C:\Program Files\GK6+\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1300 --field-trial-handle=1136,i,5717146951654824052,1089578453906955579,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 redirector.gvt1.com udp
GB 172.217.16.238:443 redirector.gvt1.com tcp
US 8.8.8.8:53 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com udp
US 8.8.8.8:53 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp

Files

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\UAC.dll

MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\nsProcess.dll

MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\chrome_100_percent.pak

MD5 d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1 c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
SHA512 aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\chrome_200_percent.pak

MD5 5604b67e3f03ab2741f910a250c91137
SHA1 a4bb15ac7914c22575f1051a29c448f215fe027f
SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
SHA512 5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\d3dcompiler_47.dll

MD5 cb9807f6cf55ad799e920b7e0f97df99
SHA1 bb76012ded5acd103adad49436612d073d159b29
SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\ffmpeg.dll

MD5 824f3c2f3b90e9dcabef26d9695cb0ab
SHA1 c8d9a93bc21ddbec5f4ac0219cbad5696f73393a
SHA256 c8427ee59fe634071c813d803f086e4757ceaa4be061739a1644f49c4b051acd
SHA512 f7ef8cca9e633327f57469742bc86ff209fc7d201c5b6629578689f2fbf39bda1d326bf24b68a2c6ab22e9d64d03b628bab1c635f9ac3f6b7441a680e98b9dad

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\libEGL.dll

MD5 18aa1595f0249b97859f158b73be7f6a
SHA1 c1a877e27a65aed080fc4cb2d1ba301efda777d3
SHA256 d019e2c51b5c3e28744aeb4bcabc1c5a29fe05f52936fbeee4ec6c96430db8af
SHA512 21aac167e72e0aef481c799407a928b0c81cff32f6422e4d92eb4d3ff58fb59430804804c21826c5d2b2947e9c68004bf9a26566b0dd734a8be64062568acb95

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\icudtl.dat

MD5 76bef9b8bb32e1e54fe1054c97b84a10
SHA1 05dfea2a3afeda799ab01bb7fbce628cacd596f4
SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
SHA512 7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\LICENSE.electron.txt

MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\libGLESv2.dll

MD5 00666e5e2de77ba843b7c0fab5771476
SHA1 6d6ff22eb3dc651bc146d2716c4c817e424e93e7
SHA256 04e542edbf27f1bfc7d6620aa7c21b8039b05b6ac1b682d6f71ddddd771dd6d5
SHA512 7236a0c1ac81cb1b5b68d14757fe5e25eac933da08e9136a26527d01c6d96c552337d7e5c37313507f5032d03e4e94ff70a2b25a293187b7e88c3f8ef13caf3d

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\LICENSES.chromium.html

MD5 d18c09a075cb6531d7ffd7c3da77bd4e
SHA1 571f29b6004007111782bf5727c4bc9510cca286
SHA256 86f5222580a4ab03dad8ea62e6cea22b23454dccf1c77e74ae0e0410a13b16fc
SHA512 091cd68e12633919fc6100b606f3002b16f4b9c7c6d7c820ff20e31a3b9ea690c8a1fc90529ff3e5c21e8d778e254743a8708049830c3bb046eda8f2653000b7

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\resources.pak

MD5 fb620332959ee6e46ac1c2a2f0e1b2d1
SHA1 eb18c735d187647c3c529932b8b80d9c9af09286
SHA256 66153f7b388503a9bab9df1fa157d3af88548bee264525694bca9a61ce3495e7
SHA512 1e5bfcac24a76ca8fae7b7fa5407f4eafeecfcda54726d66586f1171a7ba30cf76544d75aa44f1eb64b202e686ccd2c00c8cc0b24b249fc5c6c28c156cd03775

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\snapshot_blob.bin

MD5 b82ff216a0babf602940759b9a3af870
SHA1 07e8a22dcf8d7be04a6ddbcab3098e040494bb0e
SHA256 943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
SHA512 da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\v8_context_snapshot.bin

MD5 031ea03da08fe1247280cfe781658791
SHA1 e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA256 c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
SHA512 b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\vk_swiftshader_icd.json

MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\vk_swiftshader.dll

MD5 1ae9e16933392c38b30d3c3c721d936e
SHA1 e86ed3dcf95d3d328f68e84c159a8008ab9fcfae
SHA256 7c71daf0fb1877bc9195894798ebb256215104ea55a04ed2a46f18c9d6d80ef3
SHA512 3acc00c6fb52a4e94cef01eb5adccffb68dd5479ae0810666789e2f7aecc94b61120b7c3f15d412a79a766b78c8d73c4ffdcfb4e2c6ce0c2063d3b691b6c5796

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\vulkan-1.dll

MD5 bb02b08a6698b565d48d7c8a97c802e7
SHA1 0366a25a429af5f497f1df2e9ca49bdd999b79dd
SHA256 c3c0e649d7e0726a795f556ac0f057c18ce67cc6737e3b9c935af3b9b8991cef
SHA512 5223622d1ca039adffce86417fcc9d69ae6aa64785eba96fe74d2e45e1b2680c7f5aca2f064401d7b643fb61277d8e68481b07357d61be98d1700b64bf2f80d0

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ar.pak

MD5 98f8a48892b41e64bef135b86f3d4a6c
SHA1 32f8d57ec505332f711b9203aed969704bd97bc9
SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
SHA512 6ed3fe415b2f6de24136917da870b47c653d15c7a561baae55a285946a6f75e5141aba3bc064982f99baef0a893266693864c2d603c5c22c2b95627b2035f7a4

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\cs.pak

MD5 26765c7be201444f0238962bb16a506b
SHA1 f9d4a33795e45127c14bcf35cc770845627e15e8
SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
SHA512 577d52d2d5048cd952aff1e76121a495328c1978cdea2eaa4f85812cc513917f69510e135e96f7967f4ed43cf88e180cb1d9059e17c855c8d4f94ca036730214

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ca.pak

MD5 2f8d050c228583559cda181291b76e5a
SHA1 b047f1cfb30b1162b1dd79f7e424a83fd807eec7
SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
SHA512 e4f150cd9942ef5105e72376835da6edc31ef91783e41cd2fc04600c04f342bbc96e08e23c8af1c0c1e563bb8a7d3840a2289767525c30d08c2f23d0e837801f

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\en-GB.pak

MD5 502260e74b65b96cd93f5e7bf0391157
SHA1 b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
SHA512 0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\et.pak

MD5 e97fe1e6d06a2275a20d158dc4e3b892
SHA1 1575b9b1fc331a70bbe4ca7d1095d4ed6777ecc1
SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
SHA512 77879a4d1062671b616ba9b2ce0b6f69a5dbed6bd56b73ded902d1f9f44ecd96a2212690b3568c0ba273c73d91589ff2bf18c7ef9b66e0630fbaafde2a61b1b1

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\fil.pak

MD5 3126f74d021e9423d71913bb45a62935
SHA1 c9a80c8585aabbfec34ae891416794b1b3e29a11
SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
SHA512 fb360723ee53b3f7038eebd1b919a36784a0e3dc878e810bc905c4297379dade6006c8872ed68412b06161cacb0d6e32a7157ecf97d9e103a4ca3b2b71db8765

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\hi.pak

MD5 ede7fa471c5eebc1fa55b9b3b6f92d00
SHA1 1d1f529c615799bb3a3319ddd1357cb5dc71464e
SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
SHA512 0f51ea54e828700080effa6c728230c523ff8e26fb350e6f337028d18614d5dfc4a2792cb92b5e606bd0702067f55fea546029cddd1ebf7fa74ef5521ff08338

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ko.pak

MD5 b31780fff9541290c1d9f5b76141430d
SHA1 8b0fbdccd0a7f8141846763a0d27e4e0da0552dc
SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
SHA512 a573dd09520059832e7f53386a64dcdde47452b02ce1e5d7e11385abbc8b734dcee0065b4ca351591bf9cc2f66fae204b9300702246d20265e8ddff4f7c1e6d8

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ro.pak

MD5 745a9b8c6422682f2cfa5561cc1f4022
SHA1 31e3616ef09f9b1fd1c41cf8f43e504a6f90276f
SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
SHA512 8e0b7f98cb842a862ceca65e0166462275feed26c32c9c299aba9986d36b716a90d4a8db5ccef355ac266b7e969071014cc7ab6439778e77c52754bc23b4c575

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\sv.pak

MD5 5130a033016b45ae2c3363edb3df7324
SHA1 9f696d78b1b9efec180dc89ee0defc3ba23e6677
SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
SHA512 401b71360dcacf3b1fdc411c92195051370db110863cbed37143263e7804cb24b75ff1908ee39ee848c28776df00d6edd8cc748acf3725668af7815929e8066b

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\sr.pak

MD5 fca817ed4b839b976ebcbf59cac66d68
SHA1 413efa65470319999032b6a25b3b2ee33b8cd047
SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
SHA512 cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\sl.pak

MD5 4ad22c6c64dbe0fc432afaa28090c4d9
SHA1 19eb65ae52a585dbd9c25c32f22b099020c43091
SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
SHA512 94f9d34e76560059ef80fc04be4d54e52a7d934dd28747db7f0f6684243b841087245699a471a55d667623d2ce5e597a3d2c6bc37cfd7ebd2f5b8fb40e6207e7

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\sk.pak

MD5 72946b939f7bcaa98ab314cfba634e0b
SHA1 71c79a61712c8c5d3dac07a65d4c727e3b80ab17
SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
SHA512 2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ru.pak

MD5 5cc0f54e022a9996773dbd64906d5580
SHA1 87c103bd69724579b478f904235e03caf61d5d79
SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
SHA512 b3365fedcba50643cecf1a70297e1e67990d63ae05caa87de01a70ef6f28e0f73a9a0edb0ff80b4138c624e51aa2dac065a2d40877fc92137714ae07734c2f4a

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\pt-PT.pak

MD5 3f367760b57a5e4360dabcd4a650bc5f
SHA1 8d7cd6b0eb42361ee862455ecfa475d28f5aa934
SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
SHA512 3dc30780d57dee91215a716dc6b4cb432838aa0161af4371f49f70db2076bd155b170fd2c1617f59e1b572144a2e150a34143eda82d9f2227d24d2281d5aba60

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\pt-BR.pak

MD5 a064cb9d7cf18936600e9ccc03297006
SHA1 eb436a0c584ba91acb05dfccde139afbe26fe9f4
SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
SHA512 95af684abf9d24cfc4d0668a02da1e2e69f5e671d671d8cdfadc22ec991908c6aa5663fe1fa88ca8e85c0508f409fa6c2bbc174c53674270f2b188018d358415

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\pl.pak

MD5 0dc77139d3530695cb4e85b708bc0bf6
SHA1 6915655afd1e37361c011f5c2113d72c7a0e85bc
SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
SHA512 ee1ca1d99ac279df4cc0e532aef2fc531061736b636a84310bdbd627e0f2435eac1a386ebb19aa901b6eae3929bda1c5da4f41b73a25a1b20137522e34547600

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\nl.pak

MD5 9f547a24e2840d77339ca20625125b4c
SHA1 23366411b334f990a0328a032b80b2667fda2fcd
SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
SHA512 34da7a0b58ee3904d00cf02d16d5a3ef508fb708d7c0a887286fc32cd6145b2bd857d317c784d1d1b17662041eadcf7e225908980eb93f2b81161d845c0bb67f

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\nb.pak

MD5 bbae0915edec081b04bb903b689bc40b
SHA1 6a0fc635ce1c431e512b8b3b8448176aa4025556
SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
SHA512 573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ms.pak

MD5 d5da199f347452c5904bff9332a08f84
SHA1 b5fb8c22708a7e3130684f1a9923b6dab10c3ae5
SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
SHA512 9fddeb376bececc51dec997b3ed1e22821340fa172636f641af774dae8bc9b5c0780757380bf3fa8df0f9682a555ede81c449ae9468f63215c17123d13ee9f35

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\mr.pak

MD5 b9a2aa88c69c42ebcc41fef00c980a38
SHA1 9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
SHA512 5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ml.pak

MD5 00292b0801e0dd0a74091bf53f1574c9
SHA1 63a002e7a8796bc4b4459a19c95ce426fbd1ec7f
SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
SHA512 e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\lv.pak

MD5 e664eb35f1284e9fc615e1bb4fab892b
SHA1 e777653abec377a394170b04f79e78acbe4b6a3b
SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
SHA512 c3232997e8d306e91ded72e9d81ffae2018af3e6c32fe620532e03bccd2883fce59b2a2290a1580d7080c468c02bcd24c1bc90051f06bfa9a4e17857d4aa583f

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\lt.pak

MD5 7b6bf901352885c0699db71239b7cf24
SHA1 9e3ec5f327c0d0e54a449332061e60a8c79243cf
SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
SHA512 79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\kn.pak

MD5 d3d6bc60bead608e68e776e07d21ad30
SHA1 e40e38ca99026056c127e9e1a1ff821a50310887
SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
SHA512 05421db2f1202573a34de1e722c6bdb55a35821c4aebd54c80e6594fc92075cd9b97e5bfdfe93b4228c3a2646b92a27da4722ef3826e2807238dcc56ba273706

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ja.pak

MD5 8209dd8cf4e416416e015ff239b7c483
SHA1 7affd1707b9eec52c26a4c17708c8471c369e2f6
SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
SHA512 6a58a1ea8a46c325cac0629f2e3b571532a9a2a342ed61ca47bd1dcee20ce0b0350e4f6d3e8e4c6903c7ba4a4592a6382bf0fcb5437febd1673b3c2ce8cd7499

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\it.pak

MD5 91391f388b4b6c12a72710c35f4c355d
SHA1 f89e6ea977a10a9f050395489285ce8c041c2c05
SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
SHA512 8796d69d1a8bdbc7690ded45404174b7fa0b5bec8453d79a3c85bf4707c3f32caf634c792c72ce7bda3522eceb5fc6761b696471586397064d9f1f1988ceee88

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\id.pak

MD5 881ff04e220aa8c6ed9d0d76bfa07cb8
SHA1 cacf3620d1bf85648329902216e6cdc6f588a5ba
SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
SHA512 9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\hu.pak

MD5 d6904e7d1b6750d43a6478877c42618d
SHA1 919f090a6a3aa1112916f5bb0d5b73a62be43c1e
SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
SHA512 d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\hr.pak

MD5 7095ef4caf6bd39174487002a4e09300
SHA1 1efe686bd0b7f035aee7ab4c52be6133121cd0f3
SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
SHA512 45488d46dfe7a31a007932917f7baf4c195da899de5dc56d98e555336668af3edb77996487649b86f56beac688374ce77f8feadc01e3f84d30d83bd67631f9c1

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\he.pak

MD5 6376d0a5f4273b76b1f4aabade194e0c
SHA1 337ba39f09454c0779ab64872b9fa11f866d6adc
SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
SHA512 00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\gu.pak

MD5 b7f4c73d56be31042d8edd7e8ea080f3
SHA1 c0c3595701c0a75c14931ed65958d36df0d925c5
SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
SHA512 ea0d766a754604cad4d5f3180c30f7dfdc3e1cfe79d67365b72adc0d7574851f21bdd5b748b16e8b4a95ade40c8ed0442bcefd511a2934cc9c701e379c955d60

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\fr.pak

MD5 51ee1ed54fec49effd103c29677885b5
SHA1 ced6fd3354007d1ef3ea7b6689aae5213c20cc69
SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
SHA512 dfd50ad99b89345940afead11c3a6940d4408a0e6265cddda1d71ad92527ea00d8057ac77ceb2ffe137a3f0d2f321c210bc7cf97ed821f01e538dc08d07149a4

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\fi.pak

MD5 fa7dbd2ee35587ff31fde3c7107e4603
SHA1 baaa093dcb7eccf77ce599c8ff09df203e434b60
SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
SHA512 587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\fa.pak

MD5 d55f65c6fda6ed6f549d2c9f0a4ce874
SHA1 952792f2da5ed9cb1cfed14e5afb8abf5cf29cb3
SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
SHA512 d0bb83467182d8b3a8f8371d749e682cf05f89daefe28764f2c263e7cfbfc3f86cb388061b48dadda26c3dd246dd6f7a57af58ca9344c2f6b90de87af1e91c69

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\es.pak

MD5 ba80f46ef6e141cef4085273a966fd91
SHA1 878f35e15b02558f75f68ec42a5cc839368c6d61
SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
SHA512 8a8b4f7db23d4c93756b6dc4219f00c77358a8fe992da1f51431597b82c3aa87abf3a98d79e13e7b4a14a1a9e94d388760fb6abf3a744406dee951c8e78cf361

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\es-419.pak

MD5 774ced79da2fd32bd1ba52a0f16e0a19
SHA1 ff36dcf8b62046871f441f301dd7af51cb9ce7ee
SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
SHA512 7763c15fa97efa9a5af73dcdedd4fe260139bd8ff782ca3aa0937d9355b2d14c3e482e570844ac33d22d7b016c7b9097d727c1dd585f421dccd59ca7bbc24269

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\en-US.pak

MD5 3f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1 b021cca30e774e0b91ee21b5beb030fea646098f
SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
SHA512 bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\el.pak

MD5 306a80dadadb1f9182810733269537fd
SHA1 bc01a65a9d024ec72e613aedc60f4838be798040
SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
SHA512 491016b8fcca59a7dc9523358c4a7b56c55360f424e8fe9330d6f01480835805e961f1e48f8777660510d9af9a66961c639df162190dec595a867d54150eecfc

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\de.pak

MD5 ec069f60c9825080b9d18ff6492e816d
SHA1 34ce5101c9646f9c2deb9820a3b26eb91c525ebc
SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
SHA512 95a88ac98f0957e5f200af76c1a743b976228f7da1bb6c6b3b88a54adcff05e1172d7cf2e6f0a82cbc8ad0aa79974a1bc046516250a3a5889fd7b2e4d7c0b804

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\da.pak

MD5 fecabf71853bab84eacdd95699c49f69
SHA1 8519afc13e100a550ca3d756518a0bc33674e0d3
SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
SHA512 e932d382d41a79ece172349e916221a67d97f5fd4b2dc1325d6bd2f7c6757cbc01d6fbc8d9846f6ec462eb637210f7c650f6944418edbd3f8614ef99030d9392

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\bn.pak

MD5 d6ccc9689654b84bc095cec4f1952cca
SHA1 286130971826b0af1b6d29c5283dfa71af7cd7b0
SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
SHA512 db0400820c5cd1100337c955084eac3036b55bbf66b403337bec2079bc47696e2e48a771214662b286f4f45f763d2ad423aeccbd0f06cf0bc11038662558f4a5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\bg.pak

MD5 9dc95c3b9b47cc9fe5a34b2aab2d4d01
SHA1 bc19494d160e4af6abd0a10c5adbc8114d50a714
SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
SHA512 a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\am.pak

MD5 952933d2d388683c91ee7eaa7539e625
SHA1 7a0f5a10d7d61c32577c0d027db8c66c27e56c7d
SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
SHA512 5aa5ef0ed1da98b36840389e694dc5dcef496524314b61603d0c5ee03a663bb4c753623fb400792754b51331df20ac6d9cf97c183922f19fc0072822688f988d

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\af.pak

MD5 198092a7a82efced4d59715bd3e41703
SHA1 ac3cdfba133330fce825816b2f9579ac240dc176
SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
SHA512 590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\zh-TW.pak

MD5 02e9e0bc5c30ca60a869ea761fb662eb
SHA1 c5200f692544b681af8757627da430aeea4283ee
SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
SHA512 07b5f401f89dfc36499a3e74318b471d9b2e795dc363dfd5a9394089d4783a4b51fd78e2092701b6974f1c51020f3b5f81171ce21690f8547ff3c8f3d54ce781

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\tr.pak

MD5 46f9b2a35efdf1120a8a946e4f1d0115
SHA1 af7bec1fba32d912b50288a7d988440627e4ee85
SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
SHA512 cd67f9c328408a8295f224aec190c7c411a868755fc5c9e90b4985b3c41a05d6d34dd30d4a3866f6c24e1d640f4c324bfba8c7ab806a6b216151cf0a504a03d7

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\resources\elevate.exe

MD5 a112a67baf4a3b176e7c100b26260e9b
SHA1 723733c532d2a79b0a7acfe304a1a28efd5a08f7
SHA256 8c347954e3964a7cd285b63c91c086bd53fbd5dba147efb6160599841994dcfa
SHA512 89cf7d1939d3ffe03fb71dfc029fa90f9c7df755173511f7c70803ec41b761a18cc035d688a2dc0c78c0b482ef17a3ae3617896079cbb7835f36229dc62a9dd5

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\th.pak

MD5 a970b7e9d3aec2cd1b8ab798b3179f07
SHA1 bf17a7e80e01ac1704a1efdf27baf271b4c21e36
SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
SHA512 880555a2ac2f278aecb8794d8cc51f0833052e9f4ca187ed91fa35bb475e68ae3255cfe1dc074eac960c73c203e62c6b38077b266f5fab66ccc3ca73e94d4d60

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\te.pak

MD5 b1b6a9e3a04be79080ebbfacc1a0eb2d
SHA1 a5c8eb6a930062f6021d073d5f74ae146dc7fbc8
SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
SHA512 bf0b163c8fc3988bfeb3cbb4b981596ce5afdf7e40149622fc3b60994e7d8efa5bb24c830036d168a6638feca48b8755aefa8640faae37055cae8fffb6a85568

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ta.pak

MD5 f100566697a96ce1f0a0c7e0bbfbe36d
SHA1 4c80a4930ba7d174c4203c199492463242bddf62
SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
SHA512 dfa6132a5b7e819e8d326bf5ee539d9ecb2dcd7fea429c75afec2291df9eeead6fa347b01f9feaf2235bce627fd39116176195f7a3d7d74de28951f939db1645

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\sw.pak

MD5 9632dd7d883fa4deb3963ea663e0ffd4
SHA1 0db135be4b3a7c54c39e9df5034d5576b68ea92e
SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
SHA512 3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\zh-CN.pak

MD5 2febe4ef32e1a3884089908f402ad62f
SHA1 e65c54adc127b78494dd6189cca71f1c7bd2a5b0
SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
SHA512 8e8b030af4c952c32ec277850d5573414630ff5196eaed52820f44e9c5bd03ab6f71a8add19215b0456eed859be0d5a6f28d48e12f1677d39842f35feffd5e57

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\vi.pak

MD5 065179c466c5b7457e249f11d152b99f
SHA1 cfc05e9dfb91b2af2944aed4718fa05b43844914
SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
SHA512 fb598391a028b7d3c7e25cae21ccfde655e6f871e498767a54f7cf0d5d4e48207213cd2598ca88e4f46c303cd2d8175238a5a5b720ab37beec1873d681165a8d

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\ur.pak

MD5 ba86f1f13fdc37a2c48c1da34c84f4c4
SHA1 2f1578d0eee76e60effb63967712b15c0d56829e
SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
SHA512 fb2fe1548574da860bf27408a4f29d781fcefc300f744f4214843f343e343ad8bae29cb7047f87f5c3277641f561c6a30e5bc9d6490afbefc7af36974305a688

C:\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\7z-out\locales\uk.pak

MD5 3b2a976a25dca963e91df3695c502d8c
SHA1 ce7ae51211f512c3723bb43ea0de9e6debb70597
SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
SHA512 ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\WinShell.dll

MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

\Users\Admin\AppData\Local\Temp\nsyA93B.tmp\nsDialogs.dll

MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

memory/1932-580-0x0000000002BB0000-0x0000000002BB2000-memory.dmp

\Users\Admin\AppData\Local\Temp\b0b07447-18a2-464e-828e-3d1570b03cb4.tmp.node

MD5 83c6e16078808b94dff5686aecf119e7
SHA1 c0e4e7c859f3d4a052a9338a9052aabc1114c457
SHA256 f1a0786629d4b767fda448e1501eb44254aada2d2a4beab5bb9f231c19f9ac02
SHA512 213deafacaebb78a7fb9139ff98d93a8fde569cb6abdc3e2926384ca97d069702b2fe0d5606626634b5ffa940dfe5a6c5bf01febb250e9559474bcdd42929867

memory/1808-763-0x0000000000060000-0x0000000000061000-memory.dmp

memory/1808-794-0x0000000076F10000-0x0000000076F11000-memory.dmp

C:\Users\Admin\AppData\Roaming\GK6+\Local Storage\leveldb\CURRENT~RFf76e698.TMP

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

\Users\Admin\AppData\Local\Temp\e255d8a0-3338-46c4-97ea-9d70fb1414d3.tmp.node

MD5 e02b8dd62465b60e0e3d21c229bfe0fb
SHA1 4d39a70380063d41ce75e0f29cc8a5e18758b98f
SHA256 a7484ce78716fd576685c9ad3573243915c87c604e6476e7e22c83e6c3635686
SHA512 242386e4432b798728ab521c885a5ee2ffdf202f312a271bc6081bdd2c5869b86408cb43620c7ce123513c1f694d2aa018dff4cccb49222e20091fb4b5af9222

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\11859524-DC42-4fd5-8A56-A0FFC66F965D.cms

MD5 a008f27c7cb9cc98d1faa83e45aa6715
SHA1 cb5ea0316b3e782e2f143a16c80d672b761afcf6
SHA256 f14284bcf77e7f6ffa050023527b9f61afc92ea786ea87bb61eb958bbdb9bee7
SHA512 64857d844aaf23dd6698f46698305a85cef5ddd4d059b1abeb5afebf2ec275f12ce8ef388195df284c5e750c829050b372bc30ba869c309b6939e7835d035d4e

\Users\Admin\AppData\Local\Temp\57074891-6d03-4ca4-99aa-cd20bdd892c0.tmp.node

MD5 49ca10dae58cf5a1a0222f83f6df4002
SHA1 2ef8603914516b24d7128c50827def28da97ccc4
SHA256 a6e6d835cafa1fc93f4b6ef3595a4c2b8e54fb7c1ee416ed8e379ff5846e048e
SHA512 815d5b7c5001988d48d059b80df5e6c5ed6c43c89934c31f27bc6e51cc8d6239620161ddfcd0307ed58c1c823e5bed4344a089eaa8b326595a9efe3c484ca9aa

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\15AF7F87-B386-466c-9A8F-DD7CD55339D3.le

MD5 0064bbed7c94b48d3c8c1f674a6b3f13
SHA1 a74eeba4ca628616c09832bd1ec6fbf3b4d5d79e
SHA256 dba6a061c3a19b57276ff324ca4ec2d26e7490327b4ef43523d57e289365d23f
SHA512 9cc208164cd001546643f46f207a22a5a1f7183e577e50be397172a5a2279176e378d4bbe37a974a39833de5409d7d0e5514f45156c4f8349587376d2a2ed968

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\849A6BA8-7C6F-4cab-BB62-7CEABCFC9E5E.le

MD5 4de207e72f3031c43425572897710d2d
SHA1 0bab9d47916f2c8cd2920eb2c7d38cb4066235de
SHA256 d0dddfd360f4d640debba94ac0f9cc7a6de7301736953b1c40f835566bf12275
SHA512 555c0e250891400e869312b92f618bb2753998c350f2412b76982a6458fe9666dc86d6e58d28186c189fb33411701f94e3d9f3777e5e2992e455eddf35eba9f5

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\28AA6B77-DDE5-4bba-B3E6-F8DD27C7BCF2.le

MD5 4655072364a587d2c46a7ca791fb40f9
SHA1 a5bccf702b157557cf28657e409c424478f3d793
SHA256 33bb18e2adcadc43d929ae919ab6a3b039954119252106060091782b7387b32e
SHA512 d4791bc8eb1b165e23783f3b9286edf15ba090de6d98106b84fd13cce7a38ac642fbd19958aa2c453534c71fcd1e1071ecb7b9ef8c5dd5fa9e530aac598b7df6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\ABE5C7EE-8C52-43b7-91B0-334322E19F5B.cms

MD5 58a90b5e6fd8f22f140dfb8dce257e82
SHA1 a9966b0f80a6db0153dd011930245e0a2dbc9f41
SHA256 8eab484067790790f71bf211b4445cea31e19116b9baf7dae810baa258f24286
SHA512 8cd7a0684cafde09f3166b61ca3139d55dbde6ec6cd6b6544294fe83b1ef9b0c2368613d4b94e91197d1867d8344c17fcdb04266ea47821dfe005affb75d672b

Analysis: behavioral7

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

122s

Max time network

128s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\UAC.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3000 -s 224

Network

N/A

Files

N/A

Analysis: behavioral14

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

145s

Max time network

160s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html

Signatures

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3096 wrote to memory of 3292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 3292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1484 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 5020 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 5020 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3096 wrote to memory of 1440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff98c6846f8,0x7ff98c684708,0x7ff98c684718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4052 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4052 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,2481326872118628860,15552151181462851888,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1184 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 181.129.81.91.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 34d2c4f40f47672ecdf6f66fea242f4a
SHA1 4bcad62542aeb44cae38a907d8b5a8604115ada2
SHA256 b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33
SHA512 50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

\??\pipe\LOCAL\crashpad_3096_MKPVIZFVKVKZSSHT

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8749e21d9d0a17dac32d5aa2027f7a75
SHA1 a5d555f8b035c7938a4a864e89218c0402ab7cde
SHA256 915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304
SHA512 c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fc7f02260829a51cd05c766cb388260e
SHA1 6b0393c47509596db421b939b674d2e520bf3919
SHA256 f8f2c5e05e968af57b53311496d789e316f90156208b851070979ea8506fd5ff
SHA512 4cfc2957f9e9bc10db69cf47252e0f85c7d5e64b438d4354cfc8cc762777d3631a45bb6fcf9ff28a25bddef00fb51c91ef0705ac54f67fbf4063472093e0734f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 02dc3719cb848ba271d4a242f73d5ad8
SHA1 0ba703d043d5625a44640ffab95e3735ca1ac292
SHA256 03a38c80ba47a2868fdb97fa78edada232ae70465940e9a6e809cf659b634f12
SHA512 c05cb8560bf78aa537695f442bcea4c7686c39404725ce3e5b56e2846220fafbad26cd8d2c282f0962689db87fa838ee251850fd88d645dd0e7b8700a4d6c144

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2c4f1a36ecdcc41b4050e51c62d1af5e
SHA1 d4f4af10853d4a2db3345c1d7b290dfc3b79a123
SHA256 74079a24e806bf3d4a2581eced66271bd7dd2862c8c8b6bcc3c652999ea2cf01
SHA512 617ad4f0e283453207282a0b024cb8d720dd9c779d15e436915bdfc005a3460c33cfbbee91f86d0cd1a006813287c0e4d32c5cf0436309c84229a8f2b96803e3

Analysis: behavioral6

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

145s

Max time network

158s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 436 wrote to memory of 2272 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 436 wrote to memory of 2272 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 436 wrote to memory of 2272 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2272 -ip 2272

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 612

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 13.179.89.13.in-addr.arpa udp

Files

N/A

Analysis: behavioral10

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win10v2004-20241007-en

Max time kernel

90s

Max time network

144s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2796 wrote to memory of 2552 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2796 wrote to memory of 2552 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2796 wrote to memory of 2552 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2552 -ip 2552

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2552 -s 612

Network

Country Destination Domain Proto
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240903-en

Max time kernel

53s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe"

Signatures

Renames multiple (148) files with added filename extension

ransomware

Renames multiple (181) files with added filename extension

ransomware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.GK6+ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\GK6+.exe -- --openAsHidden" C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe
PID 1320 wrote to memory of 3016 N/A C:\Users\Admin\AppData\Local\Temp\GK6+.exe C:\Users\Admin\AppData\Local\Temp\GK6+.exe

Processes

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe"

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1064 --field-trial-handle=1200,i,6889482307485250689,5379078882338232117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --mojo-platform-channel-handle=1392 --field-trial-handle=1200,i,6889482307485250689,5379078882338232117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --app-user-model-id=electron.app.GK6+ --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=1664 --field-trial-handle=1200,i,6889482307485250689,5379078882338232117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Users\Admin\AppData\Local\Temp\GK6+.exe

"C:\Users\Admin\AppData\Local\Temp\GK6+.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GK6+" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1356 --field-trial-handle=1200,i,6889482307485250689,5379078882338232117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 redirector.gvt1.com udp
GB 172.217.16.238:443 redirector.gvt1.com tcp
US 8.8.8.8:53 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp

Files

\Users\Admin\AppData\Local\Temp\2613ce33-e734-4a1f-9f20-4ca1d5911056.tmp.node

MD5 83c6e16078808b94dff5686aecf119e7
SHA1 c0e4e7c859f3d4a052a9338a9052aabc1114c457
SHA256 f1a0786629d4b767fda448e1501eb44254aada2d2a4beab5bb9f231c19f9ac02
SHA512 213deafacaebb78a7fb9139ff98d93a8fde569cb6abdc3e2926384ca97d069702b2fe0d5606626634b5ffa940dfe5a6c5bf01febb250e9559474bcdd42929867

memory/1096-6-0x0000000000060000-0x0000000000061000-memory.dmp

memory/1096-36-0x0000000077600000-0x0000000077601000-memory.dmp

\Users\Admin\AppData\Local\Temp\508c5be7-ff81-43c3-8f95-722c35d7d261.tmp.node

MD5 e02b8dd62465b60e0e3d21c229bfe0fb
SHA1 4d39a70380063d41ce75e0f29cc8a5e18758b98f
SHA256 a7484ce78716fd576685c9ad3573243915c87c604e6476e7e22c83e6c3635686
SHA512 242386e4432b798728ab521c885a5ee2ffdf202f312a271bc6081bdd2c5869b86408cb43620c7ce123513c1f694d2aa018dff4cccb49222e20091fb4b5af9222

C:\Users\Admin\AppData\Roaming\GK6+\Local Storage\leveldb\CURRENT~RFf76de1f.TMP

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Roaming\GK6+\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\GK6+\DawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

\Users\Admin\AppData\Local\Temp\98dd2d89-bb4d-4f69-9b50-6fab80b0b690.tmp.node

MD5 49ca10dae58cf5a1a0222f83f6df4002
SHA1 2ef8603914516b24d7128c50827def28da97ccc4
SHA256 a6e6d835cafa1fc93f4b6ef3595a4c2b8e54fb7c1ee416ed8e379ff5846e048e
SHA512 815d5b7c5001988d48d059b80df5e6c5ed6c43c89934c31f27bc6e51cc8d6239620161ddfcd0307ed58c1c823e5bed4344a089eaa8b326595a9efe3c484ca9aa

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\11859524-DC42-4fd5-8A56-A0FFC66F965D.cms

MD5 a008f27c7cb9cc98d1faa83e45aa6715
SHA1 cb5ea0316b3e782e2f143a16c80d672b761afcf6
SHA256 f14284bcf77e7f6ffa050023527b9f61afc92ea786ea87bb61eb958bbdb9bee7
SHA512 64857d844aaf23dd6698f46698305a85cef5ddd4d059b1abeb5afebf2ec275f12ce8ef388195df284c5e750c829050b372bc30ba869c309b6939e7835d035d4e

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\Macro\ABE5C7EE-8C52-43b7-91B0-334322E19F5B.cms

MD5 58a90b5e6fd8f22f140dfb8dce257e82
SHA1 a9966b0f80a6db0153dd011930245e0a2dbc9f41
SHA256 8eab484067790790f71bf211b4445cea31e19116b9baf7dae810baa258f24286
SHA512 8cd7a0684cafde09f3166b61ca3139d55dbde6ec6cd6b6544294fe83b1ef9b0c2368613d4b94e91197d1867d8344c17fcdb04266ea47821dfe005affb75d672b

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\15AF7F87-B386-466c-9A8F-DD7CD55339D3.le

MD5 0064bbed7c94b48d3c8c1f674a6b3f13
SHA1 a74eeba4ca628616c09832bd1ec6fbf3b4d5d79e
SHA256 dba6a061c3a19b57276ff324ca4ec2d26e7490327b4ef43523d57e289365d23f
SHA512 9cc208164cd001546643f46f207a22a5a1f7183e577e50be397172a5a2279176e378d4bbe37a974a39833de5409d7d0e5514f45156c4f8349587376d2a2ed968

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\28AA6B77-DDE5-4bba-B3E6-F8DD27C7BCF2.le

MD5 4655072364a587d2c46a7ca791fb40f9
SHA1 a5bccf702b157557cf28657e409c424478f3d793
SHA256 33bb18e2adcadc43d929ae919ab6a3b039954119252106060091782b7387b32e
SHA512 d4791bc8eb1b165e23783f3b9286edf15ba090de6d98106b84fd13cce7a38ac642fbd19958aa2c453534c71fcd1e1071ecb7b9ef8c5dd5fa9e530aac598b7df6

C:\Users\Admin\AppData\Roaming\GK6XPlus-CMS\Account\0\LE\849A6BA8-7C6F-4cab-BB62-7CEABCFC9E5E.le

MD5 4de207e72f3031c43425572897710d2d
SHA1 0bab9d47916f2c8cd2920eb2c7d38cb4066235de
SHA256 d0dddfd360f4d640debba94ac0f9cc7a6de7301736953b1c40f835566bf12275
SHA512 555c0e250891400e869312b92f618bb2753998c350f2412b76982a6458fe9666dc86d6e58d28186c189fb33411701f94e3d9f3777e5e2992e455eddf35eba9f5

Analysis: behavioral26

Detonation Overview

Submitted

2024-11-14 12:41

Reported

2024-11-14 12:46

Platform

win7-20240729-en

Max time kernel

7s

Max time network

18s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2296 wrote to memory of 2316 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 2296 wrote to memory of 2316 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe
PID 2296 wrote to memory of 2316 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\WerFault.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1

C:\Windows\system32\WerFault.exe

C:\Windows\system32\WerFault.exe -u -p 2296 -s 88

Network

N/A

Files

N/A