Malware Analysis Report

2025-01-22 20:50

Sample ID 241125-1wqghaylay
Target LockBit-main (1).zip
SHA256 707bb3b958fbf4728d8a39b043e8df083e0fce1178dac60c0d984604ec23c881
Tags
blackmatter lockbit defense_evasion discovery persistence privilege_escalation ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

707bb3b958fbf4728d8a39b043e8df083e0fce1178dac60c0d984604ec23c881

Threat Level: Known bad

The file LockBit-main (1).zip was found to be: Known bad.

Malicious Activity Summary

blackmatter lockbit defense_evasion discovery persistence privilege_escalation ransomware spyware stealer

Rule to detect Lockbit 3.0 ransomware Windows payload

BlackMatter Ransomware

Blackmatter family

Lockbit

Lockbit family

Renames multiple (645) files with added filename extension

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Reads user/profile data of web browsers

Loads dropped DLL

Checks computer location settings

Indicator Removal: File Deletion

Enumerates connected drives

Drops desktop.ini file(s)

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

Sets desktop wallpaper using registry

Drops file in Windows directory

Drops file in Program Files directory

System Location Discovery: System Language Discovery

Unsigned PE

Program crash

Enumerates physical storage devices

Modifies registry class

Suspicious behavior: RenamesItself

Enumerates system info in registry

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

Uses Task Scheduler COM API

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Modifies Internet Explorer settings

Modifies Control Panel

Checks processor information in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-25 22:00

Signatures

Blackmatter family

blackmatter

Lockbit family

lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload

Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-25 22:00

Reported

2024-11-25 22:18

Platform

win10v2004-20241007-en

Max time kernel

820s

Max time network

522s

Command Line

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\LockBit-main (1).zip"

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Lockbit

ransomware lockbit

Lockbit family

lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Renames multiple (645) files with added filename extension

ransomware

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\International\Geo\Nation C:\ProgramData\F53B.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\International\Geo\Nation C:\ProgramData\D701.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\International\Geo\Nation C:\ProgramData\9A96.tmp N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\ProgramData\9A96.tmp N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\ProgramData\F53B.tmp N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\ProgramData\D701.tmp N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A \??\c:\Windows\System32\MsiExec.exe N/A
N/A N/A \??\c:\Windows\System32\MsiExec.exe N/A
N/A N/A \??\c:\Windows\System32\MsiExec.exe N/A

Reads user/profile data of web browsers

spyware stealer

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\desktop.ini C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-940901362-3608833189-1915618603-1000\desktop.ini C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\desktop.ini C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\desktop.ini C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A

Indicator Removal: File Deletion

defense_evasion

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\spool\PRINTERS\PPwwnox1nry9028f0g8bb9tvxyd.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PP7xow46_9gmj07xwqbmyx3t7mb.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File created C:\Windows\system32\spool\PRINTERS\00002.SPL C:\Windows\splwow64.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPc6psrs87k7fzwb9005dpcq7ec.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPz_b7vl72j_r3gosu38tzw_55d.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db-wal C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File created C:\Windows\system32\spool\PRINTERS\00003.SPL C:\Windows\splwow64.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db-shm C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPgbmcorbni7kfusmr0gj1a23tb.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db-wal C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PP5t95koxd4gzq0h20jurk3hsod.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File created C:\Windows\system32\spool\PRINTERS\00004.SPL C:\Windows\splwow64.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPei_rr5ayvng8b0k_16x3ro_td.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPcvf4cm7x7yxx7y9mr3kabkesc.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db-shm C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
File created C:\Windows\system32\spool\PRINTERS\PPrgsjbcwi1glslnazr1hz8aqu.TMP C:\Windows\system32\printfilterpipelinesvc.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\ecZjqvIis.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\ecZjqvIis.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\OAsbMmsxa.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\4Q9YIfq99.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\4Q9YIfq99.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\OAsbMmsxa.bmp" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallPaper C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\ProgramData\9A96.tmp N/A
N/A N/A C:\ProgramData\F53B.tmp N/A
N/A N/A C:\ProgramData\D701.tmp N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\LICLUA.EXE C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\pidgenx.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Microsoft Office\Office16\OSPP.VBS C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Microsoft Office\Office16\OSPP.HTM C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Microsoft Office\Office16\SLERROR.XML C:\Windows\system32\msiexec.exe N/A
File created \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\ C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSICD5D.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSICD9D.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\msvcp140.dll_x86 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\vccorlib140.dll_x86 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\vcruntime140.dll_x64 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\CacheSize.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\a25c.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\concrt140.dll_x86 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\msvcp140.dll_x64 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\msvcp140_1.dll_x86 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\vccorlib140.dll_x64 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\vcruntime140.dll_x86 C:\Windows\system32\msiexec.exe N/A
File created \??\c:\Windows\Installer\e58cafc.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSICEC7.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\concrt140.dll_x64 C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\16.0.12527\msvcp140_1.dll_x64 C:\Windows\system32\msiexec.exe N/A
File created \??\c:\Windows\Installer\e58cb0d.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSID0CB.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\e58cafc.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File created \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\CacheSize.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\$PatchCache$\Managed\00006109E70000000100000000F01FEC\ C:\Windows\system32\msiexec.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\F53B.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\keygen.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\9A96.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\D701.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\LockBit-main\builder.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A

Modifies Control Panel

evasion
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\Desktop C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\LICLUA.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\OSPPREARM.EXE = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING C:\Windows\system32\msiexec.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\TrustCenter\Experimentation C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|11" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.13 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigIds = "std::wstring|P-R-1098158-1-5,P-R-76757-1-2,P-R-54903-1-3,P-R-26146-7-17,P-D-29635-1-1,P-D-27087-1-9,P-R-79688-1-3,P-R-53532-1-5,P-R-51436-1-6,P-R-51427-18-12,P-R-40464-18-9,P-X-98518-6-9,P-R-38390-18-21,blockedgraphicsadapter5:475899,P-R-35099-2-4,P-R-61408-18-3,P-R-55746-2-5,P-R-53512-1-4,P-R-46974-18-18,P-R-38953-1-11,P-R-36551-18-18,P-R-71414-1-6,P-R-40253-6-19,P-R-40254-6-18,P-R-35401-6-7,P-R-32107-22-22,P-R-39146-14-15,P-R-39147-14-20,P-R-28546-6-11,P-R-28165-6-28,P-R-24980-8-48,P-R-24390-5-12,P-R-18279-2-65,P-D-34200-4-5,P-R-51145-2-7,P-R-29928-2-20,P-R-67932-1-4,P-R-67201-1-4,P-R-64545-1-4,P-R-64035-1-4,P-R-53515-18-9,P-R-53280-1-6,P-R-52247-1-5,P-R-51958-1-5,P-R-51842-1-5,P-R-51277-2-6,P-R-47451-18-20,P-R-45919-18-19,P-R-45085-18-12,P-R-41442-18-18,P-R-38085-12-9,P-R-18744-6-22,P-D-34239-1-6,P-R-1034169-10-7,P-E-28677-C1-3,P-R-55122-8-8,P-R-50255-10-9,P-R-44907-1-9,P-R-45314-10-16,P-R-44965-2-6,P-X-1240823-2-3,P-E-38231-2-4,P-R-1245662-16-4,P-R-94560-14-12,P-R-94189-14-13,P-R-93882-14-26,P-R-54728-16-23,P-R-54698-16-16,P-R-54658-18-19,P-R-38306-18-3,P-R-35717-5-30,P-R-34019-4-3,win32devicecanarycf:541484,win32devicecanarycf:541484,P-X-53845-1-9,P-X-53772-1-3,P-X-51790-1-3,P-R-1025232-24-9,P-R-71358-1-4,P-R-70941-1-4,P-R-69065-1-3,P-R-67160-1-7,P-R-59781-1-4,P-R-55631-1-4,P-R-54215-1-4,P-R-53751-1-4,P-R-53752-1-4,P-R-53526-1-4,P-R-52110-1-4,P-R-49765-15-32,P-R-48818-17-25,P-R-50679-1-4,P-R-50486-18-12,P-R-44830-18-13,P-R-49416-4-14,P-R-48457-2-6,P-R-47974-16-18,P-R-46544-18-11,P-R-45609-14-6,P-R-45197-2-6,P-R-44046-18-11,P-R-44015-18-20,P-R-43723-2-6,P-R-41742-18-32,P-R-40980-18-16,P-R-40359-2-10,P-R-39029-5-18,P-R-38835-18-48,P-R-37676-18-46,P-R-36310-4-5,P-R-35945-10-5,P-R-35165-2-7,P-R-35143-4-4,P-R-33553-4-6,P-R-33536-12-13,P-R-29809-1-7,P-R-26968-3-9,P-R-18425-8-62,P-R-18426-5-30,P-R-18424-4-34,fiser190:377704,happy03172020-1:61977,happy02062020-0:28428,P-R-53545-4-5,P-R-50711-18-11,P-R-49736-6-22,P-R-48467-18-18,P-R-32106-7-33,P-R-30085-1-9,P-R-29138-38-83,P-R-29315-36-69,P-R-25009-1-8,P-R-24363-1-13,P-R-21631-10-64,P-R-19898-1-22,P-R-19814-1-62,P-R-19012-1-57,P-X-50220-1-3,P-X-49730-1-3,P-R-69347-1-5,P-R-64574-1-4,P-R-54116-1-4,P-R-53585-18-18,P-R-52594-18-5,P-R-52386-1-4,P-R-50980-2-4,P-R-50938-1-4,P-R-50152-18-20,P-R-49175-18-22,P-R-47260-18-23,P-R-44156-18-26,P-R-43284-18-19,P-R-43285-12-22,P-R-42482-1-4,P-R-40990-12-15,P-R-39333-18-28,P-R-35439-12-21,P-R-33215-18-19,P-R-31352-12-25,P-D-34269-2-5,gruse488:570358,grico406:19777,P-R-49830-18-15,P-R-40586-18-27,P-R-32996-18-24,P-D-40316-9-5,P-R-50429-18-8,P-R-65295-18-30,P-R-61861-1-4,P-R-61737-1-4,P-R-51777-18-8,P-R-50920-1-6,P-R-50366-18-19,P-R-35985-14-23,P-R-35891-18-5,P-R-32004-2-5,P-X-1276509-1-5,P-R-1280425-13-17,P-R-68336-2-4,P-R-67286-2-6,P-R-51513-2-4,i0d76970:598689,P-R-79963-1-2,P-R-52043-1-3,P-R-51764-1-4,P-R-49388-2-6,P-R-48335-4-16,P-R-47308-3-9,P-R-42392-2-4,P-R-39073-1-5,P-R-1123376-10-12,P-R-1009855-12-14,P-R-98856-18-48,P-R-43489-30-15,P-R-38410-12-23,P-X-1291246-2-3,P-X-1019581-1-3,P-X-1006174-1-5,P-R-66436-1-4,P-R-62873-1-4,P-R-51097-1-5,P-R-50706-18-7,P-R-50055-18-7,P-R-49315-18-5,P-R-42660-18-35,P-R-36649-8-9,ch371179:600396,oemic639:397753,oeall843:375887,P-R-42379-2-3,P-R-42378-2-3,P-R-66539-1-4,P-R-66538-1-4,P-R-65278-1-4,P-R-65279-1-4,P-R-59180-1-4,P-R-48070-1-5,P-R-47386-1-4,P-R-55342-2-2,P-R-53377-2-6,P-R-52481-2-5,P-R-49759-2-8,P-R-46100-20-9,P-R-38510-2-10,P-R-37550-20-13,P-R-32186-28-29,P-R-58135-2-4,P-R-56618-1-3,P-R-56027-1-4,P-R-46145-18-18,P-R-33892-1-8,P-R-33696-1-5,P-R-55749-1-4,P-R-53662-1-4,P-R-52246-1-4,P-R-52245-1-4,P-R-52238-1-5,P-R-43644-6-13,P-R-39912-1-2,P-R-39283-4-10,P-R-50380-18-18,P-R-50379-18-17,P-R-68146-1-5,P-R-63409-1-5,P-R-50542-18-14,P-R-50500-18-16,P-R-48365-18-24,P-R-48161-18-32,P-R-46597-1-4,P-R-33737-1-4,P-E-29662-2-3,P-R-29303-2-20,P-R-56654-2-4,P-R-51703-1-5,P-R-50133-2-9,P-R-47242-18-11,P-R-46410-1-5,P-R-45550-C17-46,P-R-45490-16-9,P-R-44885-18-20,P-R-42512-1-3,P-R-40169-8-13,P-R-32143-5-18,P-R-37313-18-22,P-R-36664-4-4,P-R-35476-2-5,P-R-35407-4-3,P-R-35237-14-11,P-R-35150-2-4,P-R-35129-2-4,P-R-35056-4-5,P-R-34889-8-4,P-R-34044-2-4,P-R-33718-6-5,P-R-33459-1-5,P-R-30292-4-8,P-R-28644-1-4,P-R-24037-1-7,P-R-23445-3-7,P-R-23434-3-7,P-R-18513-1-30,P-D-34699-4-4,P-D-34697-2-4,P-D-34675-1-4,P-D-34673-1-4,P-D-34654-1-4,P-D-34587-3-5,P-D-34266-1-4,P-D-34262-1-5,P-D-34260-1-5,P-D-34258-2-5,P-D-32465-1-5,P-D-32459-2-4,P-D-32458-5-4,P-X-1083427-2-5,P-R-69529-1-5,P-R-65011-1-3,P-R-53622-18-4,P-R-50541-2-7,P-R-49893-22-9,P-R-36932-2-13,jh8ab447:380633,P-R-69232-18-13,P-R-23681-2-7,P-D-32502-2-3,P-D-32501-2-3,P-D-32415-2-3,P-R-64513-18-11,P-R-51916-84-31,P-R-1479674-1-3,P-R-23746-32-46,P-R-38248-20-26,P-R-1286642-1-3,P-R-1280186-1-3,P-R-1267084-2-6,P-R-1258784-3-5,P-R-1245296-4-6,P-R-1236953-4-6,P-R-1157570-2-4,P-R-1132821-2-4,P-R-1119013-1-3,P-R-1098796-1-3,P-R-1094445-1-3,P-R-1080412-1-3,P-R-1069769-2-4,P-R-1068115-1-3,P-R-1045118-2-4,P-R-25269-14-21,P-R-1044408-1-3,P-R-1044141-7-9,P-R-1037887-1-3,P-R-1037879-1-3,P-R-1036293-1-3,P-R-1036292-1-3,P-R-1036289-2-4,P-R-1036288-1-3,P-R-1036068-2-4,P-R-1035933-2-4,P-R-1035149-2-4,P-R-1033817-1-3,P-R-1028168-1-3,P-R-1009717-3-5,P-R-1000061-2-4,P-R-117548-2-4,P-R-111682-1-3,P-R-105731-36-38,P-R-104435-13-15,P-R-100294-1-3,P-R-99633-1-3,P-R-98929-2-4,P-R-98250-1-3,P-R-94299-1-3,P-R-93077-1-3,P-R-86118-1-3,P-R-80517-7-9,P-R-78112-4-6,P-R-77140-2-4,P-R-76918-2-4,P-R-76721-1-3,P-R-75440-2-4,P-R-73676-1-3,P-R-72449-7-10,P-R-72030-4-6,P-R-68069-2-4,P-R-66975-1-3,P-R-65567-1-3,P-R-62212-2-4,P-R-60602-3-5,P-R-52633-1-3,P-R-52171-2-4,P-R-52011-2-4,P-R-51921-8-10,P-R-51258-8-10,P-R-50752-2-4,P-R-50681-2-4,P-R-50599-4-6,P-R-50596-4-8,P-R-50553-1-3,P-R-49597-3-5,P-R-49458-2-4,P-R-48530-7-9,P-R-47948-1-4,P-R-46580-3-5,P-R-46484-10-12,P-R-46122-1-3,P-R-45858-2-4,P-R-43966-2-4,P-R-43502-19-21,P-R-41430-1-3,P-R-40751-8-10,P-R-40273-4-6,P-R-39238-5-7,P-R-38682-3-5,P-R-37588-2-4,P-R-34355-8-10,P-R-26266-4-9,P-R-26834-3-8,P-R-24662-16-22,P-R-27479-6-11,P-R-26056-7-15,P-R-27006-7-12,P-R-30338-3-7,P-R-30178-79-81,P-R-30053-8-10,P-R-27458-1-5,P-R-25822-16-19,P-R-25083-6-9,P-R-24690-43-47,P-R-24689-2-5,P-R-24666-2-5,P-R-24663-6-11,P-R-24659-7-10,P-R-23744-7-9,P-R-23739-7-9,P-R-23736-14-17,P-R-23734-7-9,P-R-23730-21-24,P-R-23723-10-12,P-D-32588-1-3,P-D-32534-1-3,P-D-32524-1-3,P-D-32518-1-3,P-D-32512-1-3,P-D-32509-1-3,P-D-32485-1-4,P-D-32484-1-4,P-D-32405-1-3,P-R-1087141-4-7,P-R-49160-12-12,P-R-47601-18-13,P-R-46834-12-14,P-R-46202-18-11,P-R-44018-18-13,P-R-43355-18-12,P-R-35337-16-7,P-R-33916-1-5,P-R-33580-8-9,P-X-117400-1-3,P-R-59175-18-4,P-R-53292-14-10,P-R-49130-18-23,P-R-46913-18-8,P-R-37449-18-15,uxmediumiconluminance:353455,P-R-48549-18-11,P-R-19262-1-12,P-E-44774-2-9,P-R-44869-16-16,P-R-33918-1-11,P-R-1128630-1-7,P-R-1098412-1-5,P-R-1091267-1-55,P-R-81720-1-2,P-R-58406-1-5,P-D-50697-2-4,P-D-29719-1-1,P-D-29718-1-1,P-D-29593-1-6" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\System32\ci.dll,-101 = "Enclave" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|6" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.7 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.10 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|10" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.4 = 4d6963726f736f66742e4f66666963652e5368617265642e4175746f436f727265637455492e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4275674669786573466f7252657472794661696c65645265717565737473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4c696d6974546f4f6e654175746f446973636f766572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4f6e6c795573654874747073222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e426f6f7449646c655468726f74746c6572222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4275674669782e506572736f6e61436f6e74726f6c4261636b67726f756e64436f6c6f72222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4368616e6765476174652e44656c617943757272656e745549416374697665506c616365557064617465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4372634261736564556964222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e43726974697175652e44697361626c65644c616e677561676573222c20225622203a20227374643a3a77737472696e677c6a612c7a6822207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e43726974697175652e4c6f67496e7465726e616c4e616d65416e645072696f72697479222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e456469746f72536572766963652e557365496e737472756d656e746174696f6e417069222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4e6f7277656769616e426f6b6d61616c456e746572707269736547726f757031222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772617068496d706f72744865647769675558222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772617068496d706f7274496e73657274416c6c4f626a6563747356696577222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e47726170686963732e4368616e6765476174652e5570646174655461626c65426f756e6473466f72547970696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4967782e456e7375726545326f4d6f6e696b65724166746572456e7375726545326f222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4e6577456e737572655549444c6f676963222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4f6666696365496e7369646572526567697374726174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e416c6c6f7746696e6450656f706c655573616765496e41744d656e74696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e4175746f436f6d706c6574652e46696e6450656f706c65537570706f7274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e4669784e6f6e526566436f756e7465644d736f506572736f6e6173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e4261636b67726f756e64576f726b436f6e74726f6c6c6572427567466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e427567466978466f7241744d656e74696f6e734d6f6e69746f72696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e427567466978466f7250686f746f41637469766974794c6f6767696e6752656d6f76616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e436f6e746163744361726456324f766572666c6f774d656e7573506861736532222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e46696e6450656f706c655573616765456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e497350656f706c655365617263684578656375746f72456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e506378417072696c323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784665627275617279323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784a616e75617279323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784a756e65323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784d61726368323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e557365506378436f6e74616374496e666f4c697374222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378417072696c323031374275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6d6d6f6e436f6d70617265427567466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6e746163744361726444706941776172656e6573734275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6e7461637443617264466f6e74486569676874444450494275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784a756e65323031374275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784d61726368323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784f63746f626572323031364275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e436f6e7461637453656172636849676e6f72657353796d626f6c73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e50637848616e646c65734175746f446973636f766572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e526563697069656e744175746f436f6d706c657465537570706f7274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50726f6f66696e672e4175746f4d616e616765722e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e536d6172744c696e6b732e416c6c6f775265636f676e697a65536d6172744c696e6b73496e7369646550617261677261706873222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e54686573617572757350616e652e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5472616e736c61746f722e456e61626c65466c6f6f6467617465537572766579222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5472616e736c61746f722e466c6f6f646761746553757276657944656c6179222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e576f72642e46574153686f756c64426c6f636b53656c4368616e67656446616c73654576656e7473222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e576f72642e57726974696e67417373697374616e63654372697469717565466f724347415049222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e57726974696e67417373697374616e636555492e50616e652e46697857726f6e67436c6f73654c6f676963222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e436f6c6f72466f6e74537570706f7274456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e46696c6556657273696f6e696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e48696464656e466f6e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e4f4172745465787456616c696461746552616e6765564544222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e52696368456469742e416c6c6f774475706c696361746555696d557064617465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e52696368456469742e436f7079506173746548544d4c222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e5472616e7363726962652e436f6e666967436865636b44697361626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d657472792e417269614d617854656172646f776e55706c6f616454696d65496e536563222c20225622203a2022696e7433325f747c3222207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d657472792e566f6c756d65547261636b696e674d61784576656e7473222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4169725370616365222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c224261636b656e645c22203a207b205c224576656e74735c22203a207b205c224c61796572486f7374496e697469616c697a6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6d706f7369746f7253657373696f6e547970655c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c2257696e33325c22203a207b205c225375624e616d657370616365735c22203a207b205c224c65676163795c22203a207b205c224576656e74735c22203a207b205c22416e696d6174696f6e50657263656e74556e64657233304650535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416e696d6174696f6e4176674650535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243726f737357696e54496d654f6646697273744672616d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224176657261676550726573656e74735065725365636f6e645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4368617274696e67222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22436861727445326f4c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436861727445326f536176655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224368617274696e67456e644c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e436c69636b546f52756e222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c225363656e6172696f5c22203a207b205c224576656e74735c22203a207b205c225570646174655461736b557064617465646574656374696f6e325c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b557064617465646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b557064617465636c69656e74646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265706169725461736b46756c6c7265706169725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265706169725461736b52656d6f7665696e7374616c6c6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b436f6e6669677572656c696768745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c69656e747570646174655461736b436c69656e74646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b53747265616d5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b437265617465776f726b696e67636f6e66696775726174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b55706461746566696e616c697a655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225461736b4c61737452756e4865617274626561745c22203a207b205c224576656e74735c22203a207b205c225461736b4c61737452756e4865617274626561745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22556e6976657273616c426f6f7473747261707065725c22203a207b205c224576656e74735c22203a207b205c224170706c69636174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c656374506172616d65746572735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c656374456d6265646465645369676e61747572655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616c63756c617465506172616d65746572735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436c69656e744361624d616e616765725c22203a207b205c224576656e74735c22203a207b205c225461736b557064617465436c69656e74446f776e6c6f6164446f457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225461736b436c69656e74446f776e6c6f6164446f457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2253747265616d4361625c22203a207b205c224576656e74735c22203a207b205c22446f776e6c6f616453747265616d4361625c C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSession\officeclicktorun C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe\ULSMonitor\ULSTagIds0 = "5804129,18679566,7202269,23978014,5850525,7692557,39965824,34198423,41484365,17962391,17962392" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe\ULSMonitor C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.9 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.11 = 6e74466c61675c22203a20323536207d2c205c22506572666f726d4c6963656e73696e674e6f74696669636174696f6e735c22203a207b205c224576656e74466c61675c22203a20323536207d207d2c205c225375624e616d657370616365735c22203a207b205c224c5655585c22203a207b205c224576656e74735c22203a207b205c224e6f456e7469746c656d656e74735c22203a207b205c224576656e74466c61675c22203a203439343038207d2c205c224e6f456e7469746c656d656e74734578706572696d656e74547269676765725c22203a207b205c224576656e74466c61675c22203a203439343038207d207d207d2c205c224f6666696365436c69656e744c6963656e73696e675c22203a207b205c224576656e74735c22203a207b205c224c6963656e7365436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6567616379416374697669747953756363657373436f756e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c656761637941637469766974794661696c757265436f756e745c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c22436c69656e745c22203a207b205c224576656e74735c22203a207b205c224653686f756c6441637469766174655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224865617274626561745c22203a207b205c224576656e74735c22203a207b205c22577269746543616368655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265616443616368655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22517569636b56616c69646174696f6e5c22203a207b205c224576656e74735c22203a207b205c224c6f61644c6963656e73655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2246756c6c56616c69646174696f6e5c22203a207b205c224576656e74735c22203a207b205c224c6f61644c6963656e73655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2250726f706572746965735c22203a207b205c224576656e74735c22203a207b205c224765744c6963656e736543617465676f72795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f6b656e697a654c6963656e736543617465676f726965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174654c6963656e736543617465676f726965735c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224272616e64696e675c22203a207b205c224576656e74735c22203a207b205c2247657441707056616c75655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657450726f6475637456616c75655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2253686f756c645573654d6963726f736f66743336354272616e64696e675c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2254656e616e745c22203a207b205c224576656e74735c22203a207b205c22496e697454656e616e7449645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224e756c5c22203a207b205c225375624e616d657370616365735c22203a207b205c22466574636865725c22203a207b205c224576656e74735c22203a207b205c224765744e756c4f626a656374466f724964656e746974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2246657463684d6f64656c46726f6d4f6c735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744c6963656e73654665617475726573466f724964656e746974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243726561746552657175657374426f64795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f64656c5c22203a207b205c224576656e74735c22203a207b205c224765744c6963656e736543617465676f72795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22476574416c6c4c6963656e736543617465676f726965735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446573657269616c697a655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225061727365526177526573706f6e73655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243616e52756e46656174757265526573756c74735c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224d6f64655c22203a207b205c224576656e74735c22203a207b205c224765744d6f64655c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224170695c22203a207b205c224576656e74735c22203a207b205c22437265617465526571756573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253656e64526571756573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2252656365697665526573706f6e73655c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2253746f726167655c22203a207b205c224576656e74735c22203a207b205c2247657453746f72616765506174685c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f61644d6f64656c735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22476574556e766572696669656453746f72616765506174685c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f61644d6f64656c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2252656e616d6546696c65546f55736555706461746564486173685c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2256616c69646174696f6e5c22203a207b205c224576656e74735c22203a207b205c22517569636b56616c69646174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2256616c696461746f725c22203a207b205c224576656e74735c22203a207b205c224d61746368696e67486172776172656449645c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d2c205c22466c6f77735c22203a207b205c224576656e74735c22203a207b205c22536561726368466f72534341546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4d6f786965222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74466c61675c22203a203438383936207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4f6666696365222c20225622203a20227374643a3a77737472696e677c7b205c224c6f636b65645c22203a2066616c73652c205c225375624e616d657370616365735c22203a207b205c224e61747572616c4c616e67756167655c22203a207b205c224c6f636b65645c22203a2066616c73652c205c225375624e616d657370616365735c22203a207b205c224372697469717565735c22203a207b205c224c6f636b65645c22203a2066616c73652c205c224576656e74735c22203a207b205c2250726f636573734175676c6f6f704372697469717565735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250726f636573734175676c6f6f7041646443726974697175655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4f75746c6f6f6b222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c224465736b746f705c22203a207b205c225375624e616d657370616365735c22203a207b205c2253796e635c22203a207b205c224576656e74735c22203a207b205c2253796e6350757267654f66666c696e654974656d735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2256696577735c22203a207b205c224576656e74735c22203a207b205c224872566965774c6f6164436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22566965774d6f64655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e506572666f726d616e6365222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22506572665363656e6172696f5c22203a207b205c224576656e74735c22203a207b205c2253636f70655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e506572736f6e616c697a6174696f6e222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c2246696c65496e736967687443616368654d616e616765725c22203a207b205c224576656e74735c22203a207b205c2250757267654578706972656443616368655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225369676e616c50726f636573736f725c22203a207b205c224576656e74735c22203a207b205c2253656e645369676e616c5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e50726f6772616d6d6162696c697479222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c2254656c656d657472795c22203a207b205c224576656e74735c22203a207b205c22446e61416464496e4c6f6164586c6c46696c655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446e61416464496e4c6f616445787465726e616c446c6c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446e61416464496e4c6f6164446e6146696c655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416464696e43726173685c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22416464696e735c22203a207b205c224576656e74735c22203a207b205c22417070416464496e4c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22417070416464496e55736167655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416464696e446f634c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7465726e616c536574436f6e6e6563745c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e5365637572697479222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22506f6c696379546970735c22203a207b205c224576656e74735c22203a207b205c224d616e61676572436f6e74696e7565436c617373696669636174696f6e436c6173736966794368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c617373696669636174696f6e436c6173736966794368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436c705c22203a207b205c224576656e74735c22203a207b205c224c6162656c55736167655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f7574636f6d6555736167655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f66666963654a534765744c6162656c44657461696c735c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22436c70506f6c696379466574636843616c6c4261636b537563636573735c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224d616e6461746f72794c6162656c6c696e674469616c6f675c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f626a6563744d6f64656c4765744c6162656c5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f626a6563744d6f64656c5365744c6162656c5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f626a6563744d6f64656c506f6c696379436f6d706c657465496e697469616c697a655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2253656c6563744a757374696669636174696f6e4f7074696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2253656e7369746976697479466c796f7574416e63686f72547261636b416e645265766f6b65427574746f6e436c69636b5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c225265676973746572446f63756d656e745c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22436c70506f6c69637946657463685c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22436c70506f6c696379466574636843616c6c4261636b4661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224372656174654c6963656e736546726f6d53657269616c697a65644c6963656e73655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2250726f74656374696f6e53657269616c697a654c6963656e73655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2246657463684c6162656c7346726f6d5365727665725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657444656661756c744c6162656c49445c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744c6162656c735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744f7574636f6d6573466f724c6162656c4368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250726f6365737341756469744f6e506f6c6963794d617463685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250726f6365737341756469744f6e5265706c79466f72776172645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250726f6365737341756469744f70656e48656c7065725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744175646974496e666f506f6c6963794d617463685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744175646974496e666f4c6162656c416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744175646974496e666f46696c65416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6162656c696e67457870657269656e63655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224164644c6162656c4f627365727665725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2252656d6f76654c6162656c4f627365727665725c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c22436c705c22203a207b205c224576656e74735c22203a207b205c22446b6550726f746563746564436f6e74656e745c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d2c205c224d6163726f5c22203a207b205c224576656e74735c22203a207b205c22426c6f636b4d6163726f46726f6d496e7465726e6574506f6c69637953657474696e675c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22456e636f756e74657265645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22456e61626c65645c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2246696c65426c6f636b5c22203a207b205c224576656e74735c22203a207b205c2246696c65426c6f636b496e666f726d6174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224f43585c22203a207b205c224576656e74735c22203a207b205c2254727573746564456e636f756e7465725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224e6f6e54727573746564456e636f756e7465725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22416363657373456e636f756e7465725c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c22426c6f636b6564657874656e73696f6e735c22203a207b205c224576656e74735c22203a207b205c2246696c65457874656e73696f6e4c69737446726f6d536572766963655c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c22536563757265526561646572486f73745c22203a207b205c224576656e74735c22203a207b205c224f70656e496e4f53525c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d2c205c224576656e74735c22203a207b205c22436c70547279557067726164654c6162656c4661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.6 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|12" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|13" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\VersionId = "uint16_t|0" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t|1732615299" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe\ULSMonitor C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|7" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe\ULSMonitor\ULSTagIds0 = "18679566,5804129,7202269,23978014,39965824,7692557,5850525,34198423,41484365,17962391,17962392" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|0" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\System32\fveui.dll,-844 = "BitLocker Data Recovery Agent" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe\ULSMonitor C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\system32\dnsapi.dll,-103 = "Domain Name System (DNS) Server Trust" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\integrator.exe C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.8 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|9" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\System32\wuaueng.dll,-400 = "Windows Update" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|8" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.12 = 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 C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\4Q9YIfq99 C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ecZjqvIis C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.4Q9YIfq99\ = "4Q9YIfq99" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\LocalizedString = "@%CommonProgramFiles%\\Microsoft Shared\\Office16\\oregres.dll,-489" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0\0\win64\ = "c:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\LICLUA.EXE" C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\AccessPermission = 010004807000000080000000000000001400000002005c0004000000000014000700000001010000000000050a000000000014000300000001010000000000051200000000001800070000000102000000000005200000002002000000001400070000000101000000000005040000000102000000000005200000002002000001020000000000052000000020020000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\TypeLib\Version = "10.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\NumMethods\ = "4" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\00006109E70000000100000000F01FEC C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\펆兵㚙 C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject\ = "LicLua.LicLuaObject" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\00006109E70000000100000000F01FEC\OSppWoW64 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0\0\win64 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\ProgID C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\.ecZjqvIis C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\VersionIndependentProgID\ = "LicLua.LicLuaObject" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.4Q9YIfq99 C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\00006109E70000000100000000F01FEC C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject.16\CLSID C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\୉拽耀\ = "json_auto_file" C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject.16\ = "LicLua.LicLuaObject.16" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\ProgID\ = "LicLua.LicLuaObject.16" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\LocalServer32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\LicLua.LicLuaObject\CLSID C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\NumMethods C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\LocalServer32\ = "\"c:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\LICLUA.EXE\"" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\ProxyStubClsid C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\00006109E70000000100000000F01FEC\OSpp C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject\CurVer\ = "LicLua.LicLuaObject.16" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\ = "ILicLua" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\Elevation\IconReference = "@c:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\liclua.exe,-1" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\OASBMMSXA\DEFAULTICON C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\00006109E70000000100000000F01FEC\SourceList C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0\FLAGS C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0\0 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject\CurVer C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject.16\CLSID\ = "{1E886174-DC88-4B83-8BC5-66409EC75F16}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{1E886174-DC88-4B83-8BC5-66409EC75F16}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\00006109E70000000100000000F01FEC C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\ProxyStubClsid C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\LicLua.LicLuaObject\CLSID C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\4Q9YIfq99\DefaultIcon\ = "C:\\ProgramData\\4Q9YIfq99.ico" C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\00006109E70000000100000000F01FEC\Version = "268447983" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\.OASBMMSXA C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\LicLua.LicLuaObject\CurVer C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\ecZjqvIis C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716}\10.0\FLAGS\ = "0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\00006109E70000000100000000F01FEC\WixSwidTag C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\4Q9YIFQ99 C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
Key created \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\.json C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\json_auto_file\shell\open\command\ = "\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\"" C:\Windows\system32\OpenWith.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\LICLUA.EXE C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A4D51C5D-F8BF-46CC-92CC-2B34D2D89716} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ecZjqvIis\DefaultIcon C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\00006109E70000000100000000F01FEC\SourceList\LastUsedSource = "n;1;c:\\program files\\microsoft office\\root\\integration\\" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Interface\{033D10C1-80FA-40E2-B578-A800DF9A9316}\TypeLib C:\Windows\system32\msiexec.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: 36 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: 33 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\integration\integrator.exe N/A
N/A N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4736 wrote to memory of 4672 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\keygen.exe
PID 4736 wrote to memory of 4672 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\keygen.exe
PID 4736 wrote to memory of 4672 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\keygen.exe
PID 4736 wrote to memory of 1996 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1996 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1996 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1932 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1932 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1932 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2104 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2104 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2104 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1032 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1032 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 1032 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 3416 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 3416 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 3416 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2652 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2652 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 4736 wrote to memory of 2652 N/A C:\Windows\system32\cmd.exe C:\Users\Admin\Desktop\LockBit-main\builder.exe
PID 2920 wrote to memory of 7096 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\Windows\splwow64.exe
PID 2920 wrote to memory of 7096 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\Windows\splwow64.exe
PID 7012 wrote to memory of 5564 N/A C:\Windows\system32\printfilterpipelinesvc.exe C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE
PID 7012 wrote to memory of 5564 N/A C:\Windows\system32\printfilterpipelinesvc.exe C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE
PID 2920 wrote to memory of 5732 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\ProgramData\9A96.tmp
PID 2920 wrote to memory of 5732 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\ProgramData\9A96.tmp
PID 2920 wrote to memory of 5732 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\ProgramData\9A96.tmp
PID 2920 wrote to memory of 5732 N/A C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe C:\ProgramData\9A96.tmp
PID 5732 wrote to memory of 6268 N/A C:\ProgramData\9A96.tmp C:\Windows\SysWOW64\cmd.exe
PID 5732 wrote to memory of 6268 N/A C:\ProgramData\9A96.tmp C:\Windows\SysWOW64\cmd.exe
PID 5732 wrote to memory of 6268 N/A C:\ProgramData\9A96.tmp C:\Windows\SysWOW64\cmd.exe
PID 2672 wrote to memory of 4316 N/A C:\Windows\system32\msiexec.exe \??\c:\Windows\System32\MsiExec.exe
PID 2672 wrote to memory of 4316 N/A C:\Windows\system32\msiexec.exe \??\c:\Windows\System32\MsiExec.exe
PID 5316 wrote to memory of 5508 N/A C:\Windows\system32\OpenWith.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5316 wrote to memory of 5508 N/A C:\Windows\system32\OpenWith.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5508 wrote to memory of 5396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5396 wrote to memory of 6484 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\LockBit-main (1).zip"

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\LockBit-main\builder.exe

"C:\Users\Admin\Desktop\LockBit-main\builder.exe"

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

"C:\Users\Admin\Desktop\LockBit-main\keygen.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\LockBit-main\Build.bat" "

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

keygen -path Build -pubkey pub.key -privkey priv.key

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type dec -privkey Build\priv.key -config config.json -ofile Build\LB3Decryptor.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pubkey Build\pub.key -config config.json -ofile Build\LB3.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_pass.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32_pass.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -ref -pubkey Build\pub.key -config config.json -ofile Build\LB3_ReflectiveDll_DllMain.dll

C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc

C:\Windows\system32\printfilterpipelinesvc.exe

C:\Windows\system32\printfilterpipelinesvc.exe -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\Build\4Q9YIfq99.README.txt

C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE

/insertdoc "C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\{0F77A1C2-8064-405E-A8C6-3D578C53C1C3}.xps" 133770456808710000

C:\ProgramData\9A96.tmp

"C:\ProgramData\9A96.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\9A96.tmp >> NUL

C:\Program Files\Microsoft Office\root\integration\integrator.exe

integrator.exe /R /Msi MsiName="SPPRedist.msi,SPPRedist64.msi" PackageGUID="9AC08E99-230B-47e8-9721-4577B7F124EA" PackageRoot="C:\Program Files\Microsoft Office\root"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

\??\c:\Windows\System32\MsiExec.exe

c:\Windows\System32\MsiExec.exe -Embedding 8A7A73A7E5E3F69933A6DD22DE80850D E Global\MSI0000

C:\Program Files\Microsoft Office\root\integration\integrator.exe

integrator.exe /R /License PRIDName=ProPlusRetail.16 PackageGUID="9AC08E99-230B-47e8-9721-4577B7F124EA" PackageRoot="C:\Program Files\Microsoft Office\root"

C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe"

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\Build\Password_exe.txt

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6012 -ip 6012

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6012 -s 256

C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3_pass.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 6852 -ip 6852

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6852 -s 236

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Desktop\LockBit-main\config.json"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\Desktop\LockBit-main\config.json

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1980 -parentBuildID 20240401114208 -prefsHandle 1888 -prefMapHandle 1864 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f9bac75f-5e1f-40a5-881d-907b6bb8e7ae} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2468 -parentBuildID 20240401114208 -prefsHandle 2444 -prefMapHandle 2432 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d717fbec-fdc4-44ea-91b3-b47440e9b59e} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3208 -childID 1 -isForBrowser -prefsHandle 3264 -prefMapHandle 3284 -prefsLen 24741 -prefMapSize 244658 -jsInitHandle 1048 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {87c8579a-1c49-4db9-a5ee-4d3b92336fc0} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3032 -childID 2 -isForBrowser -prefsHandle 3664 -prefMapHandle 1724 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 1048 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac63361b-2eca-4a1b-a02f-0a463c4adaef} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4772 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4656 -prefMapHandle 4468 -prefsLen 29197 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e85d5089-ef2c-49eb-bda4-b463a951ccf1} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5060 -childID 3 -isForBrowser -prefsHandle 4952 -prefMapHandle 4656 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1048 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ae9cff77-9bb1-4220-a0a1-2dd7e309b263} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5180 -childID 4 -isForBrowser -prefsHandle 5168 -prefMapHandle 5172 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1048 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {56bb0fa7-b6f6-46fc-9f75-a39358e339b7} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5388 -childID 5 -isForBrowser -prefsHandle 5396 -prefMapHandle 5408 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1048 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0dfb51e9-29b8-4976-b12c-e3a2c7858a50} 5396 "\\.\pipe\gecko-crash-server-pipe.5396" tab

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

"C:\Users\Admin\Desktop\LockBit-main\keygen.exe"

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

"C:\Users\Admin\Desktop\LockBit-main\keygen.exe"

C:\Users\Admin\Desktop\LockBit-main\builder.exe

"C:\Users\Admin\Desktop\LockBit-main\builder.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Desktop\LockBit-main\config.json"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\Desktop\LockBit-main\config.json

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2032 -parentBuildID 20240401114208 -prefsHandle 1960 -prefMapHandle 1952 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7523c1bd-7ccd-4aee-bb22-71995dd9cc43} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2468 -parentBuildID 20240401114208 -prefsHandle 2460 -prefMapHandle 2456 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {47195862-1aa0-42b0-8517-8bcdd797013b} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2964 -childID 1 -isForBrowser -prefsHandle 3024 -prefMapHandle 3120 -prefsLen 24741 -prefMapSize 244658 -jsInitHandle 1200 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e160809e-2089-4109-9d28-262d2d89b7d7} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1256 -childID 2 -isForBrowser -prefsHandle 2604 -prefMapHandle 2496 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 1200 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ccc2dbba-596e-4490-8627-c26383a727bd} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4684 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4220 -prefMapHandle 4540 -prefsLen 29144 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e68c9de8-796c-4aa6-bd4d-8573e3931740} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4924 -childID 3 -isForBrowser -prefsHandle 4944 -prefMapHandle 4036 -prefsLen 26998 -prefMapSize 244658 -jsInitHandle 1200 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4755bddb-e977-4620-8fbd-2a9a4aaca2a4} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5160 -childID 4 -isForBrowser -prefsHandle 5076 -prefMapHandle 5100 -prefsLen 26998 -prefMapSize 244658 -jsInitHandle 1200 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f9b6f4b-20d9-4be8-8bfa-0523c5575045} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5148 -childID 5 -isForBrowser -prefsHandle 5156 -prefMapHandle 5168 -prefsLen 26998 -prefMapSize 244658 -jsInitHandle 1200 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cecc766f-4a9f-406d-9a69-f189dc59cb16} 5264 "\\.\pipe\gecko-crash-server-pipe.5264" tab

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\config.json

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\LockBit-main\Build.bat" "

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

keygen -path Build -pubkey pub.key -privkey priv.key

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type dec -privkey Build\priv.key -config config.json -ofile Build\LB3Decryptor.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pubkey Build\pub.key -config config.json -ofile Build\LB3.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_pass.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32_pass.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -ref -pubkey Build\pub.key -config config.json -ofile Build\LB3_ReflectiveDll_DllMain.dll

C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\printfilterpipelinesvc.exe

C:\Windows\system32\printfilterpipelinesvc.exe -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\Build\ecZjqvIis.README.txt

C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE

/insertdoc "C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\{C52FEEDE-CC84-47CA-A0BE-A72220C9CF06}.xps" 133770458991390000

C:\ProgramData\F53B.tmp

"C:\ProgramData\F53B.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\F53B.tmp >> NUL

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe"

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\config.json

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\LockBit-main\Build.bat" "

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

keygen -path Build -pubkey pub.key -privkey priv.key

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type dec -privkey Build\priv.key -config config.json -ofile Build\LB3Decryptor.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pubkey Build\pub.key -config config.json -ofile Build\LB3.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -exe -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_pass.exe

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -dll -pass -pubkey Build\pub.key -config config.json -ofile Build\LB3_Rundll32_pass.dll

C:\Users\Admin\Desktop\LockBit-main\builder.exe

builder -type enc -ref -pubkey Build\pub.key -config config.json -ofile Build\LB3_ReflectiveDll_DllMain.dll

C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\printfilterpipelinesvc.exe

C:\Windows\system32\printfilterpipelinesvc.exe -Embedding

C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE

/insertdoc "C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\{2ABF9B1B-362A-4248-A351-FDDA661AEEE5}.xps" 133770461553800000

C:\ProgramData\D701.tmp

"C:\ProgramData\D701.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\D701.tmp >> NUL

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\LockBit-main\OAsbMmsxa.README.txt

C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe

"C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 roaming.officeapps.live.com udp
US 8.8.8.8:53 46.28.109.52.in-addr.arpa udp
GB 52.109.28.47:443 roaming.officeapps.live.com tcp
US 8.8.8.8:53 47.28.109.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 243.142.27.52.in-addr.arpa udp
N/A 127.0.0.1:53892 tcp
N/A 127.0.0.1:53899 tcp
N/A 127.0.0.1:54302 tcp
N/A 127.0.0.1:54309 tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 210.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 170.117.168.52.in-addr.arpa udp

Files

C:\Users\Admin\Desktop\LockBit-main\builder.exe

MD5 c2bc344f6dde0573ea9acdfb6698bf4c
SHA1 d6ae7dc2462c8c35c4a074b0a62f07cfef873c77
SHA256 a736269f5f3a9f2e11dd776e352e1801bc28bb699e47876784b8ef761e0062db
SHA512 d60cf86c0267cd4e88d21768665bbb43f3048dace1e0013b2361c5bfabf2656ff6215dfb75b6932e09545473305b4f707c069721cdde317b1df1709cd9fc61c0

C:\Users\Admin\Desktop\LockBit-main\keygen.exe

MD5 71c3b2f765b04d0b7ea0328f6ce0c4e2
SHA1 bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4
SHA256 ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37
SHA512 1923db134d7cee25389a07e4d48894dde7ee8f70d008cd890dd34a03b2741a54ec1555e6821755e5af8eae377ef5005e3f9afceb4681059bc1880276e9bcf035

C:\Users\Admin\Desktop\LockBit-main\Build.bat

MD5 b8f24efd1d30aac9d360db90c8717aee
SHA1 7d31372560f81ea24db57bb18d56143251a8b266
SHA256 95df1d82137315708931f1fc3411e891cd42d1cab413d4380b479788729248ed
SHA512 14ebf7905f15983593164d1c093bb99d098daf3963f1b7a913c1a9763acb950075a0d2cceab3558cce3e7269c2a2d5dacc2b3c6c55807b0b6bda6bfad62dd032

C:\Users\Admin\Desktop\LockBit-main\Build\priv.key

MD5 4158363bd87cc28f9dd1f1000eec6ba7
SHA1 7fdd93cd8f29adbb81d402fcf54356e2d71e105f
SHA256 1659aa3bcb2e29856803e24e5d26bf529468f9cf344c00b06c3ed0c81021e802
SHA512 a676d13c36e3055983ed9ce0df483a4207b8d32c7074647c4f805712589a9031d9fc912a7bfb9d97f8008083895153fe3c2b65cad6181066ea2606670da44502

C:\Users\Admin\Desktop\LockBit-main\config.json

MD5 de177fa08e9b2eaa378760afd53be6b2
SHA1 a18050f9e5f2412955df4b868ffb866209d2b84a
SHA256 d121f4293160e0a39cbb184c032cd45baf1372db00cd33afb0e166ac0a60ac4c
SHA512 44f4e745013eaa7d95486c91457c23fd9694f859920766f0139cf5ca9c84ff6c82d59be9675dd1a0c7b3216464c85cf732dbbdb0e641a5e47cbbf1830f4a0a8c

C:\Users\Admin\Desktop\LockBit-main\Build\pub.key

MD5 7165be3d42dd3447e47bd4263b325b12
SHA1 377cd08779293d6ea9855f4be24a24bc7ab571d6
SHA256 ce6d1439e95e0953fb2b54d29a823c9ad209f51b199700b659a59785acdb478b
SHA512 d2af2ef5ceea9c50f1181a5cea972fc6ae2a6299fd335d9576b0bd357b1bd9ff303fcaa311beab5c055ee2dc40451cf57ea1fe0957559af437f8e114c62efa76

C:\Users\Admin\Desktop\LockBit-main\Build\LB3.exe

MD5 55608df5d091dd74c7674fe1e5591975
SHA1 c6a2251110795561e6e9f15ff3414ae01b26afbb
SHA256 aae0a5e194a1a6caee32d65b155f7f62a51293cc8a6445de9501673156d29897
SHA512 88e5d6d3098b36e29b995449e56c8a36d95780a20551c2b5859b8b2c414a235bd4b49c9d45eb389b274b6649dc3b491fddf8c3c89f0f245b31e81dd27340a6b6

C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\WWWWWWWWWWW

MD5 2095621e388671545575e1cfceb6bf77
SHA1 86f91470c351242aa13ad6ffe05eadd845172681
SHA256 2de17a95327253cf58489c5d436f21aa0d7fbe7c7784576243a2cb2bd09db594
SHA512 6c22bb6dd0b4e16145b3bb2c5c3c8862856f563dc0d0345adf10de6dbdab15288e69cf9e99f428dc2d9239c65c6f3999c9d9ab4a28547e7574ca75de1c8d9bf7

C:\4Q9YIfq99.README.txt

MD5 dd746ace17e44ace00885b91400f11d5
SHA1 4a0302d2dca400598f396e4230fdae71779cbeaa
SHA256 b27c3c8a30faf7c76483b7e5d964ae85046a9713caa46508ee7a1e31b7dc6272
SHA512 8ac26aa7262fdf1afdc74e604720a79ebde076c75f460d7d5f57ff4d81dedb1ad471eb114ddd428c1934029746f5c222339090680bc77a6ea09ce329e1da3ef1

F:\$RECYCLE.BIN\S-1-5-21-940901362-3608833189-1915618603-1000\DDDDDDDDDDD

MD5 e3db138a6f505b961bdf56a1daf7b269
SHA1 6689c6cfdb6bff3be5ec051c920aa502dca6e11b
SHA256 c2a79c9f2c0c59dfd50dedf5ac272a9fe6f3748d5a8ae0a3a526646486aa46ab
SHA512 85a625ae00fd9475fab6109d53738bf2bf418c001229777c33a4299d97c36f528d76fd49282df050fbad7899fbc71022a3a8209a22647654a95bf9febf2655c5

C:\Users\Admin\Desktop\LockBit-main\README.md

MD5 fc0a492f08bc51e8c0d87d4c121d16b6
SHA1 935448dbb402f6ce4164be07e79f49cc4c6b988d
SHA256 adcb497db5343ca222da2758f23f1cfe9e0e390510cad7c8aab58b40826ae7ed
SHA512 86d8f1829596e099d4df80e78a6c9f3a8f6ea841db918e85e3a39a5a79044d4bcce62ff0396619ab454b7562d45fbe791415d9481a36e989873ce90eed2cc423

C:\Users\Admin\Desktop\LockBit-main\Build\Password_exe.txt

MD5 eb51f444a55bc7b082353a78a9c6efb2
SHA1 5d9bafddafb6493cfbf4912e94719c87b1e0bdb8
SHA256 d63a0e7f0006d9f3039a1349df779e07fcdc2824176cdefb9c64111829e641cc
SHA512 d5ecfd93b9bd114bddf04b5e6744bbbce47a43a40d439c9a8e76bc23b0384896146dbf2833ed288ce55f108dc15a9c9e25678eea6dc8e46d3c15ec65b2dfe2f4

C:\Users\Admin\Desktop\LockBit-main\Build\Password_dll.txt

MD5 070b8693c2c2568653079e497b0c9f29
SHA1 98f2962e259aa15b4a901e431ccf57211fca368f
SHA256 64e928ce3e9cb45c55c53bfe32c0692acfb1a3d2baa71e8624f161d57e6d0221
SHA512 c02606093180e5048dafc31901a30d5184338b17643f8cc7920b04f616f48c470172740cf3f2bce1103dd6e1316357f1fa32c9b0c192efbd93caede62a6c8991

C:\Users\Admin\Desktop\LockBit-main\Build\DECRYPTION_ID.txt

MD5 8f6e2aed5e4de22efe8472474f8a272c
SHA1 7e07a3f077b7505b03e880b4384fca5f3fd0f2b7
SHA256 1a90592cba3ee21d3047b4c2b165441f57e4af05798c63b5953aeed539f8d9cd
SHA512 a2a267b9d417c89cd052c9fb410404e736054c37700ea2d53b363f55bd808a5ecabcf95a3a5b0be6c184ea35ff84e7a59717d615324c5fc341f6e9af2a25889f

memory/5564-3077-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3078-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3080-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3079-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3076-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

C:\ProgramData\9A96.tmp

MD5 294e9f64cb1642dd89229fff0592856b
SHA1 97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256 917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512 b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

C:\Users\Admin\Desktop\LockBit-main\Build\DDDDDDD

MD5 244c11fca5cbb275fd75f60b16243351
SHA1 e36fa80b05ad09557b5c4e84437438fbf23ded82
SHA256 124e32eb175e352bebe5162a154975bb3f1a4bde9f0fceb26924092a88860751
SHA512 ce2376f5c2a32600ba37c93edf0459a55293370cba7ec82c06844afb14e106caed1ce0fb3815bd67a66edf9a553ad523ecff5b044950ea7cc3fda5218b7c6fda

memory/5564-3085-0x00007FFA4DC30000-0x00007FFA4DC40000-memory.dmp

memory/5564-3114-0x00007FFA4DC30000-0x00007FFA4DC40000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\{27A9AA0E-56D0-45D7-BD22-0DBB3BEA7608}

MD5 79fcde32e6e638fb7a2a2d1a22d8f3d9
SHA1 01e54856b41a77cdc6ff5527b1730c743483eff1
SHA256 c3d2fcba93724527ff3fd74fc2cb08185e4a3c19afccd11bbf9752e9e5da7518
SHA512 6cb1c7ffe227696bb954bf18e4d95afbc435516e764abba9b0dcea73203a8a74127f963a73d73c782205b5a2db6478fcc2c97286d5dabb00108579eea6b9e9ce

C:\Windows\Installer\MSICD9D.tmp

MD5 ee6243df5ea48d929da4790efeea45c9
SHA1 9c21d62d7ffca1c68e615eb57bcd5d4ad3d090db
SHA256 0503fcf7646daae6e5445d8c5f248384542d2eeab4c7d8ad3cd5a47759759a48
SHA512 283c6a7bf2bc0b3c2dced9ea7c763c71b6d68c57da6845985f8faaa9cb7649d945a3be2127bbc1e77be792f925e14cff191c9d6bdf821635d438f985feb7753f

C:\Config.Msi\e58cb0b.rbf

MD5 21438ef4b9ad4fc266b6129a2f60de29
SHA1 5eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd
SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
SHA512 37436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237

C:\Windows\Installer\MSID0CB.tmp

MD5 7573afb6916cdf6f38841142653ce591
SHA1 bff1cbdd58a25b3c9e5ebe5f5108f5cea8476ad7
SHA256 2c8d92f2434503abbd8372487ee84039c84f1244c86bc559cef483d24936acd3
SHA512 0a54e9eaa3009a8eb25c549683692d701c385487b7d3354b90e02d1211e80cbed82c0dbfda68f717a61ccdcedad88b7317cd2735e4140bd6ebea6eb09645e1b8

C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms

MD5 0bf7335cbb575b762c212c30f8932387
SHA1 40de2c33db72f1a632e4353a023a83a299e61250
SHA256 b203912ee7f7e2df69d79d5ce29db4a3df0a185598986259ac849a39a56f715d
SHA512 9d5d8f66d9cf6f211706584b2ee1d6e73c270f2438503ac9b3c54d6ace581a910bb2d2598d24c97f8385edb6d7db4c8e85dfe39aa40cc2f4e8d396d1f3889261

C:\Windows\Installer\e58cafc.msi

MD5 988d663ba702ffe35f7f8080c83d2feb
SHA1 dbc3538e352831bec7c2e09ecd091f1fba34b62a
SHA256 b640c2c6e11ec5e31a255641f86b765ff5fe29d419de45b57510cf3eacf633b9
SHA512 25204f7649d928b3b6728317ce4b247d1f907e3a26dd49a096ad0d9ce41cfd5b0f512c9450fcca81b6d72a640815d9943931cb0084180e53ee201685f9f8f1eb

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\integrator.exe.db

MD5 b00f3f56c104c94e03cd2ad8452c14e7
SHA1 51b78e45015e0d9d62fbdf31b75a22535a107204
SHA256 ba2b669020334ff01a85bfc900ea4371ea557bd315f154875d9bdfdc16ae8b50
SHA512 93e1609be5bbb414c285f37432ce93294c3d1583ef46c7c6c570c122f0b166c34b0ad87de708005c8af97dee27923ba53395a34c2563cdadf3c0a708848b3525

C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 1497218c38a95403857e55e0a36d00f2
SHA1 ba93b0b918e714664a552bfcc5363433472faf1f
SHA256 a9ae231b127144cf72266761ffcb2bc804ad17c2d12dc12f6e0de07c2b3341b6
SHA512 c89f4c85a32a622f48e8d421fd791d1ad5f4ec7ed136f0f630a66f52c89c33ae5c3ef3030c9a256f38571e51b3249c3767500e4f90b62db851e8c8907acec994

C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 f0e734fbc2cccb17617e16aa7f31d5c1
SHA1 60a15aceb8dadd20b6367c0d35b7f16d9ad3c523
SHA256 03cf8664a34812cfb8f222da5f79013daa04b578e13bae75ec8365d85d63d65f
SHA512 1aa5198596c1ce5cae5cbdef9cebe3870c65c6a314e05a580a4fa75a65d6430fda6c35adeab8eaacf128836ebb2681e5a0bc93f08930a414a3a02a3f251debcb

memory/5564-3214-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3215-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3213-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/5564-3212-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

C:\Users\Admin\Desktop\LockBit-main\Build\LB3Decryptor.exe

MD5 f042acdcc2829630f13c0384f1e8953c
SHA1 2a95bd1bb406499574ab258355d0cbbcdfe0fb45
SHA256 00e3582e6908c56ffe9f6989be0d50cb06a09a0a7b75381b279b5957d3898cda
SHA512 2319ff6299b3cd993c9a4b7079123b076ce174931fbf174589c887935469b5f74c88b86303ba4fc010226a4282fb20da978cb34bfa071418c9a334873e1b5e3a

C:\vcredist2010_x64.log.html.4Q9YIfq99

MD5 6112b2c8bcd41415afd1884a5cd01610
SHA1 9bad1ec3cdca9ab3f0422dc26e262c3b734bb2f6
SHA256 75692edcb50389a2695053b025d37d7102e1fb62f13a1b696ce13e8a947be517
SHA512 5e662e0993aa2d61f81f1aeb5ecbb85e3be22d4d5e18fc01fb0813f054b822a4f01b457243312ca7778219473d0233308440b1213fee78cd0841fd50750dfd0b

C:\vcredist2010_x64.log-MSI_vc_red.msi.txt.4Q9YIfq99

MD5 4a46755253012331515074da47fd6f57
SHA1 fda59d84502619fe6daf9cea290a70b6e5a94be2
SHA256 9b7578c0550c75adc9164cd5aaf453ed2743be716a970424df9f9c504307f5f7
SHA512 1a69a7321fc67b0e622a4adbf00f0fd36e79bbf1626c88f7898fbae8af3559a15323b4138d30883dabd689559946258abbfa102cd21704faa2a5452c87a76faf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm

MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite

MD5 e6977faafa40b07e9e7fffac9b895949
SHA1 5a0969c0798555b540cc4d514abb522ed0b01de9
SHA256 488452fe2b010f5c57675acd41f88c7b6d03c6aae4df956d902e2eddf8ef9a93
SHA512 5a88ded4ec672f23517d399058b09c123307053333ad2c54a8964fe2425dba21065badaa5e70232cb7d4bb5af4c7d33cae06c456944f348c9fd43ddc055d5a9d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\Settings\settings.dat

MD5 a8308d2f3dde0745e8b678bf69a2ecd0
SHA1 c0ee6155b9b6913c69678f323e2eabfd377c479a
SHA256 7fbb3e503ed8a4a8e5d5fab601883cbb31d2e06d6b598460e570fb7a763ee555
SHA512 9a86d28d40efc655390fea3b78396415ea1b915a1a0ec49bd67073825cfea1a8d94723277186e791614804a5ea2c12f97ac31fad2bf0d91e8e035bde2d026893

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727662745216155.txt

MD5 b4b6519bebd81a090d93e70a60f4fc30
SHA1 e942b94e0c35cde4e5a98ac6c49b9e99eb840919
SHA256 f8d12886f4a81133f560c88466e318cc17f02b0f325e52527ea98da74b132f49
SHA512 a8c8b20639846bd806a9f95b83105c10d4e26c07ce05f8917729ba4dd47c6e0fb5f2bd3072e9e9e24a28313185e36b9131ac2b4989e43f0bb71c0314a76ff541

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727664176773847.txt

MD5 a611d6af8a5a317f156aca68666fb846
SHA1 c8f4be71c0beb05327f322047bdfb6e5fd6f440d
SHA256 4b4d1eb68e0f2dde5c0f4a8919d0a2bdcb898a6eb5817aad739dc256aa543140
SHA512 cff42b8e8e684c1d7ab27213657cf6ef75a0b9efa08499c372b1419ef55d5aa54dc9c39e08e6d585f7ad3acccdcda7d93c4816311d0da5e55d1aa3b40b386363

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727670801391576.txt

MD5 f73f89a453d0a98f165b1c7d5647823d
SHA1 0b81e3212f03da0440c1f7a287ff13c7658016ca
SHA256 8b9cce1b737248aeea97e45907265d8877f8b0c283c0c6bb235632d55d47f1ce
SHA512 228ac86af4384057bd67fdc644205350bb2aab10b928ff239c88f7db658d27937b469a0caf8d21010fcb36e3f6e7cbe2e4f36b3040397c31f39728ea0f88a0c7

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133770456611357533.txt

MD5 55e2a3fcba09aa7189644d1eef45ba62
SHA1 1b40e4c1df1196a50a8e6c3d55beb89fb912eb8c
SHA256 39f4ff9184d2d2336ce1e98bec32a0670fa45b2edc43d6025bed35101340229e
SHA512 18f41bfaa0faf3089adbec5e1965db19b834a26309d55fc82632427b3f3faca524027cefe472accb5fcc93e2a740edb680b1b588b8919e364f99d4613600476c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{A5E73466-E220-8EF4-B956-A582187356D9}

MD5 8aaad0f4eb7d3c65f81c6e6b496ba889
SHA1 231237a501b9433c292991e4ec200b25c1589050
SHA256 813c66ce7dec4cff9c55fb6f809eab909421e37f69ff30e4acaa502365a32bd1
SHA512 1a83ce732dc47853bf6e8f4249054f41b0dea8505cda73433b37dfa16114f27bfed3b4b3ba580aa9d53c3dcc8d48bf571a45f7c0468e6a0f2a227a7e59e17d62

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_msc

MD5 eab75a01498a0489b0c35e8b7d0036e5
SHA1 fd80fe2630e0443d1a1cef2bdb21257f3a162f86
SHA256 fdf01d2265452465fcbed01f1fdd994d8cbb41a40bbb1988166604c5450ead47
SHA512 2ec6c4f34dcf00b6588b536f15e3fe4d98a0b663c8d2a2df06aa7cface88e072e2c2b1b9aaf4dc5a17b29023a85297f1a007ff60b5d6d0c65d1546bf0e12dd45

memory/6012-3866-0x0000000000400000-0x0000000000429000-memory.dmp

memory/6012-3867-0x0000000000400000-0x0000000000429000-memory.dmp

memory/6852-3868-0x0000000000400000-0x0000000000429000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\20799cfd-64a7-48a6-8a4d-f8881a71b5a9

MD5 29ccd2ed0f72cc8a69b1e0b190bdf4f6
SHA1 36cc717b1b88da4add26c82140bd679bd8b072de
SHA256 9bd17bdef7c3712c50976927785492a444bc675fec5adf9d169c7b2227d3905d
SHA512 2fe7e982a5f7845651c9b8b226c8acf31244233d3f5357c02604060a9e979dc8c6ecd61dad11f6efc171e79137e15135a04ef4068aaa0d2615932c9057355d96

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\d37b646d-81db-4127-b8b4-fc5d1a226840

MD5 d76a3670f7328f2259f56ed90c2b13ce
SHA1 4fcac7b306d0e87bdce74e8b863e089b02eef355
SHA256 84845381f3ba73a78159c4bd3c600d10412c5618375b9d8ba244a937199cce4d
SHA512 a23ecd72d2d309545383ff2173d6407c3704331e3e627a39dfb9c5105c84c18f9262fe3c3e83e8b43e476a893fb184ac51d169db3f9dc1e20f071a00802b5b12

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\39915174-ef17-4b0d-b91f-a5ff4ddcb9fc

MD5 0457891f6caf99a1cad0ecf9b8783a1c
SHA1 319a40c57287193d5aa0c7ac865ae35730138d36
SHA256 8effdb24ba9a545c709822372108935f56ddd01864be360a167ad31179c23f43
SHA512 098839aa55bc351e7f261033bd1897b84c49dd50439a056e03d8fcbf3c078fd9f57c2f303802e8ee2548a78d62b38625d21d1cfed544b45dc0227d9a111f4a2c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\db\data.safe.tmp

MD5 a9cdd95d11280f4660e31312c56bbe0c
SHA1 63dca50e813170749dfe52267b6fee9174d431f2
SHA256 d06f8d975973d66ce8a6dbcd975e15b7bc8aa6ae4996a3ee2b90c19b85178bfb
SHA512 9283b4fe5826be48d8b0932677bbde946100f6ff8e7920097da96e504002b97ff85855f1bec6718a3fb26254d39bf112bfb1f7781cf6642a3bfbecbe3ef7d4e1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\prefs.js

MD5 45fd74cfae9c434c026ab11c62676c00
SHA1 722de77bef76efefcdcf801965fbaf0aa4f8bdee
SHA256 587bb95dd3c97012278210368c6628c014ac1c009bac60ecad27c582ce448d4f
SHA512 1d71f71741b1809ae6899aecf8e13023980c5dfec06c6a928efa05d68aa9fa9649cbbbd0fca2bc25f10506440bfc3f252f8657a6de6d7b8b8976251aab06dd30

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\db\data.safe.tmp

MD5 d756ac3fd706cd7e1a576bc5674e5a49
SHA1 0d29424738dd9b2c0e9e99284208d023b46777b2
SHA256 c4f8512a4f2031ca1cab7e99ce289dddaf98fd08abd36841adb9450c141c6e28
SHA512 1aa0e823cf1f0405d90016a5c4a6e831d165d00d4c8ecf331688fbd0c601c4f699feb622f60932fa7600b7f4ae87956c692e4ec868a11a586b7b422dbb5f6445

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\AlternateServices.bin

MD5 76f267aa67fb5bf3461f0beb0d55c89f
SHA1 9e1d830fe967b0b313386190c0e7aaa4d9580f2c
SHA256 284334b97ba1bcff32c7961f7e44e622091d30c6c270769bdcf35580b3e5a0a6
SHA512 f1e897908a32c72678f9e5a9f38b0d25236cf030f98cec0099780c3bfc660fa5305f114f359159e7e5a3db2de6e65a3e8a4ef69ab22793b463a3764d46680cef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\prefs.js

MD5 07977cb61920e12557045a9723aa6ba4
SHA1 93811afabc6b9a8bc8dd952b20aa38ea1c399b02
SHA256 99925aff597d11e4db2728e65f03ea74281fb2b73175965a1d597ae9ad7c794f
SHA512 cf3c7504fbb17c563a9dff853c254286c0d95d2273cb53ffecf3b81d6188b301eda42dfcd11895402803032cdab7439393b99a4a86677fe012e9eaf9b7a2c7bc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionCheckpoints.json

MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\activity-stream.discovery_stream.json

MD5 bbc89affb3d8a34ced7143892b09dd5e
SHA1 8649479619af714fe61aa9ba2b7d3f2fa009d7d2
SHA256 3a0b2e09a7787c7a764aa262eba11e2c813eb38929a554dcd6f6ca59229cb22f
SHA512 d6c929356a46b0816aba3f15f354f2337d6f8b094c5141ed90c382146dcac22e8ec7e95e92dd6d7c404a7ac8a827e24c0a767b4a5e2e4e5ca448f7037e5140fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\db\data.safe.tmp

MD5 7141052ed044eba0164a6bc3ce22199f
SHA1 d81d2dc08579878e1c28bace9cb59bbdec67e17e
SHA256 4fad65e244d9e85ab839014648ce206bddeeba46f0848ae25792192d14a796c4
SHA512 bc943bd9f7d3eb7419622af5585d351a8d172b28e2c087d5a7672b99f890efdfa997b0f57dd08498b02138cb4c492b50e89dce625a2b96ec0e3142dae4d19b42

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\c0f7ff7e-b1cf-498b-a65b-d60997473433

MD5 4438a1ee1c01a10ed68e8867545c4e9c
SHA1 52ef9ea8f34fb89f503a3ca469e0d29c598f9f6e
SHA256 ac5e473eae32b8327a8c091afad49da4d7c2b3a9893ed35f9bb7d73a06ba4aed
SHA512 c44546d68b07db525906b964995fa5ea1d8fb6adf895be17baa26aece6d68fffe7af8388668a38759e084cbba9426fd0dbb9c5c4f3250f464af680cf84804e8d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\88cecce0-5f24-4bb8-ba5c-45401ab3d376

MD5 59ae16bebfab63571597115e26ef3e78
SHA1 bf99cfa981d08e690df00ad73416f8c53ac4e83f
SHA256 24614221b55b74652cda376fde56fd605d7a27bc71520f290d4a2e73935dec22
SHA512 7932994ad783e478364fe1f34512ebbe5300e16229730ae586bc01c927753f1e0aacdf501d9b943ef726796c5bd51ac6ca191fa9ab9d85062ab910f58e9dc2ef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\db\data.safe.tmp

MD5 c5ad0d8e107f485432760918f87ca389
SHA1 7aca5f1fd56fde6a1b7d3d6deee0fa7fb20a6991
SHA256 14be3f02498c90de816747bd537427965319ec6b2836a44ec424ef207bc522a0
SHA512 da85a8610f8a8a68d388a71e95e7db7e620d1c7a6d0bc2ccfd5db13fb88a50e3430c81a49750c1d746f64c904e8d9900904f29a64d1ecadbadb443502f94d59c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\prefs-1.js

MD5 94feb95095b521f4d746aa586f4948bc
SHA1 594acc3237d602c14c3579634c176bf6fa35818b
SHA256 b3259783d85050260720d8211bdd272ddf33f097afa6a9555da5a77777610552
SHA512 9c90ed0fa822f95218d3b20bc29d69739ede74224092a15542d678fea6889245fea5f3d7cdb1b988fe65c49b57d620459893ac616b376a0b91078f9b3bd7814b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionCheckpoints.json.tmp

MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionCheckpoints.json

MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionCheckpoints.json.tmp

MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\startupCache\webext.sc.lz4.tmp

MD5 126798c0032616f45514340eaa10b994
SHA1 28ca874474684703dbb643a444d7417c9f80de8f
SHA256 1dad14abc4eeedec39933cd0b58782f4963d8490f3447dfc2c1ba9bfab765fe9
SHA512 a8c7eebbf3d1aa828475b5d4ce37de8abe257d5195f9f043ea82e24f957f9d3d74649377c35cb11b1f5a9f2b23fb66bd864e3fce627a8c8aaae62b2a1d426712

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\pending_pings\aadb2663-163d-47bf-8c2b-89ce22c20f65

MD5 a1cf88de68f44a4a7aff5a840d13883b
SHA1 9ea9b75fc84607160e18e18f1853cddfaec045bf
SHA256 54616a1eacb3d900ce5eda157f4689ea8aa53e006278b6272b9458951aef6658
SHA512 9105e552df627f450d22288c0091a09cbc3d53822b4728b43d566cccd340c42b7472dc6b1566bac50dcc728cbf22ebb8945d19813afd8b2df6e6882f674a741b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\db\data.safe.tmp

MD5 d553c40eb6ce63f472d3f404a070e42c
SHA1 b4272958bf7275c5dbcd69d09503a122c2d8220c
SHA256 74f4294805ce4f0e593241feafbcd26947f6878f8b276acaa4f5bd08b04a625b
SHA512 8abef49876b0d8b99fd755bcc9d96e7e166589296371bf820d80d5257dfbcb6103a2fff742737cd267b029ed45848579acb6b2cf58c320f4e499c63ac3a79c37

C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\DDDDDDDDDDD

MD5 4cfba9efd2f0a77c9f9c0dea3d443f38
SHA1 b098ac56e1b36d0a8ff353cdbdb21f6f64cae9c5
SHA256 4f7a077179a13302e20e8cde34b0d71f42e368bcaa09e6ad4cb6c731892947ea
SHA512 9a795774e7584fbb5fa8910188953d6c55741f95c36060eb2a09d2e0474cd529624c0e899e308e6c39fe127c5bb135d94df3f46c72cfc0de86b0f1f78a8f0c4e

C:\ecZjqvIis.README.txt

MD5 cb1fde783b2d04ce5d3a691532c4d314
SHA1 1210fb232bf4c13346101c79637efae44f1f9d8e
SHA256 6e9747e0f91733d8f7ef054c3540d3533f93cc97efbc23b812fcb4b939a8257c
SHA512 95bb60d8d1e0a8be30f7da8b0c6c80e71adc6e3fda8e7e27f774b163e05439a4adbc83c5a2a881a5a13ce6182b2e73a10ea88922cf7d07356fb2cfd9780e231f

memory/452-7607-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/452-7606-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/452-7605-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/452-7604-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/452-7608-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

C:\Users\Admin\Desktop\LockBit-main\Build\DDDDDDD

MD5 b666dc27ff75ad8d714fe4d98f9717c6
SHA1 243519ed326948eed2fa8a831af788fecbc2d38d
SHA256 4477d1ab894371b2945e0e1b05b80472307df1f257cbfd83babc52d3fe719656
SHA512 bb99a47f86820189cfe5e419cce689f319f921af6546cd8ac326d60a4f61a16119f2ea5a0eac6aab492072965a54e435a1fdedbfd609af06cb0752a79cd39a2f

C:\vcredist2010_x86.log.html

MD5 37da6f42f87dbe81c4ea0a8fcfb0bf7a
SHA1 8e3e08e83be29e8a903209b33d72d686f8c724a4
SHA256 45033ba81f1fdc1061994db096638acbb6e1b275b447cf2440073308fe9e22d1
SHA512 e43e4fd409ad909ce2442370c728dc46bac6f138648dca5401bac3934607aa30e3fd6918386c690bc3249880bd908fe188ed9a9c12740f7ab8c64489f793de73

C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2

MD5 7fdf6fa729b6cdcf98a1d6d0dea0ea85
SHA1 3336e128f767625525f89c7ee4665d24fd4fb7c9
SHA256 02f2541b8d3679818b12412ba5ee93a4521009d0ae3fad10a0159982e64dab46
SHA512 42fff30b293e31bee8fdbebef77a4370ee1769f9512f0357fa893d913496bff4464baf918014480306f07380b087eb1ac3520206fe1adfdd69fe75b864218e0f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionstore.jsonlz4

MD5 9f4cf80aa4af8a11e0a270df2ceec3d3
SHA1 ddf3748c77ad3dd1748a9e7417c92cf91cf300ac
SHA256 163776f9fd4d17642fd2e3ddd0305e4317fdcbc57c8b6c016fce915a03343f18
SHA512 50dffa7d71cd4b1c1904bbd8164afa5f5aa6347875173c4fde385c20f13f7234eb3e0f6c1ff66dc7bf05afb4fc618743d385735c4da481a779f143a3290a7883

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\xulstore.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionstore-backups\previous.jsonlz4

MD5 d2f8ace845f7294388e384eb9d41165a
SHA1 f36bff31c1a2fe4b2f1bcbd0b84cf307382c79ff
SHA256 2bbcd513513cfdb31f84700f390299998701be999201ca42473bf44f3d11d971
SHA512 f679b9a4506f4d7ad8818cd894be81039458361567003239f9a89dc80bcffdc175f486f66757d9ee3431daa644af6478fd7275ea98f20ff52e66f7921f6cc06a

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_1

MD5 e8e0483c1fb791eb9451839273cee4ac
SHA1 05ee3c57d07a548b95fd3005c2e7ff5fcbe9067a
SHA256 fcdded4b86c9dbfe1cf537d6aa7d185e994d1b2d92a3132262c15d8da662eab2
SHA512 95e378a48fa52e787ad9a58c4261ce81f5320c64e109585601315c207fa3c390b7fffc6d394173daba74622c21f685f3af8cf8e2f46fe5edbda8dd9d3934e5cc

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Temp\wct18E2.tmp

MD5 e516a60bc980095e8d156b1a99ab5eee
SHA1 238e243ffc12d4e012fd020c9822703109b987f6
SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
SHA512 9b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{345b290d-7bb4-4912-b71d-0737b29fb8c6}\0.2.filtertrie.intermediate.txt

MD5 c204e9faaf8565ad333828beff2d786e
SHA1 7d23864f5e2a12c1a5f93b555d2d3e7c8f78eec1
SHA256 d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
SHA512 e72f4f79a4ae2e5e40a41b322bc0408a6dec282f90e01e0a8aaedf9fb9d6f04a60f45a844595727539c1643328e9c1b989b90785271cc30a6550bbda6b1909f8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{345b290d-7bb4-4912-b71d-0737b29fb8c6}\0.1.filtertrie.intermediate.txt

MD5 34bd1dfb9f72cf4f86e6df6da0a9e49a
SHA1 5f96d66f33c81c0b10df2128d3860e3cb7e89563
SHA256 8e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
SHA512 e3787de7c4bc70ca62234d9a4cdc6bd665bffa66debe3851ee3e8e49e7498b9f1cbc01294bf5e9f75de13fb78d05879e82fa4b89ee45623fe5bf7ac7e48eda96

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{51325390-AE6A-68FC-A315-0950CC83A166}

MD5 8ab0ccfe101f2a223bf9fc11f910ec64
SHA1 86a7cf51b399bb786896fb77f59ee8b4844f5afe
SHA256 8cc15be591c4f70f964d3554be30283f925747d09eb71692bf40b8125e2bb68a
SHA512 b862068ea8bdb828186c2bc693b1e99d622a48a82eea13886090c44e17d132ad1a96bae4a96214d9a8abeb22f7c85f4ef25a000cc1bf977fd43e67bf1064a61e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{cd8bfeee-7a33-43f4-acc9-094518411193}\Apps.index

MD5 bf528a4141f45599f6b9579a231a7352
SHA1 2ad1452a5277891599a0f10a4a74e0d10beab6f5
SHA256 8c09b89597c808c41006bef545e24bf54451839d482aa077296da69080ade439
SHA512 be060acd176cb867248ce6521ef39f4f06e458b582140bde062cfa77ef7751d9db49222baa802470283d68e07815fe18788b82476880606fbd3b04bac31149cc

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_Documentation_url

MD5 bad093419be1135cfe9694ea77088c78
SHA1 76204c7ca72cf666add9c9931389d635c82e8af0
SHA256 136808af50ee73df9befd76f7aca21765782565b0095227c5a287f3be0b5ef3c
SHA512 3b5cb7f80d7cbc557b5a32a995cd607257ac8e56af935ce6f64c54ba1f311a65ef00c69c69047b6eb7bb678c2b1bc0a3c37548aef417ea49e414e1a34bcf651d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

MD5 f99b4984bd93547ff4ab09d35b9ed6d5
SHA1 73bf4d313cb094bb6ead04460da9547106794007
SHA256 402571262fd1f6dca336f822ceb0ec2a368a25dfe2f4bfa13b45c983e88b6069
SHA512 cd0ed84a24d3faae94290aca1b5ef65eef4cfba8a983da9f88ee3268fc611484a72bd44ca0947c0ca8de174619debae4604e15e4b2c364e636424ba1d37e1759

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USSres00002.jrs

MD5 d1dd210d6b1312cb342b56d02bd5e651
SHA1 1e5f8def40bb0cb0f7156b9c2bab9efb49cfb699
SHA256 bbd05cf6097ac9b1f89ea29d2542c1b7b67ee46848393895f5a9e43fa1f621e5
SHA512 37a33d86aa47380aa21b17b41dfc8d04f464de7e71820900397436d0916e91b353f184cefe0ad16ae7902f0128aae786d78f14b58beee0c46d583cf1bfd557b8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BN.bin

MD5 a1a1017a6a7928761ceb56d1d950e123
SHA1 28272e9c7f816a1ce8f2033fc00f489005332365
SHA256 72f066cd34ea71d0e1b28fb60d663b0372c5254e1a8239c94a164eef9389db88
SHA512 10f4557f102230126bc86cd4b49c93365c38d5cbeac51f4691b90d861098866a2bdefeba507731d4fa14367fee430453bd716157f9074ef643f2b949b09e1530

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BM.bin

MD5 3f1535054d4f9626f0eb10cee47f076e
SHA1 92ef4f27a33f7704952ecdba4fa69c68fc32fd4b
SHA256 4ab29996d02d93cad184dd05f7a027d00425b90f5657f1e51cc4c37297a0035a
SHA512 2e0ec758b2c28c8db9f7b5edbbe8130f049e66842f2f5cc1c013cf23f7c4443cd211ba297250471cdb4f91f1e3251c1e3f7e2151c576fd1a1ae6a36c3776c6e0

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BO.bin

MD5 edb5ed43cc6038500a54b90bec493628
SHA1 a8cd63f3914e4347f4c5552fb922c6c03917f45f
SHA256 9f3312e33eb78c6952b5a5d881bbd18751fcfac41d648c6f053ce781342a504f
SHA512 4ebcefd69a4c249aa3b0f00a954c4e463da22fc9ca0b61a0dc46079b438138c509b22188d966fff6599a3a604858bc4cc8fe6e0685a764e8e0477ab7a237db32

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BS.bin

MD5 995ceacad563f849c4142b6a6f29f081
SHA1 44cb3b867cd2917541b7d5aaed2f14f10febb0fd
SHA256 3691fb8c60ea1b827092f05fbb1807e34726016c6ff56698d7b81c44d519d22a
SHA512 3c8efeb966b075d06d8344483352bf92c9292f9970c9377be254eb355efaf017916737aeccdc704b84d532b7229f9908951a6f2cc3fad810791cab224401ad3d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C5.bin

MD5 0693dabbbc411538d209f32e22f622f6
SHA1 fb7e675406fa123cdb7e058d336742d6a2e8dc8e
SHA256 2dfb2e7a1a3aa43c673d2ee540d3c366ceb12105eb5441f98992fc06f4284013
SHA512 f07732660ec62dae58eb02e2e9476007ea92bf826f642bca547097136aea01d29ff69d9b0cd0f5d65a5e15aa66ca4aa4804aa171a3504aab198631c643c90c16

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CG.bin

MD5 bc6c08f8c2c6d1eee95abfc40c3c3669
SHA1 44de7375375880acc24938d7e92a837e85c35321
SHA256 6e54b502c46e1afa57e28b8accce24f102399f31407827a91e4cd7a42fcbc746
SHA512 2af4a9b87fa4f362926cd77f272cecbe3ed4f0e110fb8f30f661df7c61b77b9fd8e7716eef9177b1038b68c792ca4f844f729daa48b2e38b9945ec9cb44bb720

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CN.bin

MD5 830632032c7ddbccde126f4bae935540
SHA1 9fef1da9ff1d7762b779553b5f873be54c8d01ef
SHA256 2328d09ec845433dc31808fd6b12616f1d28b9b3ba7dd969adeb6c32d8eb049a
SHA512 5c17ef9a0063499f2c34fab2c4d968d29e20f20868921fa914e5737995aa0c166f224995109ff7aca57b5b0f8647715dc670c4aee385f61b5f8e6e8422c49ea8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CQ.bin

MD5 708e8eb906bc105cca0535ae669aa651
SHA1 38d82dedfe97d3001188c2e18fe13bd741fd520f
SHA256 1c3d07765294566e17270d0f3b9257a3db7905d4e7ef746aee80cd591ce0308f
SHA512 1efc74c28190dee2d2732390b74049a1b120f05efb8dc6925207c6990ad20450ffab40249899a9dbb82e8f92a61f770e120a450caac7f8c5f0742586cce0edb6

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CP.bin

MD5 548d234c9ab4021ca5fab7bf22502465
SHA1 2f7495d250dc86ea99473cc342d164b859926021
SHA256 7d549c3418cd90f42571d00936b23d242837ce2a8b19fc4c719e182ecb2624c6
SHA512 261523f5eae6fce2829b53aac5938b1a0021c119e00ce82effdbd690fe71064e0f3b313ed1ab2f67a16c488ad5b1a91f5af98029d88a7896f271c108410d42c5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CO.bin

MD5 8b3aec1986a522951942ba72b85ccaa0
SHA1 7e0dc78fc65ee4c804a4b0c72aa53e2dfdf26c14
SHA256 8b02cec726decf033b67689f369fde1002acfd5f8c32e0f248ac575997204f2f
SHA512 8ee1a1f6f0023eb4f60760c2e23eafd56e6d298cab49d819cf1d62c0ccf608d4211d3767856255f7cf8ff45ad835fe5475eb92c608989c522cd48d00a050b189

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CM.bin

MD5 01367feee0a83e8765e971e0d3740900
SHA1 cae1fd22ce2539fa2acc0242c615cb7ea3f866e1
SHA256 18b8e53505da3c412890f4d74ae2a6b26c4b0827e15e830f92a024d292af20ed
SHA512 8cfbdc014c42ae6417038b80424d2e9fbddd7dfddf579e349c3c17c9b52af33a72463154d29539457c4adab2db00cc28a67902fa8d9209e4af00edd46d52e5ca

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CL.bin

MD5 875cfb3b5c3619253223731e8c9879e5
SHA1 6372f4f5beb6eeae3edbe5b62ee73039b40ad01e
SHA256 cc69bae5d2c8f56b28ba4e3c6a11f57c4e8ccce69943acfbe7e63b4fc90ee5f2
SHA512 47f45a3275b8454f8000f4567153dd7d4af3012005d8e34cb18aed6ad69083bec753e607f275fbf3efccb7ba00310a04adfbd5fa5b73e6bbe47ce73901c35ca8

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CK.bin

MD5 7f161b19b937ab48d4fd2f6e5e16fdbd
SHA1 bdce4f1c73e87e609a7fdf245a512ca4f73b35b9
SHA256 c863c5e71d1116d69561bd0637f4fe4c4240e9ced05b8a5b056073ad13e6495d
SHA512 e915b76faac9512d2ad11cf4e4530a19bea1c7d8508bc218c69cb041f1eeaba3e2e03b1d56e61b032a6418829752c21b8354af1335466d7e1528a06e6742a461

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CJ.bin

MD5 e88131c9aac52649ff044905acab9b76
SHA1 34ae73b9165cbed0ddf33ac20e4b3e7d622c19bf
SHA256 30f22340f582f9a352a7ed3048d1088f178e83ccaacac1ccfd86852c8f9c78e3
SHA512 97afe8f3a2a3138613934ac737c390a35f6757bfc3d381ea7c7cd148f739932380dcd46d0ba6f590c274f8bfb4d4286b3c0433aa69e090102a8a9abdd7c97eb1

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CI.bin

MD5 5b386bf9a20766956a84f67f913f23d7
SHA1 6e72e51f5b4fa64e52d2b80b41409b3db927a3c7
SHA256 ddf6a1d5b29bd69c65a148b1247fde8389cc56865e4398e4cbdcbd68a6555043
SHA512 99b4109439d9a688d7747c6847e0ff7399cda01a89c3181789f913e757a82ee4727f95e506f4b01930efc7c6e229b94bb89e385b56bc009ab5cfe332585660c5

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CH.bin

MD5 817d5a35edb2b0e052194d4f49fda19c
SHA1 fa6cb2016c5f43b76102b63d60359139227e07ea
SHA256 0a87b8418b7f8e6e117badda11d7cdd38b8b7320c6ba3d3e9af93eb9acb2ce14
SHA512 e0686bdbfc589401f0eaae2b1598199efa285f8392742b1c928b9274088804b23dcb584b6fef68ce6d7e54dff9c10338104f4c0f3f80a04471f0b2e8f9935cc0

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CF.bin

MD5 163e6791c87e4999c343ec5e23843b15
SHA1 43ce3bae19e22876483a7fd0e93db45790373600
SHA256 deb2b126977ea150e49cdb3acf4f5387639c7b7b5583454edf55adf83dfab720
SHA512 98be1f4684f99a9fd2f313b09a113b5c310ec8ba8eb0ebf5fd69765e5b48b001d39999e3f25a7e76c7344dcf57b4f0bf2e4614fb0e0dfccb6f02e6d1caaf7fdd

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CE.bin

MD5 3e9f7d399df9cad3669b7a5445ef7074
SHA1 2fbc965dc03ef9203581f595e0d7ab1734726ed7
SHA256 76c80e31f37248c3c787f7972a7b22038390f9d81e72e650071a6f36d36af27a
SHA512 326f8f9cbf829bf80aaa96062a57255a36ee04de310634327aa075d14129cfa8e36e48ab2a00b10f9bdc1d94f1ac7a9e41d0d063361920a0332ec124bdf4c3ee

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CD.bin

MD5 31579ca3352df8fa4e3e7f48c7cdf672
SHA1 aa682a3c781bf8ee43b5edc9718e64cb79135f25
SHA256 b0e7824bee2c896279457d87e61e902431beb528d830524cc4dfae126e89fc24
SHA512 782ff9492e3ecb11c72d316ddd94d1f3e94cd908fc9452a37da6ca30abcfe9ab2bcced8583a569da68626bcec730408af86997e295637bf64aff5bc768f3e309

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CC.bin

MD5 91cb7f1273aa003076401081b8a22237
SHA1 5157144069e7d2fdae60b397be5851e75bdf7707
SHA256 80682dd6472e8d1136bc5e20f6de87b595562414b19eab8e965736fe992921b0
SHA512 5a8e3c0ed0db94bfe359c63793f12f3d7b3c37f3a13a5c96634ba1dc8c9e50fb1142fe4752fd9fbfa39a682f78c54af868ad337eaa787801fe5f66d8f55a8196

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CB.bin

MD5 ef9aa5b2adbe5df68ac4f4d716df7708
SHA1 363b93aaab9db2832f6ca0ee3c27c9310c344ba8
SHA256 3d94fcc4821a135abaae6579011441b94f9c04dad1e66bb5211b0c019a5968b9
SHA512 ec9b024aea46f7b97d14f0a7e12704d09b85f0017cc9e273ce50f2f889dfdae81de549ccd546bbb8f8baaaaab7781fef77bf783e02ccc9605304552f7dd5903d

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000CA.bin

MD5 6efe6733e10e011ffdd6711b5f37c9e2
SHA1 c72549e824ead899944a38c46fbc28bdcdaad611
SHA256 92b5056daa03df3ea85af49ffe4f9cfe8699bdf3539576a99f02418ff49ad9cb
SHA512 ec14b553a5780cd9b33d438ce13a6932de43e346d8d2dec8d093a6a2048675423948f8e2c604a73460980c3c68d9276b65d76c2a6bc7b24fdf10ca92fda2583e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C9.bin

MD5 b1fde66f75507567b5f0c6c07b01a3a1
SHA1 80b8e6a923e853232f66c874367e90b5c9cad7ae
SHA256 b9c82d2f31bbe409d159ee3c9129cbaac7c6f6c81637ab9b6dab3c11aa74b7f1
SHA512 fc8c6038d3c2f5765d7524e969574acd10af6fccfd45fe7c6dd4a8c2669b13ee3fb1a8833e94a046ab7037018170b5b87b1a2742e0e10557c413ad634bdf343e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C8.bin

MD5 29b87beec5d3899824aa390530cd47fb
SHA1 55108e8e5692e4444f72ee5ceb91915e7a2aefc8
SHA256 f00e4f1c9b1d9abeaaec8e5cab02a07fd74f00ace15e36c6f6469de5ab07a9fc
SHA512 1a5ad45bba8c29c32cdd3c4d1e460c30eca305d851faac73df165306bc338337525680b9906d367a0cd3852b9d2daaa8fd0603276ba969495b4e29c7ec8a3530

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C7.bin

MD5 3a5cd52e925a7c4a345047d8f06c3c41
SHA1 9c02828d83206bbd3eb58930c8c65a6ca5dbcf40
SHA256 477277e8caaae1d3b3eab5b3660239aeeabc433743a191727b1a71e529872ac7
SHA512 8d8b6ac645ecc7c8bd374e6190819006c71ac0b5993419c42463009116214e5ec4b4235d94b4ae4cda132e7dda9807adc51525824ac5f12696517ffc8890891e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C4.bin

MD5 db48555480a383cd1d4dd00e2bcfcf29
SHA1 8060b6fe12175289f0a71f45b894030a0d9f1ab5
SHA256 807723d8f90a5bd41269a7a62817547026a117d666d5bef454eb699c97ca3fa2
SHA512 2614c04686299cee8d56577a1e836a26076d42e041c627177fdb295629f6a80190910947fa794a094c55a45c3d70725eef29097118e523a38b50c9263c771a41

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C3.bin

MD5 7ceb71f78a193f8c9f7ffda5f81aebd8
SHA1 eec1597705eff1a527c246b86a71878185ba6b1b
SHA256 77911ff7aeab8fccaf36de6e1183ffe1a6c27f77b5714ee780976ce5189e8fd0
SHA512 1d1ab19b64e1e2abca61ae78b3b50310b0a6cf19d2ecfcb4499d8d0bf68600b4d95bc0945ef9ff9b1d016ed61eac518dcca1a426f460317c07ad51e2e047948c

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C2.bin

MD5 c451b2a146bdd7ef33ab3ea27268796d
SHA1 c040ba2f31342cbcbf597c96d4d6edb83d473b77
SHA256 4c264b2a6e88712234daa8e3a8d630cbf4eeb338554cb0b794d8031f8943ee65
SHA512 55915a304b261bc6f38f5cfe0389d5195f85fe2c1da325019c3aa391e8b1773091e078a35bd57f8cee0ba035956382ae33790ef462053fce711eea9665b7f917

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000C1.bin

MD5 70daf02ec717ab54452fa4c707bcac74
SHA1 30f46fac5e96470848c5a948162cc12455a05154
SHA256 58469ba93ea36498ff9864eb54713a001c52106de97804506d82ee24b816712b
SHA512 e599fdc22a32cfedbb23eeceae0b278eab9a90959fe6acb40e2b201e45a7c19261aaf529e7a0d9caf2a9a4c64c7831343f3bc20810513990ad5d38a32741564f

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BV.bin

MD5 73e38124f94ad20a2f1571fbbe11aeec
SHA1 87fb8056dc7a0a3b70d51426771c4cce2099cfe5
SHA256 a700b63b30cbbe5230cc5e977d651e178ea87e73eab18c8d5ffb1362149addf7
SHA512 320fce64dd6f975384bec9267348cd5cd24a55b13bb09fef1238c2216ad8ecabdccc15601a079ce092acfa4954829ffeb06fbb0631f6ae26e3a39e43c102048b

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BT.bin

MD5 d5f7a65469623327f799b516acbffd2f
SHA1 76c6333c14af3a7ea091819953e6e12dc289a12c
SHA256 f476fae1c6d79069239c471d182631ab343749c22b1a6990250465c7ec3738fe
SHA512 351b9e455e97e6247e64e4bc1b59c9524e70ae0d09d3b6fb96937378a70536483b00426ee69c3590dd415a8265d21fd031b524b90e4e86814ec9ad704e57793e

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BR.bin

MD5 ae32e846559d576fd263bd69fedbec28
SHA1 d481df71c858baecfe33418002d368f2dcf68d4a
SHA256 6e21222b0eadab8d3cfb0c7d14941d196165d6709271af317d099f12403cd352
SHA512 9aa4a6dd01d3b745d674721765f2bfccab584ca0603f222edbe9a88190a2a57438041e7a3706cc0656a6abb79aa18118319f210effe3dd917e7b94a6294bd346

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BP.bin

MD5 17e9ff9f735102231846936f0e2baf1a
SHA1 9ec1ae8a3ad55c48c02427d842d6e38da85b5145
SHA256 dd1ca8da90893e0b63abfdd9e60cf2bf844b311964e9d9ddb855c21fca156ebb
SHA512 71e690d6c87b09659296e6e6ddc8e3f91035dd80c5ce875fa557763e8138900c27fb492885291cee203d65bcee8c20c9c39e0590a5fd32b8a00beb3e3f6d6e8f

C:\$Recycle.Bin\S-1-5-21-940901362-3608833189-1915618603-1000\DDDDDDDDDDD

MD5 1d14ac88c9798e767d5437a0f83b8099
SHA1 5deaf3990553d91a51f7623001658c91ee26a47b
SHA256 e2ef5c9e657a06dd0e45f0c7ca2da9dacb10f079e88a53cb361d2c9033e762a9
SHA512 7c020d0ec8b0cfe607f58b8733d567a694ee266539c1324d54db3802738ebe2d4a2ce30fcd4c14fe85530310dc2ca5bb9763c4befbc311c9e3a9cbacfd6ef797

C:\OAsbMmsxa.README.txt

MD5 f467ca436aef5f45ef391f574416677f
SHA1 f5d578414bae320802ed97227ebf0948487aa0a6
SHA256 d5a899915b5a3194b25cef807d5c989d0302c3a95291ec274152d9cd7b8d1e65
SHA512 ce661180711b0924a1d7711dc43c390c078d46445b9a70305cf61292f4f5c027edd545974f352e62cf148fcb611dc581b03ee64a0b57584e894b37247434dd03

memory/9132-11637-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/9132-11639-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/9132-11638-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/9132-11641-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

memory/9132-11642-0x00007FFA4FC90000-0x00007FFA4FCA0000-memory.dmp

C:\Users\Admin\Desktop\LockBit-main\Build\DDDDDDD

MD5 a1aaf17635f36682cdd20f6fe74e4b46
SHA1 e9cabb4f4b7acbc8663e1b40d19f524aff6cdf9d
SHA256 57aa93f7998b0196d1f3c38cb489d561f90c425401fa289439fd0e8659c16587
SHA512 5d649f8da6c5ffd2efb62337c3f4ef154182ef6159388a44a6be80e19253d483e65b5c483ab9be5bf3f7e4c94c39203668919828a55456a1feebf1ce0abe13c4

memory/9132-11671-0x00007FFA4DC30000-0x00007FFA4DC40000-memory.dmp

memory/9132-11672-0x00007FFA4DC30000-0x00007FFA4DC40000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\{59D1385F-CE83-48A4-AB8D-B0758D37E099}

MD5 e9dc4fcff0dc44307a4d1558f1eb3f3a
SHA1 c1d07568c34a06c1deae01195ad3786ef9c789ef
SHA256 959539f2f315ab2cf6d554a3891ef64760b57d73809cf5be9de6ad8206cb5b78
SHA512 ba4b030b4c4484c2547713fea31228b083aa2ac96efe406b5967b67fbccc434768a668327f79b851eac55696c63720e962ec28442ceeb4cf3d81996ce60533ef

C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2

MD5 4ae885f029bf9d3007fecb25a42d7c77
SHA1 83729b167aaa9f2426be251142447f2a4c4356e3
SHA256 4843d8a57731296d537e3f352d2f25ea7de411d5cc3645fb811a16d57e35e3fe
SHA512 aadab70b8c64675be6fe41b5191e9a863fbb21075a948a11c83ccdac41b9d942039b886a0b7e15e1babe99a377e2fde8b58ae8f587f1134bc981a894654d38a4

C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook-0.onetoc2

MD5 b1bf3b35bb4780da56ced96d39b67e14
SHA1 28f47167b4aee011c99af9f4f5f9c0d9b28bf3d4
SHA256 33688736eb632a0155647c338cc4bfb66122783c12aee8c2dab70fc2e67da4c3
SHA512 165bf9f1d51490f43262f6a6f148afd5d25b22973a7327729a5d37d754eaaccadc5d3d1e65d93aa72ea860e6b4cd057d94f0218b36f8af9e6252f35869843ad5

C:\Users\Admin\Desktop\LockBit-main\README.md

MD5 dc8d96087e0094c3cc793b3445bef8de
SHA1 8bf22f847b778daeccf43468516e775bcda2802c
SHA256 64312260bf9f040c92ece170d05250526f138f059760b8a5b9023d6d38e71db1
SHA512 f939d6a2b9a957a5c0c45beda2e0103a84bc907e2fef0b747c91144b23c5663de388d3076fced1a5a696bb45e7314fd86f19f8fdd668d0d1aac3947290276c2e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\addonStartup.json.lz4

MD5 50a0b0a833b46d59cec4d0f1a0636bfd
SHA1 a9f9acb93da31e3c1dd649d432198815c1bce5c0
SHA256 48c5ae9e8e897b251d2832878c8bd389ef82253918cbf9468affea88ee59c8d8
SHA512 54a73785fac4d3e2bcaa7dcb27bbc7ad5c630d20131c33587650d62910326187f7b92cd382354816a4e17b02d645d578fc3757c9e196a1536495d60e5f780297

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\compatibility.ini

MD5 cc26e3da3f8a18ab0edaa8ba362f9efb
SHA1 4141308059d17d5d2d075bbbbd93450e2e1d1844
SHA256 c17ced564ba3438bd8fa8ca7d3c94897882692fa8676b4ea6bf4e260e971dedb
SHA512 a5d1c757788a1b38e2f96cbd814961402bbf0a690b86ccf2a7793aab22e51dc4b5d3a2e18ec6a79fd15126955200b56f12f189e924cd0f6ccaeebb4bb5f9ae34

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\targeting.snapshot.json

MD5 a95adcd1c92cd526b9760380a39f98e5
SHA1 b8a69d3719cdc773a60cc75f27782f83854b01ee
SHA256 cdf37751e5159a0d6634d2b99e349671140ffacbea9dfa56ac1538ae447272a4
SHA512 fc6cb51eb27cf56d50520516d28e23e0cbf39dfad5a71af1d719d56f4b171a5ed586a5a315f2702d9624356107c807f9280f33e5e915fb59a9406fc6fc4c2441

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\places.sqlite

MD5 0c99323e19ae9d34017f00849ccef56b
SHA1 11b178435db4a5c8fd0b87a8712aec71629934ee
SHA256 e70955e5454028efa30b63de7918cad840538881d2d54752c4ef112d814af5a4
SHA512 3c3f9eb54a78008fbc4379f0306f4f9feded1d11ca9a6e3fcb042ebfeae6360dd2e4b6e65144ab183e98970515ff7cebe9333027ca5094f4f6c57ced38d05021

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\datareporting\glean\events\events

MD5 defbf00981795a992d85fe5a8925f8af
SHA1 796910412264ffafc35a3402f2fc1d24236a7752
SHA256 db353ec3ecd2bb41dfbe5ed16f68c12da844ff82762b386c8899601d1f61031d
SHA512 d01df9cab58abf22ff765736053f79f42e35153e6984c62a375eb4d184c52f233423bb759a52c8eed249a6625d5b984a575ca4d7bf3a0ed72fc447b547e4f20a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{fa532849-c287-45b7-a827-f441ac79194e}\Apps.ft

MD5 84ac0c242b77b8fc326db0a5926b089e
SHA1 cc6b367ae8eb38561de01813b7d542067fb2318f
SHA256 b1557167a6df424f8b28aabd31d1b7e8a469dd50d2ae4cbbd43afd8f9c62cf92
SHA512 8f63084bd5a270b7b05e80454d26127b69bcb98ec93d9fad58d77203934f46b677a3aaf20f29e73dcd7035deb61f4c0aa3b10acbc4c0fc210632c1d74f705d2f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8AA47365-B2B3-1961-69EB-F866E376B12F}

MD5 9f1ff11e31c55a87372e85612ca3c290
SHA1 c94dc58d7e8f070d3eeff5bc8ecb3a2d7008323d
SHA256 0c650065d284a6a0f6a17ce2250214b40219b7082e940689a2cd2948162fd893
SHA512 dd490e167b4455aace73dda6d9ec6b90aee5e5994701c249a44d316b17c3f8a8f5e776e9ecb6d751dfbed8e74743a3f13d95edbbf3b09998e148bfcba1ef721f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{fa532849-c287-45b7-a827-f441ac79194e}\0.0.filtertrie.intermediate.txt

MD5 ab6db363a3fc9e4af2864079fd88032d
SHA1 aa52099313fd6290cd6e57d37551d63cd96dbe45
SHA256 373bb433c2908af2e3de58ede2087642814564560d007e61748cdb48d4e9da3f
SHA512 d3d13d17df96705d0de119ad0f8380bfe6b7bc44c618e2fcd0233061a0ab15beae44d38c48a880121b35f90f56c1529e5f4cf1a19acb9e2cbba5d1c402c749c0

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_odbcad32_exe

MD5 6f0d8710c462b5955d9d16745bdb1bfd
SHA1 ed0545934a28799ef27dddcc0439d05dc40c47ac
SHA256 342f29784a85f25ec119d85e39267ec57a4c803fbc099f6c5ceb7761f8896cfd
SHA512 404085314a3cf37e8e66aecd314d63ea9711d05c1ecb714d531126e61b7bb9929e59e4a42cb736ddade1ac416d76477881d18b428bfd603fede3e9eeb7b6f8cb

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_narrator_exe

MD5 057f55bdbb2f9bca4313e9ff62def669
SHA1 844420fd18e37edfc9794a12fdc5cb1193e6f296
SHA256 190973460b7b1e1fab6daf993087338adabf6889bf0caaa811bbbbf65595ee0f
SHA512 716420794e44a08db0933e98825643345f316c966bd6b0431e4f3187f8a486ae0e69c320683693a2f9ac6e5bf8ed6f951cbb650ac49002ab4d8c8d7f1ceb6397

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cmd_exe

MD5 ad66d697441556552982c0a827402ab2
SHA1 b42bdea626a087858c06592c765920b3e4f2086e
SHA256 73c232acc9c055bd44836ba54fa521cc0a4f8b721da312b49dde928209fd26d6
SHA512 1fa50bac06bf78331fcf2c1c978838a95827808d73d10acd8a1ff76ac8584074da87b9977f16557095b20573ed6a39fecfdb50f403e792a4155878c9f3a3247e

C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log

MD5 06ef6ce55da5decbaa2a73734fefb811
SHA1 3ddb35724e6d5ee93da2cd74fba1063941049068
SHA256 50fc99ffa2efdea29de9dd594ddaf8e275faa3423d2562a1b82d765a40727471
SHA512 8af7798e03f97b61b592f8162937397d2e08e02aaddb2136d0c3d596bf3ceedfd19f7500fa940d273973c87f96265682d051348768b7a8ab450feb922d9eb968

C:\Users\Admin\Documents\MoveUnprotect.pdf

MD5 23584b20129ae369e4463f4dc3456f63
SHA1 7b7147a73d85d5fad971b1ebd63bf4dea9a0d72a
SHA256 e9b474da0d87edbd9f1fa5065f89f01e511d8820c7cc0fbd08990c0d6710225f
SHA512 0984bcb7a9762bdd15fb6dec2588b607d4968894a871aac088b750d1f436f8ad59673451e1f109b6c2491c58676aeeb5b0399923176dbe4f6976a1b916585351

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{37246713-3836-4f97-a758-dbb12d1c7e93}\Apps.ft

MD5 eba1694e6458bb5cb5e4ab3c6e3d2109
SHA1 b52857ea1950e3d5063e811e966f39d499b0e7f7
SHA256 a74174b4912090fa885109f11333b1dc54ea2215c6fc6678b530a4f2a27ef4e1
SHA512 b9c7bc5c11c8952bb577ed6a6d6e55028e865cb4a71bfcdd7016797afa38d5a2a3acf403272c311dfd995fc729fe2245fa81e294acec74e9a013b5fc6c03e8a9

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{37246713-3836-4f97-a758-dbb12d1c7e93}\0.0.filtertrie.intermediate.txt

MD5 22983ae7c9e696aa272eccbeda298359
SHA1 f01a192279b2527bbe44d102eb34880e729ff738
SHA256 de5fa4a7eecb9f017d4b1a480ec483c39d3769e08dbebd5abc77120582572e91
SHA512 76d43aba239dda24073e5656c3f9ee10a4d22f2f1db8585d8fd5f4931210b4578e1e0302cd4064ee7f791e04b9acff2e36b0e9a8b90de8bf4ff64c4c4860046d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\settingssynonyms.txt

MD5 003ece80b3820c43eb83878928b8469d
SHA1 790af92ff0eb53a926412e16113c5d35421c0f42
SHA256 12d00eee26e5f261931e51cfa56e04c54405eb32d1c4b440e35bd2b48d5fcf07
SHA512 b2d6d9b843124f5e8e06a35a89e34228af9e05cbfa2ae1fe3d9bc4ddbebda4d279ce52a99066f2148817a498950e37a7f0b73fe477c0c6c39c7016aa647079a5

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\settingsglobals.txt

MD5 bbeadc734ad391f67be0c31d5b9cbf7b
SHA1 8fd5391c482bfbca429aec17da69b2ca00ed81ae
SHA256 218042bc243a1426dd018d484f9122662dba2c44a0594c37ffb3b3d1d0fb454a
SHA512 a046600c7ad6c30b003a1ac33841913d7d316606f636c747a0989425697457b4bc78da6607edd4b8510bd4e9b86011b5bd108a5590a2ba722d44e51633ed784f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\settingsconversions.txt

MD5 721134982ff8900b0e68a9c5f6f71668
SHA1 fca3e3eb8f49dd8376954b499c20a7b7cad6b0f1
SHA256 2541db95c321472c4cb91864cdfa2f1ed0f0069ac7f9cec86e10822283985c13
SHA512 5d1c305b938e52a82216b3d0cee0eead2dc793fac35da288061942b2bd281fb48c7bd18f5fdaa93a88aa42c88b2a0cce1f0513effb193782670d46164d277a59

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\settings.schema

MD5 ac68ac6bffd26dbea6b7dbd00a19a3dd
SHA1 a3d70e56249db0b4cc92ba0d1fc46feb540bc83f
SHA256 d6bdeaa9bc0674ae9e8c43f2e9f68a2c7bb8575b3509685b481940fda834e031
SHA512 6c3fcce2f73e9a5fc6094f16707109d03171d4a7252cf3cb63618243dbb25adb40045de9be27cad7932fd98205bdaf0f557d282b2ba92118bba26efcf1cd2a02

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\settings.csg

MD5 411d53fc8e09fb59163f038ee9257141
SHA1 cb67574c7872f684e586b438d55cab7144b5303d
SHA256 1844105bb927dbc405685d3bf5546be47fa2fc5846b763c9f2ba2b613ec6bc48
SHA512 67b342c434d8f3a8b9e9ac8a4cbd4c3ef83ddfc450fe7e6ad6f375dba9c8a4977a15a08b49f5ad7644fbde092396e6da08865aa54d399836e5444cb177a33444

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\appssynonyms.txt

MD5 06a69ad411292eca66697dc17898e653
SHA1 fbdcfa0e1761ddcc43a0fb280bbcd2743ba8820d
SHA256 2aa90f795a65f0e636154def7d84094af2e9a5f71b1b73f168a6ea23e74476d1
SHA512 ceb4b102309dffb65804e3a0d54b8627fd88920f555b334c3eac56b13eeb5075222d794c3cdbc3cda8bf1658325fdecf6495334e2c89b5133c9a967ec0d15693

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\appsglobals.txt

MD5 931b27b3ec2c5e9f29439fba87ec0dc9
SHA1 dd5e78f004c55bbebcd1d66786efc5ca4575c9b4
SHA256 541dfa71a3728424420f082023346365cca013af03629fd243b11d8762e3403e
SHA512 4ba517f09d9ad15efd3db5a79747e42db53885d3af7ccc425d52c711a72e15d24648f8a38bc7e001b3b4cc2180996c6cac3949771aa1c278ca3eb7542eae23fd

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\appsconversions.txt

MD5 2bef0e21ceb249ffb5f123c1e5bd0292
SHA1 86877a464a0739114e45242b9d427e368ebcc02c
SHA256 8b9fae5ea9dd21c2313022e151788b276d995c8b9115ee46832b804a914e6307
SHA512 f5b49f08b44a23f81198b6716195b868e76b2a23a388449356b73f8261107733f05baa027f8cdb8e469086a9869f4a64983c76da0dc978beb4ec1cb257532c6b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\apps.schema

MD5 1659677c45c49a78f33551da43494005
SHA1 ae588ef3c9ea7839be032ab4323e04bc260d9387
SHA256 5af0fc2a0b5ccecdc04e54b3c60f28e3ff5c7d4e1809c6d7c8469f0567c090bb
SHA512 740a1b6fd80508f29f0f080a8daddec802aabed467d8c5394468b0cf79d7628c1cb5b93cf69ed785999e8d4e2b0f86776b428d4fa0d1afcdf3cbf305615e5030

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{37dd8a37-682a-4283-af30-8cc2b20ed4b6}\apps.csg

MD5 5475132f1c603298967f332dc9ffb864
SHA1 4749174f29f34c7d75979c25f31d79774a49ea46
SHA256 0b0af873ef116a51fc2a2329dc9102817ce923f32a989c7a6846b4329abd62cd
SHA512 54433a284a6b7185c5f2131928b636d6850babebc09acc5ee6a747832f9e37945a60a7192f857a2f6b4dd20433ca38f24b8e438ba1424cc5c73f0aa2d8c946ff

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{345b290d-7bb4-4912-b71d-0737b29fb8c6}\Settings.index

MD5 6e89eeec56ec057baf9787072f3aa4ee
SHA1 65dfa210105a981a8da3dea1008e1d0eeaf337af
SHA256 aa140df41bf17e2ffb03a8934f9e8675a7ccfe23fa07cc39a35685ec1ca07807
SHA512 8c71fccd24e8b340f479deebd3b05aec440774041d44183532436f905acc0133ee4660d66c042a333d411202011d7d5e5b7b9740af2b505af55b9ed2d4d67488

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{345b290d-7bb4-4912-b71d-0737b29fb8c6}\Settings.ft

MD5 05cca5ef9d491f3640d1db368768e43f
SHA1 3ed5bd4fe776ec61964b2a2ad33105d22f2d33ed
SHA256 0dcbbab78cad414ce9ebc49f7643835fc414e934b45909d667a3bdf0061e8af4
SHA512 082a7e969a919dd503b0e2853e3ab2d1a4f029115bbaf373fe1c796bc667c8e47d5c0e850636c1331ab978436d7047343396294fdd8537750fa02469a10bff92

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{345b290d-7bb4-4912-b71d-0737b29fb8c6}\0.0.filtertrie.intermediate.txt

MD5 1218ebe70d824d15d5aa68a5a9541061
SHA1 dcf1eb20e350be0ca52750c2556b11451b03b4f1
SHA256 7248cbb608da104f578ff7d67d94798cb30448a324a7f34025010d21ff832dfc
SHA512 41f47e1cd0daff4e2588a1da62bd3b88407c76b907513f42b1e51a24b76700645ce7bd338004944a1206d16d1c78f7731c9fb23e004d069cd6d2100ed61355e2

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt

MD5 9eb5f69e443e7d835e78519e5f3b3ef4
SHA1 5ba40cd4a127359dbd006eb3b0f800809c138659
SHA256 4aa1fa29fd0a2d15b9204426cfee2e348dcf65f5b444b53fc5425a0418a3fdcd
SHA512 b14fd14a1ac0aa59e0b648b64af0fa4848a4601124fe8b37d0c3f7e4066908237eb1c9d01a43aa45444db104c68380a60e1e1625d1f4eda5d501a3c33206cf4f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727671101110253.txt

MD5 0e82aa2b132dcf658a3a47013c9bc114
SHA1 20dd8e9314885c5463beeeab5ae131398d4795dd
SHA256 f40938dd8d18f09ba1b3fa772244b3be630a391d71a0a501657edc981fc9c079
SHA512 65007152ae152454b3449ebcce403660b7b2f3a050b738247a102607fbff71e095aee3b4074060a0fb3aaaa641507007dcf4b6690225a9c17e6020755d31c916

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727668755622820.txt

MD5 8a3879f9a9db715eb0c91ac79686a082
SHA1 21b3a639b20f4164a0dd78ced915c4a2ef2da1dc
SHA256 0e5e89bd80449d8fba5807e02ca21793d93d4950fc4a4ec193bce52097381e52
SHA512 11e6980f407b106914767b56fd87cd021a9860832d388e2f464617cc0063daac45c52d27f66dbd40b07760469eda9dd96cb8326ebd8a3b989faf761ec8aed715

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES-0.json

MD5 7dbee0115ff00eec66da6cf090b5092d
SHA1 a869014220df13a6abc46a12e77aeb66d2e51a7f
SHA256 777e6f9aad93edbfe63045a4ce5c9b1f90e768ba34e835277bd4f0bf2b986bb1
SHA512 62d858a058377fd1a23bd4639275dc43972ebae3e14e335a376e01c2a32b1d3e1d64da4354659775a80db4976d9e2c4cb018cc2d663d42b3bbb2f1b1d5724ff5

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\TempState\CortanaUnifiedTileModelCache.dat

MD5 23388ee1e1a30e4eb79ae5a0fc1d5e75
SHA1 16a1a9bf03c71add42fa70506da2b0c1cb67c571
SHA256 d8455a5d229b83c1a52b8d8870d52d4a399420e8a7b43f5380021eeced954440
SHA512 26aa31c84e92bbc24ecff807d4348b0f62768b73804106af3c52556a5202f070ca8c3c41c03d5129a7cfd6b485b73d1f4ba21a22c114a842d0784bdd94287a0a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat

MD5 63439a7d2f897fcc8ebf7336e6d92cd3
SHA1 ac1737b30dd7a474073e6e95bf3c5044468d622e
SHA256 28831232082698dff77a5b03dc56204aafcb92226949b3ba358dbd79e2d4b4dd
SHA512 eb271962de2c7bb3b87aa5e0e2a5aa4bb11b4d69f52801998f90ab15184c1a630044e839f78ce67c44a243c8e414afd85cf75b4a5b02cfdac22e23c8d958dfc2

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

MD5 a0be695a65c3e116baba8a1a92e5867c
SHA1 9e70ab25720acb4cae3833d1a9f7f14878708f69
SHA256 680f99f1dfdaef9492bae00d14e435506c6e555dc4c3602eafee42384f23bd02
SHA512 2eb06a05fa925054ed4d0b0f8d1020aacbab3ad77b779f55baec56489e4498e3f0d1d1471d29fc9ded70607c9fd598f6c6179334b0e26ebc0d2b5e1c2a17fd66

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Settings\settings.dat

MD5 cea8660915235fe0db57a8a566518e02
SHA1 72eeeb469f59958d7902f4120252f5d24c21381f
SHA256 6f794f6f14a5b6f45685ad358d26c26ce40d941ff86da8497476e0690dacccf3
SHA512 4e5f3b93ffd7b239d685afe1e97ce429896af669add2895bca5e62af5f67990aa92270bea9f23117241e0d99793964f6841ee3ee6715f31cc8b69d30896e3b23

C:\Users\Admin\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat

MD5 12a67ee24f711b8fc4d0cac41df51416
SHA1 6309bd52618f8c9a40f1d77b926fc452a1b3fe5d
SHA256 ce32adcdc2a8273361cb9d09c636e655c42f5f988f9f3e455cdd8731aec370bf
SHA512 00cc0895ddf7977127c975002d77c841f1c3651f6e4ec266a7022da74c7992c11d70b2668fb1582a469f88769d0e30ffc1c9ae51cf257318476c7526a5feb42f

C:\Users\Admin\AppData\Local\Temp\wmsetup.log

MD5 517557e324a835630991dff1b60513bf
SHA1 293f55547fe6fe11a6debd1e601eefaaef85ddf3
SHA256 55636b39851d0bfb6741e4b8d01356d24f8f1bb620425a2837a643be9cbe9872
SHA512 799e5d7c03620a007b8a65403a038f233c2d482871e07ebc540cb6b36b8ab184df9931befb6585837183bb954760bf3c2a52f6bfd0cba86d76db036c5925a48a

C:\Users\Admin\AppData\Local\Temp\wct92F9.tmp

MD5 fb4aa59c92c9b3263eb07e07b91568b5
SHA1 6071a3e3c4338b90d892a8416b6a92fbfe25bb67
SHA256 e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
SHA512 60aabbe2fd24c04c33e7892eab64f24f8c335a0dd9822eb01adc5459e850769fc200078c5ccee96c1f2013173bc41f5a2023def3f5fe36e380963db034924ace

C:\Users\Admin\AppData\Local\Temp\UTKBEBLO-20241007-0928a.log

MD5 f419965d3e9b2f6e21245a85917bdf01
SHA1 fbac0b077a55a4926c6eca374bf48d98ea7fa43a
SHA256 3f7939410c879b2cbd03b1f5fb78fffd7c906eebb4cc8f31965382b9b4150622
SHA512 ee3ec8446d5707aeba635511577468995c081067ce2b676ff4d333e085c30400b6e4b13de7fb0759f81ab9383539512c33d21cf0e8874a272c23afcabdbd1d75

C:\Users\Admin\AppData\Local\Temp\UTKBEBLO-20241007-0928.log

MD5 2b901b17b0b2e91f4533839afcb119b6
SHA1 a5cb2b3fe23b18faf3fe8c61abdf259ea9fe7b96
SHA256 fee9a77e3c166414701cd04d1b461889631314b8e736fb98e30ef6958b9caec2
SHA512 175fb33c2e79d79c41e86091809325582c953af417b4da2bce152925b4634b96d23f53665beb73af4715a3c8810c3c1b57f9a0d625bccc0da371bb43e57eba20

C:\Users\Admin\AppData\Local\Temp\StructuredQuery.log

MD5 3f2acd8e0a928355b1782fb96c1de853
SHA1 9f7214f5ddaff2094a6c4d94012280f3a5d5678b
SHA256 6252e969151335fa59f05fdca23c55a69dba147c04e5344f62ac5a1fa85127ae
SHA512 6ca73567cb684115df3918919d0a5ff343f7aa01ea2fff6a34d3a17ee200e778903d2ff55202172b666e4dedf593f92994db8ffbc0059d7812169a968629eeb2

C:\Users\Admin\AppData\Local\Temp\msedge_installer.log

MD5 dcb8c0c774471aa6538f124d8d060d09
SHA1 566184b972aab39829a3da1c9ab666a1abad7f12
SHA256 2810b5482c58c9052745c66f7f58dfb8094aeaa2802d7b24a2121287f5c1ea27
SHA512 7c98a61a2511596f2deba65a3a6b2dc947500c6f2aeb10a48ff7ee2e6a0856d57341fb44fc3633135f1927f9f3235988d7cd54cc9d6e1b66cc38b4894b2a2868

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20241007092433_003_windowsdesktop_runtime_8.0.2_win_x64.msi.log

MD5 585c05999cbb086f5ff2d9759d48bd94
SHA1 fd10e4740e223e433bdd7348e8784184be483796
SHA256 97a3e3fdc38aabe3c0e836059b6c0243911ccbf29da96d3f7cf2b38eb5be8e99
SHA512 7556de75b583cf826467de31c027c48ab10a91e253b598e6605298d2cc050c1b9e9518d1e81e6a7e975a5c0a9ae07a1f82898723ce1cfcce281573176d82e7fc

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20241007092433_002_dotnet_host_8.0.2_win_x64.msi.log

MD5 f3ad5e59a56646c877c0c16323c50745
SHA1 d53b669ac1cec67c9ef2e200304fda3f8a500774
SHA256 4912dce6cae5955ac415208d00cb9f14d900de0d079cb56db5944e67532c461e
SHA512 e3fdafed161e87d6d9c592dfa0c8cab898b9e30fffdf0dec6c4aa551f50e9c53aa8e812c3d4eda5bb932676c6eae7bb42ae5402b6efc3b198ce14c8b251dad7e

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20241007092433_001_dotnet_hostfxr_8.0.2_win_x64.msi.log

MD5 0f6d9e0d2ff69b7c2348f5c05663bf69
SHA1 fe53081ca4ff482ab4c2a903f4eee80f26c6ff73
SHA256 f16fefe514fda7d9792bd5ce193990cde097b38e9a4195cbbfb2d456159b85bf
SHA512 93e752e62dc6a1f914f94173c396df65fd7fc75e37944885553fa2cbb097f84a539e7ba549b10226ee822dcfd71d360b61a8adcd50c0f58ec164e8bd3acd6852

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20241007092433_000_dotnet_runtime_8.0.2_win_x64.msi.log

MD5 785aedb8f1e9d06473d951f621cc64ce
SHA1 5c5a4bc02fcaf0b86a06a0969ab8a4b7dcb301ea
SHA256 072c619ae849efe74526e6819f472219284718dd8c69d6ecd4207f7a66a0cefd
SHA512 1e85e2e9e39b23324da001e7ce2f9c1ccfc4633340e85df9335ea2855522b7ddad7272b24e649801692d60e9e13d9605a8839ceec03faad624a7f50c26df724d

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20241007092433.log

MD5 8dbc52c4edd1e15d7ae3f65f2a08b018
SHA1 caaf01360acc48e7793fe7aaedc44085328fb700
SHA256 b687b28da66d180ad17807da6e2ba160c6bbb503973fdee61dc6d31752efc1b6
SHA512 45aabbf90b30c6c77eb623ca5ecca15d695e219f5c3ef5e9eff511c05d2db29d57d86cc3480e36e1d7525ad16f8375cfec88490480023d5bbed99c0132b76dba

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20241007092410_003_windowsdesktop_runtime_7.0.16_win_x64.msi.log

MD5 d98774126741d9a73e0fe62e5581aaa1
SHA1 366fda2bbb27199c6759b91d037230934c88238e
SHA256 a8b7074fa342342ca6eec3bce94adb83aa7b7601e90e888502803091f9acb4db
SHA512 e804154a256a0861b79e5da1210c2d645e785251325b2b300b5aef7af4b46dd12a9c2182f0570154a0c867e2af6286e46538b230506cc7d750abbe7d40855f63

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20241007092410_002_dotnet_host_7.0.16_win_x64.msi.log

MD5 3a39aea15226a22e6cfa93c52e8e450d
SHA1 71618e1d3bba3159deeee692aee158f98751c2ef
SHA256 881adb1b7e651961cbac6a309001e5b875b875efe141df17450407f13e2ba62e
SHA512 e0039ca740b72ebc6221e3041d8534bdb9c86d4c8eb9b7f00e0f8e923168bd332797f2848d215cbafd0a2d1bfaaf01ffa443623dd968f777ff54327200d7ca83

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20241007092410_001_dotnet_hostfxr_7.0.16_win_x64.msi.log

MD5 11b7c90649ad1ced32d69013024e7e79
SHA1 fe1b705322c45613f40143315afcc576ea059b28
SHA256 49fa6197d473f56a36b5cdb1b31981c891c54761c80d2abe2c7a0bd350b4525a
SHA512 b888ab4073a7263a485356be7c3fd6489387cfc3ee9d41cdd326f51ad05eb4f83803152a0e16b4cbada6bf25b9a946d4ffdf1325b365b1bf97a942db31b82520

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20241007092410_000_dotnet_runtime_7.0.16_win_x64.msi.log

MD5 b5649c45be2b7a9d2e7eb680b7c70d74
SHA1 93ba37c211fb93f331902791087a5883a8f2077c
SHA256 9e54cc3658faae0bc187fa60cbc09ec8f6f9a1f4aac70d6c15573d34e2c8e54c
SHA512 8083f41a6980cc33ee060136cdfee4769bab4eb134093cd2f86a6cb45ceb7c520d0b36b2e64055cb19bf131fb0858241767b65832d3216fa8b511e210b81bda6

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\308046B0AF4A39CB

MD5 0191a80f1e300a5a7af5d6784231dd9d
SHA1 70753f21c7c81dccc1b63f59c559e50ac303de68
SHA256 a01b9af0190fcb8f7d8d0756fe99264d7206e1f4698919ffd634c4297d0843ec
SHA512 430e42a2d96aa4f4c84a3b61680b4b64854df9b0cccb50b7389fef68399d561030fab78f269b829e744d1b1e32df09cf7c974eea10e4f4b9b3a43b49f5814602

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst

MD5 d92be63e0b074119484fc058e639dc3d
SHA1 6e25e73ff12e65100ec998bca37dac0abea6cfe3
SHA256 7e34b5b8ffa1099ddeabb0af1804b2861c45627fa1bcf22bdeb37d78d16eee10
SHA512 bd9a84030eb6e9efab9b5b68941bfb88e6ec38ce304938fb32a97fcea6de11d323c6d4c2b187cfb36b76e8de76dab2e01a796443479b908cd93d7faf61fb800c

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

MD5 dd6417885f66c19d29391adcd496edbb
SHA1 bea9193a2da1f04ea574a76187594f258427449d
SHA256 9f056a105347386e7542436d2db4ebfc9faecd21c6bed001bff714e5454acf12
SHA512 659d6008c31f51059f348fe8d9e141d8b29d248c1f4ee89b6927b9bba5a3adbbd84e30d6b871654aa78a8944ce0dbc9b34996a606343157b52fc1bea2958f86e

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat

MD5 23fb7d95beed5c783b0c0f13235a1175
SHA1 379e5077436981ea71efb5327d2e41ea4f48654b
SHA256 d6e43fd38c5f071d3291ef1d7d6875147c49b34e87bedc57062b58eb0f5b6f36
SHA512 5f1a730d3836a78fd26bec60e47526352b85bde5891f88be2331aef1699488941a7de56c371e98817db666f2ab77d51c7b7ee446e49646f7f8f050d31ccae06c

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst

MD5 651da9ec5329f0700e99c42a4162731b
SHA1 20447beb213513cf9f513ca73d4d77ca13bf982e
SHA256 8f40c0a5b93ace1a12038210141d43fe8f3938b5a23d0cb4dc8a557753324f07
SHA512 b96d4aa388c9fe008991fd27802d3b2bc99e03532ba637011e63a9eafa03b466c9d875f8e024bae5a3b174fe15f7bc749d1ffdb6b5fb359b0b39ff4ebc5ce7ba

C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst

MD5 84df63e3f3758d31a7db9b8db75f1805
SHA1 b9466cdb92a1ef1c63d25236f17a2f7e2963b721
SHA256 b6f5e89bd5fa3115559fec00e5318afa9bb5e9bfad045edede408b8104f9ad83
SHA512 cca493db546af42e6a82dbb256997a83342c61c11b3a679b5433c54db4c20e79f6ac2994f7ea76ec7e9c1253c68b7ef074fd958b2f21eedd24517c89fadfdfed

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wsRGB.icc

MD5 af02a1329008e29251e322ebf5e235a6
SHA1 a3e09e8aa1acc9bdb176133452d8b70a51078291
SHA256 893c0ca46a87bb4f26c5aa2cd76fae74a5780eaf49c2df80dda059a30c7fd88d
SHA512 72b1c304f1a387f30799812b9a3bc52e1567f88a3afaf08e0ee7762c4e1ee0624e777c62fc7ca26a196a72e6501b2fb27fa5d13e7e33e52b4d2d750f85a2fc4c

C:\Users\Admin\AppData\Local\Adobe\Color\Profiles\wscRGB.icc

MD5 822bb5412685cb73551f11f72326decf
SHA1 9509fb9c196cbc60664692af2bd5820d14139b54
SHA256 521b3e5a1fc4ba39c6d7b05fcaf8843f5a61afb0a12d6b41dc9a03277446ed4b
SHA512 c2df70e2fbcc3e10e0f3c0ff51e5fc01bca8e07b0094beb9c0233022fabc3d179375a3c1c8c349897b38bc819601f86129f26f38823f17800cd322108374eeba

C:\Users\Admin\AppData\Local\Adobe\Color\ACECache11.lst

MD5 1de709afb978667343beec12d4cf5a2d
SHA1 854cfb67bc214e2e54297a61fc84c8af8d34b0c5
SHA256 53cb242ce14ced7cb5a064b318304e74a4ae84ad80749a14a1f07c902b0af26e
SHA512 ca965917e9e5324a3d88c4fe95fe37527b1f90bdba7cd66359209e13df03310cb42f8b33cfab9c83e185948ad79d2b2d566b3e31b3eaa23e4c7118522fbf61d4

C:\Users\Admin\AppData\Local\Comms\Unistore\data\AggregateCache.uca

MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USS.jtx

MD5 dd2daf4e1555113ed29f630068495df1
SHA1 d7e9d0238bc3a9301fb839966ee5ee9ffb2d89e2
SHA256 270e6406ca27586848e5c0361d8cc8daa837eeb444dfcb0b48f9587e4c79ee81
SHA512 9e289f47190e07ba9e4d186faca9cc51b744a84a3cb602681fa4386c7920cc33c35715d9edaa3d341e402e98bc8e103867a53cccf91f286e2088b3e91134421d

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USS.jcp

MD5 5df4069d6ebfc36a41b7d781b8a50eec
SHA1 68f0ba6fa59a75aca98fbeacdc8ade2a6805e0f9
SHA256 86a68ed786864df322c39df93e0ce20f536cfa40d4769512a3261ca8d96505d7
SHA512 7cd5873fcd420ec3a3d0932dfd14378fb341a4f6046803e38753923fa219e56a1ec0d11684056a5692becf53235794731b3c14137aeea506213737534c9df541

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.vol

MD5 d63032434e7d70ecb4043dd6af8d1753
SHA1 c03563b4b763954cae8dedffd76ab3369b460dbb
SHA256 a680ef14a5b33fe5e5b31c1aac3b75bd4ea6b31cfb14376cb59bc8b032f6b996
SHA512 cbed926ae173fe45138aa60b4be810dcc2f66d473da9e690a89b2e965ca745a5600feb796128f3cbc82888c3c906d48337965d31dfe0aecbc6808b8ab41ac121

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm

MD5 c4747a7159e9012030856d635dd55be9
SHA1 f58048be849b4b1be32860ede55f2a95bbc0f2b2
SHA256 9826df802e7e933b10e4429568109c957801ffe91682fa853f2f1e2647719a86
SHA512 c6c15cac8ee0f2a561d4ae639c06ed453cba3fe799e4bbac912ca7c08fc941532d2a3a49a5a99d47de53c76e606d99b424bb7985dc44cb9a5dd24df2c2db66b1

C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db

MD5 0bc9012673d3b51c66d8edbecd2c43f5
SHA1 cd9d4d5394e342946d9272c93f152b7cfe336a7c
SHA256 78debefcf03ea83e41e9d239f890a3a9684be56e40f01486c24c9e48ff3fc68f
SHA512 5287ebd586d9e39897e8da0dd454724e3cad50f50464ab4838a80fe05e8596c54ddc48ddf197e1e368b2fff226566395c2d8e2e70894656f94c0ee51ba010a31

C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin.cdpresource

MD5 df774662471c7c4ce57e95d04b8f76c1
SHA1 8ecae4e1167f1d20f1504b7f97cd5543dd7474bb
SHA256 a144b9fc551ca115244a441ddac7e1b8286bb2ffc95877814d2fa0e864a8ab0c
SHA512 10a0e411f84164601f7e662fd3ee312609d1a8730a3550590dcf848e285254f2be00387bc7ea02b2fb18e06fdce14386e66a84b1a28aa5e281a9edc6a37f2db6

C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin.cdp

MD5 17c5c5d7b078e165bed6df545d050f3b
SHA1 7e60a150d514c63e6d322ee99b435e4e5ea00453
SHA256 d525e258f62463f090f8af18c7430bb43c3f11850bd24e57948350758b4648ee
SHA512 0f9fdcd54568b6240e5fa3c93a75ce8b346ff630e7bf45c39a0dbcbfa625c99e51ec142644f38ff3200bb92b187d758e49e06cca6e57d3ab20b4dc56fc603d86

C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst

MD5 8eb6d6bd3cac0c74d003b3d3d5a44e46
SHA1 9283c80c5e2276395eaa17c86a5d363d2bd710b9
SHA256 cad166d2b6171590a19c3a6b56972bbdc14afedc04e22012e5abeb492f193bb9
SHA512 8a1278e3a8330227a45579f436c1a7f9f39a10efd68f137641e437e78e31739e3d3e692be273d07d8049f83180a2b0cb4edac7133d469a0fc04b1fecdef1c164

C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp

MD5 d467a96156ed1b00d120157f5ffb2ab9
SHA1 d529710d378f1746fece6cd654e971b682caab69
SHA256 5ee41ace9691f402bfd0aa87e957181edd92695b3afecff7120229ab7d323b0f
SHA512 30eedb5f1661e47fd0864b5dee12e08e9158870ee1ac9ae9eb7cf34c7d818823d543e8e59fb220bd79bea63dca24f935b4eabf6d392d8a709a59c3d2b90ad084

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6703B539-1378.pma

MD5 064b80a4aba75a65c43470a5f67f2756
SHA1 616d6c7a704329ec3a93365a86d1bfce76f282d4
SHA256 59eb85fc02857beb3fd43f9026c076f4a961e36775a9230cadc872bbbf62c6ff
SHA512 556521319a862408e767ff0624f63ee1fb2aeb226a5fc54202633ceefe5d3062f33c6f50b44a8b7c683186f29d9acc6b52e57a45a007bd025a5dbc340e7f416d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 0cbe49c501b96422e1f72227d7f5c947
SHA1 4b0be378d516669ef2b5028a0b867e23f5641808
SHA256 750530732cba446649e872839c11e7b2a44e9fb5e053fc3b444678a5a8b262ac
SHA512 984ea25c89baf0eb1d9f905841bda39813a94e2d1923dfb42d7165f15c589bd7ff864040ec8f3f682f3c57702498efff15a499f7dc077dd722d84b47cf895931

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\index

MD5 f51e43d54752ce9b1e08424b35fd82ce
SHA1 fc34a7f3f5595776125f04f48b5861c43e0ef563
SHA256 97e145c7273b032637bcadeb9b29da33371845ba3714da7afef8d4e57ef197af
SHA512 6278c2c0513f4c053d49e477abb1f71a6af2b6a10ae5944b61e61560a793082a195e95383ab43db6311de4f64248d706f7d98c1fb280bbdb092e6a20fb83ba34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\index

MD5 3d26b809c3830a7e7e5e985d24e18d2c
SHA1 19673a892de32626a8c6ac225a433e3c8263167c
SHA256 4f250e73b6b14c36d6d1d9c05987678de46501edda7250717d0215645043a5e9
SHA512 316e485cf0d3290ed0a01351191da0593e3e23c4f579bead5182b60baa044446c1b7ee5b1026e60b29c013ed41aab806c3e64fd80b4dcb86d8e2a780ab4e17f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db

MD5 3979944f99b92e44fa4b7dbcb6ee91c2
SHA1 df2161c70a820fe43801320f1c25182f891261a4
SHA256 001d755b2b560945440023bf4ebfbda797cf5106419ac7dd270924b322f3ecf3
SHA512 358e6dee698a63c2490c2fb5206516766fd8ace8f3d523509c29ff76aa6a984cb6381468f15bb4b9c084d9a470298b4cc11b0970e671ce0316243069ac4c8590

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\index

MD5 87bbbaee3bebb5f7e439c530981b5f01
SHA1 d98832b93ee7a3719d4ea4509f51360a5fd823cc
SHA256 2f2a9d1e868399ea28328a153ae2dee1114dd3226e636a370c99da7ae5c8b230
SHA512 47bddce6cb4993a2cac000c536e76103362eed58763de0880ca5eeb4595fde446c41c0ba23523709649f189e57acd7f53519e68832cb47c8b2c898bdf7fe01ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 59c8a21c08bce03f28c3677fe7cec188
SHA1 1e9cb4948d4803e029f01e36d4a1f202e4538568
SHA256 357d9da906c1bcebb2336f78599e50aeb2345e1ba6c81c9f1e4bf6998d9f717f
SHA512 2195d8ce1dba05f72e71ee43a54c0195b4505c97aa165f7e2946990924c47a337ab35522920a991741404ccf21280fe76e38d12bcaef59e609a343787def3ac4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

MD5 ef48733031b712ca7027624fff3ab208
SHA1 da4f3812e6afc4b90d2185f4709dfbb6b47714fa
SHA256 c9ce8dbbe51a4131073db3d6ceef1e11eaca6308ad88a86125f221102d2cee99
SHA512 ce3a5a429e3796977a8019f47806b8c0671b597ead642fcbfbe3144e2b8112d35a9f2250896b7f215d237d0d19c5966caf3fe674165a6d50e14cb2b88c892029

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Browser

MD5 de9ef0c5bcc012a3a1131988dee272d8
SHA1 fa9ccbdc969ac9e1474fce773234b28d50951cd8
SHA256 3615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590
SHA512 cea946ebeadfe6be65e33edff6c68953a84ec2e2410884e12f406cac1e6c8a0793180433a7ef7ce097b24ea78a1fdbb4e3b3d9cdf1a827ab6ff5605da3691724

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db

MD5 873346a0f33aff02074c6240a81e447d
SHA1 1953d4b226ecd83e11801c12f5ceb7cea56cafce
SHA256 4577242f60914cd276821d08aefb5b70f43befa20470453fccbbe8fb3608cae1
SHA512 90e0e52271b8c0bb6383af672ab6307b01f11c09d357b7416c4f9418a55ab4f393c62a1afbe45a826ef2182df12680ccc853752d32096587180c295c8293a959

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma

MD5 9a31b075da019ddc9903f13f81390688
SHA1 d5ed5d518c8aad84762b03f240d90a2d5d9d99d3
SHA256 95cf4025babcd46069b425449c98ed15d97d364b2461417caa9aa0c13cb372e1
SHA512 a04726a429ae727d685f0836327c625d2f18d6327253216a9a31265a324b68b06bec4e7f1b744d261a0e67fa0a90c43719aeda9d2998f42525b0ff5640c7bf1e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\doomed\7110

MD5 86c3f01b98dea77dc989c3f08e73e8d2
SHA1 87a773fac427249610cb3d23e7b3e78eea2b6f3a
SHA256 803ddbc21238229af6b956e82eccedfb8e1cf87159801becdc1983df36fafb70
SHA512 cec3c35274dba872722893cbc60bf3cf3529efae221514af826e25257d1e070ff1b1e0664d02c6ace1c1ee23ae61a121309687e0d683e2cdfed1f1355525ff49

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\doomed\25245

MD5 495cced0ec9604b5981e10863c93f909
SHA1 62588c6a61fddc5b3aede454df4bc6b9987aabf8
SHA256 1bed95f03b7ac7a03515218fcb0dec77609e1d62e30b5ed935d3422d6a98c14c
SHA512 44a22d37cfff0a37e754aa918dff91fa53c1aeecc38051146c7916840394aaf2215dc5fb63a13d2f344284ba9cf0d4537806c7a64fab364699e070e530d7b4b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\F8CBD54DDA10F4286A41EC6A537240712D6C2308

MD5 f9e5b6895b3d24a2564efb58755c2157
SHA1 a6a1ce75c7e358562494677298074cbd1d4c8dac
SHA256 5c14970e73332e473bc89e3f0caec1aaa3af581cc87421b07a45fa35d301df96
SHA512 fd29946121aab98bd890fcd375e9b701aab0fa32c076e9d5d03e89898af75058221bdd654b0ff05c3a16812cf966dbf2141e481c1475c9bc53deff42a3207ede

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\F210D48319A1879FD1C5213FA010C613B99BA085

MD5 71072ca3057ff94a0ecaac13e28bf23e
SHA1 6fe98811789b7f07ea9bdd14f9e0b1a6710b6468
SHA256 72f226e1ccfaef76fe969e03946046f78653d2821da229be9014d535d9ee92be
SHA512 74e86f9ac0634d0aa6972f9a64c894b45547060b05f76f335e48ad3658fb7d137cba8e802ab726fd34d37bf5b4800ed86cb25931be5b5c002af71d47ba75f934

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\DED23BB33EA3C88FAD1C0A1CD53916E0D8C424D3

MD5 1edd210ed95137f0eae132f99f2f4096
SHA1 36e8964e2b8af98f7f7eec743f7c82d68f5c878b
SHA256 dee45309b441228614c8f307d324385932a86a4577116057446b4f298440b533
SHA512 d97240a5ef053f5a3cf2e0306a45ebf39ad7c645bbdec2631c4a08b64baf3a907f42a5dd708603ea5eede3c7572cb5d857b544210889e9ccdf68319131bff884

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061

MD5 8ebbaa4b2edea78b91b3e8ecf44c3cd4
SHA1 e632f62e7a025a31b4c7f7f5c59d57dc5b7e9313
SHA256 c07048fb515a32c3a960bd9b1ea731b46587255ecbea7c97897edd1828862557
SHA512 0f7e5d647634a181ddf41e8a7f5c0add113698afa675398477c1b4a70aae9feed4b975ae53e627416ddad21f9cbb44e9bee2ff017f4b6d14b920eabc2b1862f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F

MD5 ece0d6e1beff56a06d809e21bc97026c
SHA1 b4f19410cc8b177c2773c2f31a995e8fe40bdf24
SHA256 c18bceeef12f46b651ffdd1c6763154472d234c0fd3391229e18c5e9685f5310
SHA512 95d2c1e88029ab6f6419bd785738acd56fc9268da017738aa6149b03577c5b0bd42ba47bb5f076c5add5ceb3e2bb8607ab5e55dcdf3bb14e8ba7817c3f2d00d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\C982342375C355A44C213031EEAC97222E1367E1

MD5 36bfc7290daa2596dda0f1f19df17fcc
SHA1 561f4d67cb57c33fc019ab63fbb35a62493544c8
SHA256 e05f750800d7834c7565a381468c76ee9da32f60684ec949849ebefdc15d9960
SHA512 c8a70b106ee590b5018bc5b98e5cb5189087ec460b9d15e5fd02f4f9c6e00bd84c4a52e48e343496175adeac1ef40eec560624dd0f055fe5fa3a47db1e601bb2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\9C8ECD974D1429314EB373378B9605809BD5D61A

MD5 1a1e546139b64ab59362682d9d2c0fbf
SHA1 43c1ae4307833033049b6dc927613e0d3a1a3657
SHA256 de7328b6869c2a872499551c1e4d24a8747dd3f1e8a3fbc9c7bb6683fed1588b
SHA512 07cb6bdc6213d7b7ff4ec0300fdc9ddb0e90f61f780ccb3452af224e1a7cfa40c0a8c55885db6a744477d1a9f732729526b0cadbc4a7eeebf2f5edff35b009a1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\9648808B6C63CD1AAD97A7B68F84F35C95682143

MD5 a3a19a9c1509a15b6dbefbcd65005057
SHA1 a0929776ce2133114fb100537f0e883cd6006216
SHA256 a19cfd2ac7889a4d5b451e9252d41ce21b1ac6383cfe76678b971cd022042a1e
SHA512 735082a39dbad502778c026e18f7a8970aad857f9f24dca6b137bf85cfcc6304da529d56ef58592cce4df43b1a9f7b935370ae77b561189ff7d515fd36ad2e8c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\90E321EE94230DCDBDCD2EC0B77C695A4FC21F78

MD5 5b755aae2c0fc2f713e0607b70901d07
SHA1 82f3767803cbce194d70eb4da0c3d0b8f6b4e53c
SHA256 75aaf82257f43877726e7ff8d57ebc704a233653a9f3e68ba1e4504cabe68180
SHA512 3eca4e181cd56174905d5b3c3e2efb992deff9090a7e949d23400b2668ba5344aa912a0051dc0a5d21b462d603bff227ff9f4c9800f6f88ea9c59b847bb0e81a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\8B5D3973143079D2564A97DDC5282687405317C9

MD5 b32206c893c113510d46c3c547c3930b
SHA1 dc258e9ed5175a843fd34834f6ac7fbefaea3345
SHA256 369c0d6a95996401276875180c35e6c2a0a29af1909c98b0bba76a91422c5398
SHA512 44013ccafd21cd251afee10273f43e2ccf4140b189c975694be4caae90de2c44bfb81c55c2bebcb115316f7614c05ddba701db0c2d290ef4433468a6c9eb4642

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4

MD5 e3521d8cc33b093e345a51f3f48519e9
SHA1 3567543ef77966f51eedf31136b7efd229ffcca8
SHA256 88963bb3f9d42c4300f2de10788308c2e0135657fb30c21556b4a4a16fbef713
SHA512 e664e2a601c429e1108094ec74406ecbf8be17c4a9ae412093ccc275886d00fbd9abc79ae1540263cef61f06e799deb95caaa99b8d4158a44b74636d1cd851f7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\89C9B59023C6004C5FCA8E641B2BD533BAA7F06E

MD5 b1c1f4f10df82adf1d9d456b7028ff4c
SHA1 e296d614b97aafa902985e36eff2d99407c1cd99
SHA256 8f4e6735987ffc03e944d3360ed040e699dba670c220f69937966731f9145a8f
SHA512 a9133ef17a4cf100ba2a25153f70e3985f85c9c3d559742b71ec52842dea63a768b6a21068751aeb573a4ef600cb32e8c78a083bdba709a3ab535c0fbcef3623

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\7BFCF32544F467F973AF267DF4EB4842EDED0C1F

MD5 8b73462d22a6ebca0d8c4f46bfd6b405
SHA1 26cd84b3b63201572cfdf6da6c277ca41bc5887b
SHA256 c045a8e53337a5800db747d3b9064e43ebbd1b4702ab7a2812ddb29151a8c468
SHA512 60c0fe9e07893d21bdcf977fe3a864be97cf7714f4854b1efe0f4708ffb35943ca83fcd8a9960f2df7f89e806c5605357cb5cfc3ac92630e90bc6b89ff0da8bb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\74B59C6A1551D74BB99E6CB6A45B631D2D390D50

MD5 512493890f5e29f124d90a11aa769c21
SHA1 11f2be050dd758c471719e8f95b3ddba410091a6
SHA256 2185099ae4ec43f478c1e914740f11d80eec908d96db438dcef2177dcdd8e3a6
SHA512 1407771954ad9284a76e71c05e0968e21a5ad1d1b4c45f77310181cb21ff88282d774293713791b8972f872bbdbbafd0021d7f72fd0e066c1b59a5281638f8e1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

MD5 a22564649cdcf0bcf043e66f0f64f6c2
SHA1 ab881f2b97eec21ee50cfb559e45fe046fb78bbe
SHA256 ab683842d18e6fcd37e68093dc7753e0e7caebabc538e6c7f655848674e87cd8
SHA512 693d314946c693b972cc6746255f3f9860df44c911fe99328e2232180a40bcb3fcc42405defc485384ec973dcd700154bcca8f647771f009cc76e0249829e8d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\52E2DA2E760DB42EED0B0B3217432EB3DF57EAFA

MD5 3465469f74e024b196b7123b84e38bea
SHA1 7a2c87c7bc886aa698996728a354584e032cf279
SHA256 c09abfe2bde948d897f16f0ba00c4074d19d2908f863086e7f04ee35acd2757a
SHA512 da8439c75b685b3652341f3e0f266f6d24e5092f5f6b5473a4b7dc397d9aebb45ef62640cabb5b7d4c59b8febebc67b28d27f07e3514119ee0bf36b7e860bfdf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\39DB9E847E680B765D7B04FCCE6BF5BC0225F878

MD5 1d1c6018d98a8382cc64cd396b9e89cc
SHA1 73e825ce4d47ff1bbc0e8cdc119055d80a49a9bd
SHA256 5ba1d1d0238df86ab185fcacabaaa524c8206df55b90a712547fad3e5c599418
SHA512 b62ee7cbc91ee616f073979ca9a6df8c31ba3dc29460f365715a3bee9ecab81e8d83e094a7f89134d39937dbf97e411a45e95cc9c092bb7cdc775bc32c787f97

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\38FF788A718C79DDC3D1E23EAA975517D9BA3BB0

MD5 bec34121f936641941265896a02d7024
SHA1 137fb57e706e40dde249777d7f27d44b5449ea9b
SHA256 4bf9fd40a5617d71624cd41340c53aea3d48af09af907e6157f39283ad6d16f6
SHA512 d60bc4625d9805244bb1449740d2fc7d60c7790f0e128b9cf96d7964606cdada4005553a6a4a39c727c85728ec7124480780d48680474fec949dc8ca9a6db90a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

MD5 aabbcf66ca1b780bfed8aa674a55d798
SHA1 f44429b3fdd580765a127cdbe02aa5c3fa790fc8
SHA256 0398e042da644d0ab8055b8a2fed65f567c2994f53f83e3ebd05ad7c33571310
SHA512 1ab83a70dba00b711540f725730a0aa068fad990b5d1c3b9370a49d24af1dd708770000c8f3ce0d1d7113f32d228d0b5308ee05ada2d022a15cf290f719e5d2d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\236F1F65D686BE46DC2953555D6006AECABE3BFC

MD5 60ce9b9585f2b9ee5208dd3e3ac75e2f
SHA1 608163cf92bf784d3ec6515bf4f5fd1b6b1db65d
SHA256 1b6e4fbb00b097d2e922acfa6ef3306a5c9991886f284f62230c429a1af5feae
SHA512 6da0ee4c19ebcab2bb214b8dd2a244e9091ba480ce751d7d6f515950138c64d856a79d575a96a929345d4b34a51e6d403b72463cf9e0c050fce47c6fdb7d0079

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\1611007487CDFCDB9FE43793C68D8984CF7DD7AA

MD5 bb3cd1e87a2ab9af3d56cd72d81af557
SHA1 d23b2bc17ff184eef328d8f2aece144d356d8339
SHA256 f034da52103bad488c67cc07044641e7e178e969dc9b38829376d0579a0c9e09
SHA512 4579025a13d3bea0366c99bacce25ab4ac4ebaf8d5d37284d05e0bed09b0a699e01ca3e5de7b8aee9c7e17f4128e95fff5768ae471de95c6c05521c21d717d7b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\037778A55E1B7E9BED3390289866D09402D6C913

MD5 e4a4ef16c319f9bf1dee6e91ecf4bfee
SHA1 343ff30c389d8b5789f84c4179d1be51ca3103ba
SHA256 ae3dfcaff9f15693d063abd90b82ca313fc3e58f75608ca071d682b77f4d0d77
SHA512 4a1abba040d3a7838bc8b10fe7e3dd8154b7a34a787d638a79d88b98269a7b78baa0bb5b4edc3bc59ace6937c649c6d2537a5a347ab84534ca965740caab18f1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cache2\entries\0305BF7FE660AF5F32B4319E4C7EF7A7B70257A3

MD5 ea6abfed3cea9d0ea4d663f2a851f226
SHA1 15bd458940220e6b4b4e30e24579e1c48f2b6dac
SHA256 15bd673b9a1e8ff94255807a58fc0da039b11c4a476583a2b94970b34665e811
SHA512 47a381d59621a1ac6a33ef15cd33c759b51c6f01bc7d81e6ddd182fbee9ff99162167126bdffa07a29d8bb37497ebfb66ecae6cefd981e77d0bbd51d1dc4a04a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-twitter-digest256.vlpset

MD5 8347e3838b3f176a0c4f78364fccbecc
SHA1 d68d4ff0bd768fb685bbeafe39187110c6ffb32e
SHA256 510dd943627bc1e62bd8d6c01ff3b448934813084c00390d33c9e60772bb529c
SHA512 41d7235a324bf27bea6cbb31271f20b132ceba2e6fb5a3f9acca132ac12771237b77acc7f5dcb8e11571beee1d7d6315ac1723476cf4c0bc3cb01307e8b22e1c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-twitter-digest256.sbstore

MD5 0964a62ba48341ebf35698d9be843c20
SHA1 d8600ba6315a263b3fa6c90b9b2220e2f19db7a1
SHA256 32268c5b4bcf04231379bf024615c86d7136c71828009eb350d038fb63f6989a
SHA512 a481e4ed4fca1a85284a2ce6d0730e847c975f7233372ac52ca8a0398f0181c5feeeb42cea61d8398080ae4ab1c821a89d4fcbc52231eed0b078344a0032895c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-linkedin-digest256.vlpset

MD5 530d70dc8f251c579d059f5b1b73fa9b
SHA1 78b2a695f8741ed92e534ed431494d1adc566de6
SHA256 db7ec6c7001da7cc14c7814fcf8ccb76f689d20adba407d0a2b90febe1260863
SHA512 3e69371ec0801f952072ba0bca007b6e433eb744fd2aa8228d5ae0a0ed11943eb6bb035e44d05a013803eee063740fd34fa02a5bec18ef5175ae2472734f8148

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-linkedin-digest256.sbstore

MD5 2cbcc17325808925e52d4da835fe498b
SHA1 9cc989930cbff54e26bef5e309ede3424eb6ac0b
SHA256 0e1911a712c9cde4e411312e8f347c8b3560b19a2b93876d153efaca52f486a5
SHA512 2c8257ed723fab6d1d179db03308f0135955c6ae7af879c6f2ef3ae2b761975e9fd19586e860e94e7038f4477871351a8b93a7dd59662ac07ff3b059eef64e81

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-facebook-digest256.vlpset

MD5 daaa03bd7519da1744f99811880c2e54
SHA1 3712d23c4138e87c8213678d0047968f6539eeb4
SHA256 3de18607bf87948b854949674e41d74373a8f8def1fd4e84b33a61bab84de49f
SHA512 cd65857f2f7c8f967050671b91ac85b7497fc2887332a5f289ec747ae228e4658d1b8b6f0f856b47a5d2d8346436000370fa85af9038e1870dec32ac62af34e1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-tracking-protection-facebook-digest256.sbstore

MD5 b4229cdb076df6f4f59a6ef909cd8a66
SHA1 f94f3710660171df83b7bac1ab0e8c0cf997fb33
SHA256 485b156b4c5756577a36d077cd74d1aa62fcbb3158f45c31bea4c64b02d443fb
SHA512 60bc953bfc9d4effcd66a10955140fe18d1329bc2092ac7d165c1d487bcd2dd6120936e44b3b3c4044e0df3a08b29b9bf0eecaab4618b670dc60e2bdc3a3c06f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-track-digest256.vlpset

MD5 724e72a447fe71f26bf2d238b74ae4fc
SHA1 f523d76ca8dc7cc125572e3d72b142de0ab3b387
SHA256 239eed59fd36f00c99db1e31a50aa8b0151e4c9a10c73b2eda66c7370c591e60
SHA512 dca33c41afba5474411fb3f5e0a1b59aff4268613ac04c9ac9eda1a9c6dc705de300a9b8343dc7aec4f1cdf2dced5e6ffc8c48485f3554fd4497f7dcda4442a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\social-track-digest256.sbstore

MD5 8b43d39113c80a060f79bca4cf917e35
SHA1 0b17ca32ccc5c7670c8d51b7c9a88325c80f3490
SHA256 88c6a99c31843bf96caddef9256b0f5ab4e789cb14d921ffe05708db35961be5
SHA512 16111c5b337a4f039c22d35c2736061e6d4eadb7ef781e1be887f9dd02566eb0bca79cd5c5d05ce96dfbe6fba09f5e250fd101d3a8002c553af2f025e0d7bf9e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\mozstd-trackwhite-digest256.vlpset

MD5 41fae052da51d99364071f405c6c003e
SHA1 04c88b9e06fd189859e283d0e8f945ccec7272db
SHA256 32fd3723664e71d8b405ff333c9140dc5cd221b7d20572255a41609a95001db6
SHA512 a47ef3facfd5ec05e8579ad1759b131eb2b53f55e47daaf7924d11d26c2b5867b489b0fc510245f13e960e7485ee1ed3080e1747033ced720485a716c119282b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\mozstd-trackwhite-digest256.sbstore

MD5 4f1db84b523d8fea02d102c3a16332d5
SHA1 321f249d1a4a9773def0685f3329deefcc23f09c
SHA256 e08084395a8e1cda6b8468242bfdbed772031758abcf9ed2d35bd676d161dd5a
SHA512 d9c1caf61c4e0337b15c9519dfa5af72761b44f85ea05dfbc5ddded8b660cb572bcd450a367e643beb4437bce7000b79f9ab0b798ff6db49a6dba4aae3b0c61d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\google-trackwhite-digest256.vlpset

MD5 c0e1ac752cb716038a8245aa68af4c1f
SHA1 52152c6f058aab68f996311e424dd30341200fdf
SHA256 e448d98c433f007a572960b5a956b474528893020773110d6921767becfd3837
SHA512 a44670bb0e64bbc28bb647716e000405688cdcf62b841619fb00307b29163d9477c79260485d0a7675bc0f943fa343ac01d2225baf01b27ec098e2e2354b1150

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\google-trackwhite-digest256.sbstore

MD5 03e14be9bc0a656037a3b5942a546b9c
SHA1 27c8c966f0c0199c6790bc3b8156d1f018b8c5b0
SHA256 6b768a574930c00b1ae0da8677c98b99efb66d81d2bfc7bc3856ba3dcaee73e6
SHA512 33aadd19c593b005d5940d26f65f135162a161631218ad9ad0741549fb81ebf3958375b4ee4fcc154cbc2694e621180670c9a485828862af752de557e9e82b89

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\content-track-digest256.vlpset

MD5 68aa5542abf4f84cdf32f68d15ec7d87
SHA1 d19e327117566e16129319bcec12b11db1c42e47
SHA256 e80b6d551b6b93cf01fa2774746bcad9d365f509776659b84835f30e0aca1ca6
SHA512 7679f7a14c2bb7351789d4acb2b8edaea2c4f613f70492577d2c91afb71574087088c27727dfe0765cebd19dcefd0738234f64bff242a75948c61e066e37baaf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\content-track-digest256.sbstore

MD5 51d0037241fd968870f54ace34821097
SHA1 1de7bba79b592fd60ce7996625aafb6850cd4030
SHA256 c0d2ff4a77d7b1383af6534b54b0bc3e5dc9248447246d77bacc07d645587de1
SHA512 5d77a27ed7a82e6106106860b50ef389656250d012fe3810b2e8c8a481357ce8475cf41fc9c56228dc3bbaee80151c9fa99ed9e77c7b4c675cc38cd95bbfeab0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\content-email-track-digest256.vlpset

MD5 af57a9620d86696b2bbffd0b7499e8ec
SHA1 0313dc7c50eb67d5974a95f8ad328e6d418751da
SHA256 ee6ff9bf6173569890e1d04556f5d25799898b3f18b7ac1f5a019d36e5d4e2ec
SHA512 cd5f88a80a0be1bbbb2b90b052df13dc6b2398e09eb4f20d613f81b86873701e959a2c33105730e338c693ceb1fe51c0e3f92b7df158c754e2f17c97a4c1db9f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\content-email-track-digest256.sbstore

MD5 f6276772def3683c8d6423267b2fe006
SHA1 f91130954a74daa0465cf73d23a84ec3ea0a89c2
SHA256 0cc8dc4b43ac791ba56ee47187c4dfecc6bbb4830fa6427e87344f901d5d27d9
SHA512 4628533e13b4850056ff8b0ecefd6991a6fc45ddc46e28103bbf06767342ddf6324462f0644ffc5c503370769dd4865226b1440bd2cef238fbf892148e1d502b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-fingerprinting-track-digest256.vlpset

MD5 616affa2edda8a3e06dc1b85387d4246
SHA1 432e6e9144cc96cebf9f1b25b169eb0c6973dd44
SHA256 b2e4bb7de736b399f2caffb7274579f46bea111966ecc459ea6a6c02bc2aeb85
SHA512 98294b41e7a6020c2a6623d3b6e7b6f4b93f5545f4aa39470c6f588176d36febe3ff6fed102e215f0da811fd3d8926e81ea670c4d4bd952d62f7cbbd26ff98b7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-fingerprinting-track-digest256.sbstore

MD5 be7d2765def13d5a252cc963f62e9dec
SHA1 4055e5b3ac7581e27eadd02560d7f30e9df4caa1
SHA256 06eee65e89c04b4e84a983437d9d98295dc2fe629a306244aacd7d2a787e5bcd
SHA512 a7f5b82eb2688df0255a7e04a330bba2adeda4c7990fddc9f0bee5447285d2de93c6cda2d24f1708970f2596d66be3c4e1942ed3f974901e97297c5bcd2a006f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-email-track-digest256.vlpset

MD5 213325f07445a473bc8b8e39ddd01f1a
SHA1 20008e14f24d114deea0193f3d4f41926a1d42a5
SHA256 27dfdce520faff676208952b08a0c4fdeb47eb8b506f69bf5ff2344d2b1b5a8c
SHA512 06ad311be8844db4d42250046aa0b875239ab6c31b5540d056f30ba1ad262eed0baf567717249574b558ddf0e0814f08554dbac4331b08abde7b1293c023342d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-email-track-digest256.sbstore

MD5 c37c7ecc6985b9eb6d7784961b74d418
SHA1 d068cb3b4683de553b0cbbd5c4d11ad828b6c9cc
SHA256 bb61e5b90f654f3ca95299d05d4888d125e5de44ca8b53c86eadd225af3bf5f1
SHA512 2c61b87e518f5a51efe0cb3f917fa7ad2acb96a4c398971da4cabc0cb705a56501f5ca84121ba58eb8e82149eeafa3795121845df5ff9aec35cb4ea409af0fe3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-cryptomining-track-digest256.vlpset

MD5 75030fc0c97997338ab538b7615fd829
SHA1 dac3d0bb59949f922b99e4c0dcc6c705842fd6ad
SHA256 50780f9fd932d7707a4bcb454c7bf031205a22fcefceb5b9cbef3fc43acb9bcc
SHA512 21ad8d76b2a24d5cecc065ba9b5250cfc0f29265e741ece2fc30958662f7f820ebef5db476636cccbe5ed632006ad0fab22c42a05b714cf89a2fd93a89790174

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\base-cryptomining-track-digest256.sbstore

MD5 11557f274f85b0333bcff2c463cee9d2
SHA1 88b800807da2b404578df9c6613960a0dfbb88a6
SHA256 24c953cf01673aa81f8086034ef32f6bbd07c3419162e3d5fb08ab37f854adea
SHA512 5c4d9cd85dae2ba90048eecfdc2987f4f5c5d1e8bc5964203b30f562d66bde5ea8b3059ad1cdd19fe06e814480900e533318affe873b68cbcd810e9f4e7c9ede

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\analytics-track-digest256.vlpset

MD5 01c9d44786c5994b56eccfa294d701f5
SHA1 1f1ec326e812ec296f97c675e39c60794920ffbb
SHA256 f3560ed7c826289cfd01f757d3e20273ca261110da70eb32c4d32d3c2e4aa2fc
SHA512 ed6742bd469d7d20bb94e5339f276a6b202706e04c34ad5ceff99549a6632fbcebd7bd5510843c0cc589b508cc80f45ba6bcabeb330d2bdcee9f1ee38f662a03

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\analytics-track-digest256.sbstore

MD5 758e863d90671e7e3012d8a9d6169aed
SHA1 70823c8b77ae98e04dcea417964417e4bf1ef301
SHA256 a6c2d1e172f62c8557fd75f5185a937d46433f03221c7221e59ebacbf2f0bb57
SHA512 e8cf425b22040ca8338587bff3457af50871fea4496b2d27a827aea615f645acb76bcb1cd73d5ee77d07f139816dd390262ee231adc661c5a1a272c1c9828197

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\ads-track-digest256.vlpset

MD5 64d20d05a5e1dc74631f0b7efeda7ee9
SHA1 567a2116f2a6e7db0306485e64b170e7c8b6e3ae
SHA256 b224780de64479dfe67affae848dff9e838628ccff1d9515cbfc8ee074bd48ff
SHA512 529b682913b709af8eed4fca911224b1b691e94aeccc99951b8c970dfa8a7776f9ff2caf311ddcee44910bd7e3c419fce01cd8f32f41aa781ef3e020569fd3ca

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\safebrowsing\ads-track-digest256.sbstore

MD5 9257c6d7a11efc7a942eff10952f2aa9
SHA1 a476fa1ce6ac65601534fc49c5ef39fcc9852645
SHA256 3851e32284e0eaf5687e6b55c6fdc5ad0b5020b81699bde6faffca570016cad4
SHA512 52aae9e5a565d08d54db74fd9c5ec6bf831ad03f5901d6212599c9c6e554d22d475a7c169e4068f13eaaa247b4562008fd658a5fb7e287646945f6ef30a5d084

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6ir3v68x.default-release\startupCache\startupCache.8.little

MD5 844723027bf55d3e3a785ae84b077209
SHA1 758d94929c0357872806596719cc16ee9740e863
SHA256 e150972ced28a163d134767499c5a2ec9750bd5cec159eb5d963a3ce6920e31d
SHA512 09ba021fd03177f910d35a989a9f889a0ce46e89ba9652c0c1e0f2ca3a9224e314d2d548d05cfd4ae98cc6e879b83b26e9fb1c4073cd7926f66c7f3419163cf5

C:\Users\Admin\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings-0.dat

MD5 bda7a55bbaeb4c3ec863e77de9af729c
SHA1 a2a4d0198fd4f69a6561c98fa00559961a9a3192
SHA256 72fdbb5fc6be40f84607d6af4534a65268eb6fec8cb4bbb998d9262d6b541a59
SHA512 f1a12a80657b9c9ce0f37149b33728fb8ed205a4634ad9798c6772ebbc3e1ee0e57452e6566fbf81ea171bc95cc03dfacca85d45369f429479f245ca2070a6bc

C:\Users\Admin\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\settings.dat

MD5 1095d7a9eab528d42c768f0a0701e7db
SHA1 80f6dd35d7b30bf85f4b1b607b4a97cfefc5c6c5
SHA256 4f351177828710cfc618ff7dbd0bf506c92c55305c2a37df73d918127139746d
SHA512 985bf0eb8679e95ca5831bbfb4398b874cf0a1bfd3ad3ad9a1b92b86788e703ba4975af6a994a0fe9cdd0ce4a094b6245b40ad1df7ddff5281dff246755ac225

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png

MD5 4ad1610294fc90333cf4b05d06c08137
SHA1 153643ea1f34596b3d0b3e046a8cff650accc442
SHA256 3349194a8156570f85efe1293b97989313398425194c5c3b9fff45db679100b9
SHA512 5415727e2afdbdb6f3ca388d1d5b5f252b6b0b9ffea3ebb01be72c97020658edbd6ea9cd7130f861fb49b43b92acbd43d7cc5772b6541bdaa67aafce09b31f3c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png

MD5 bf586f79932ffa13c6c064325134a550
SHA1 431c1b061bd28f998ca046bf8f08fa91e1cfce93
SHA256 800c69666ce3dcc1bbd8aaa4b277fb91f5852c480bd11715038b463cd44a7dd5
SHA512 8aa0a866a74125e6c20b7482231e3196ea182fa8a04d242f5af032a9c9677f91ece6b99838d0da0f6a85116fbd0cbd201c75f91750f5cd42d1754090fe2622f3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png

MD5 e1e9d136e4409dad95c95be783cc8ca4
SHA1 89889c4539e09a2222e052c2621bac798124f359
SHA256 62ccb7d84af57da28cf4ca4929e290e20d2f9e00efceb02053a40feff4da8a59
SHA512 19f73648ea53e298a28ce136b2b6021ad5790fc4df373cb9d48fa2c898d56ec10c123ae77c0f0165a10e0f4c6f761d16585fdf4958d6674fb06e6e06f7487c97

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png

MD5 d529fa4e54ccfe9d8e5b6e52d7202359
SHA1 cbc23b1fc93d48b39fc7eef2120eef5322be77fc
SHA256 cccfb10d751adc37c9a763a524ccec328ded4fc853723c081e0dd61bdc8ab4a5
SHA512 ca440da5f59be87dcddef66b86c239ca63ca45ce9213ceb02db6db90193dea30eccf49f4e39707eaa47dcde8908c5aac5570ba6694ff7dbfdd7e416fc56660c1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png

MD5 c74da0cfcb15d2e1259a114e8f49704d
SHA1 dc5ec8a905cbbdc099e87d112d410d5b4ab8ab16
SHA256 5c71a107f4772d8625d8f2a03f6003dafb16eb71d70ae54ecf3e03214eb25f82
SHA512 3498728c36a2e146dfdc4fb0eae64ff735c49f203b7c8904fc0176bd38c2d75611a574508e015018be847b6b093938a65f5160c1f3feae66b0a012b670fb3e30

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png

MD5 36a8463821ebd6bc3b15e1eed3b02975
SHA1 dd661c8d187bc46c8a041cd4678d361c73bb3af8
SHA256 22b18c82ca7c8e430bbacd58a616886757b4645dd1cd1763d6e59332c68bfe71
SHA512 a46dac70f54ef66b41eff29a8c43f3ee801d2e47dc687abaacad559ab4040af2820f56b0fde054f79bfabaa0c34ca32c20f50650430c4f53a15da79b031850d2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png

MD5 dd341ee3018f67ef06954907d644bc70
SHA1 c4c48d9663ed344bc940f9614401d2fe6d1bcae7
SHA256 ce8faaff2d689e6452fb6cb75802103038a4c86ddba86e0cca1c4ffcdbebb7cf
SHA512 37b1521e4e5ca823c3a0fa076df576fbf60a0e14e7490424677020dff5607eaa0fe131f820a4eb7f34325f76ae8103e0d188d4296da7d41ef40eb2fd0c769b82

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png

MD5 3be736e92d5cd6b64ab019f015686f05
SHA1 e69a8beb3822ed54e4c727f645b46861d741f4ad
SHA256 d97192aa89ffb46fdd27a3689b8bde08cdcee7f5cdeba7a7c88a819ccaf40656
SHA512 045a5049e4f32490e2cf31afa7d23be2e80166ef69d89a1591bea34152061775ed51cdd673eaed69315ebdef2b00099303fb9652f508731c0d708a12cdeee5be

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat

MD5 0ec5456004f37616a6d68dfa2235ccab
SHA1 f8e3f53f7861ead427c3861e4fe0d3441e9a8ff9
SHA256 8426d8ee7b590b60a8f0d32972c5d289ad915779946ee6ae17322887c0f16618
SHA512 f6cc2f938a6fbe21156ee7f8820d9108a21cd18fd872be470b60b95258c37b10ec4108549e2f3581b14791bd4d9ec399eac8dbe9d2788ecfc14d17100d37a559

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat

MD5 1e845bcaca8215b68b6dd6fe289dc162
SHA1 dc37611f91aeb83f185070a56b3207756ec44242
SHA256 c1a3a4d4988b8fa1993442bd3544877633bd414dba32a0546be61cf9c9e35b27
SHA512 73b57bfe1312f5ac3694f0b535a403f9978c443a3ec85553553d162b5d6a3d681ae9a7246939cc8e9ffeef01ade03585041aa8cec701c62aba289605b648ea34

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\fca96098-dc8d-41d1-abb4-8b86d43bb417.up_meta_secure

MD5 fcac062e8b0159238bae225bb80f75e3
SHA1 51f64f000dabfb88454e18ab8016dcdb5ac15992
SHA256 647a74a0d2027d4027e61b3a2970df6ec0c5f81685a3558db06cd23f9a610b3d
SHA512 8dcee0c285b968ba29f9bb0a34aa8bcea8de1946a6406fd6d1ec994fb8a0f81590db866835a235a30aa7eaf12b76983af9fd671b06c48090b04740aba0e1c231

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\fca96098-dc8d-41d1-abb4-8b86d43bb417.d426f7c3-f3c3-4a9b-a17d-0ce6639233e0.down_meta

MD5 7a87d66c2417b694bec02c88e1f43431
SHA1 539a6ff0e1a51685e9a346fc93577dd3711b7753
SHA256 6bba618fcdaad43eb2898c1a238c641a5fb15b04859e643edb9cbfd26c6a66aa
SHA512 3b194786aa798e54b268b4c03e26f3a558b34992274a2e56e2326204824f16b025c63cc73702e91ceb511ea1bda0eb689b0b1a343533d495dd0f0c3a317ad082

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\f512a4a5-732b-48e4-8b23-2deb2c926924.up_meta_secure

MD5 981d9bd9581a0bebb091de078546342b
SHA1 1fef69b1a372d4b6ef852e40e21d4dca9f4c496d
SHA256 2a18433f5c6bfdc54956b623c17f102db9044bfbb1e34a718f04f00af8500578
SHA512 ad543de12d05da34e616fd97763b3562b1094ce993397467bd1f154e38004b719e84b2a37976bfd9b6d82e909618caa3815499a0e165a7695316975844d50b6e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\f512a4a5-732b-48e4-8b23-2deb2c926924.776bc5e9-299a-4572-af33-84f0c614f649.down_meta

MD5 2973c0e4ff69383bd6a2c9d1c7273327
SHA1 8ada9b833a5f2420ffb8db93711b7a4c5274392b
SHA256 eb8e851e96d3a965ef1a0d500f01409dee7ff82795afc78a7c39879c782413d2
SHA512 31052109a3540257d2825c5f6c1fedf472956509aca78b7eae1a0cf5c7da2ad1da637242aa3ba779165d11a6589e5ff3fbdc5a2f35a144370b07ac520f135179

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\acbf52e9-4d2d-4e75-b822-1804a906a120.up_meta_secure

MD5 01525e54cf4d2aa799a6f2d7720f3d1a
SHA1 81d1d60853af1a85d014216685b2e0c58ade8dc8
SHA256 03ed175dcdbe8520af90512119f0aa5994e7527cab62faa82535ef88f85e5c1b
SHA512 1c5210f376427e6e723937b75089e4a958211940fd74610e0b69eca0e804a5c0d2f146758c7825bd72d65c787626b2b8c5b1021642e22286b15941c8ffa33575

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\acbf52e9-4d2d-4e75-b822-1804a906a120.3bd700e2-3837-4898-b032-a72c907e0c44.down_meta

MD5 224ee27667611305786f048b244d3f51
SHA1 c8b66c2860f06f297b0561ea5e7848f60645475b
SHA256 d84802cae92852d6c5586ac056c3859032c6a212fb3b720649d8a8a2936bbdc6
SHA512 7920690f2b47f14a68d149c1e476c67528ae22c100d09b4f3c841de34e13af22b320feab311816f9a115a3f030d4909bbeb9d6976495ed0508633472ad123dea

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\9510ad72-f124-4cbd-90c2-d941df589712.up_meta_secure

MD5 fe529146a1ebcdf23abcfaffae99c1e9
SHA1 bf06a0d73efde799aa2d68e649c3b9b588ed434a
SHA256 1c03168e4256334f6082cb9435de631ad6826353b35843dd184847d6d35a53d4
SHA512 2f89c1691c925047a1f59194cab91c93fbcb0f66e34c14f46c4cb28fcf4c93661ae4e6f34fd84f43b9e974c0b3f4f218ef5889d35f831526193f38b3074c5ef0

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\9510ad72-f124-4cbd-90c2-d941df589712.6ae9afd5-26e0-41d6-aa2d-941ff86ef0c6.down_meta

MD5 548e216dede52bde74a575d0a69364ec
SHA1 e90d59e1c2f16c23fe96a092778d055ab49e38d3
SHA256 df04575ac5c361904139c072b8459cab6c10ac8310dfbb0afe14204b4073994c
SHA512 d0a2519459fb2c2ac6b1a5299dde2cd8832764153d4bc78a228035c4b6d975a4a62c13d63b4342d06d2a1a7421d5d7690e87191bf33eb9d75c7e3473af331ebf

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\5ac289c7-f786-46a6-96df-309c2aaf1016.up_meta_secure

MD5 3a4d460e078f0ce0e8a93e8c113f9b2b
SHA1 5cf9a9e6d8dd851ab2d2cebcfd2de13c45382905
SHA256 3b5de5f8ea5033071014b5b3490cbb80c7cdde3d0e1373b320d07823a15c7089
SHA512 b3192bdb95550e35ce7a603ab6852a05c288ec3d869fc543811ac38dd7a4342477ebc0314acbe06edda3b516eea68924757e164799bb36ad54a370a739ef3041

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\5ac289c7-f786-46a6-96df-309c2aaf1016.637ade5f-27b2-4a3c-8295-71aedd863ebd.down_meta

MD5 0e26b31e5f1f48ea002997575b0be974
SHA1 6c0eed1da7103fde55765ea48416e34c0665c1ae
SHA256 8f4cfdea2f74f388d5be353891c6abfb214f66a8dbefc2135f3842c212e24cb8
SHA512 44d75b32263c6485dc0564840393a147ae64fb84f5504afb8b8801e8d6c1ca404937f41de05d623fa5da3824e65f2fb7da94ee2b39aab3b96f932cdbef463e7a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\0f8191cf-6b32-4245-a9f2-b1adec9608ca.up_meta_secure

MD5 a7576de6018548aba90155ef598351b5
SHA1 132c2148a96df2bddf9fb17b52459fdd66659a29
SHA256 2ee37eca45e00655a7d923caf950c8c893877083a01bfd6c80c9db228e01b53c
SHA512 2badd078ea5d16924151c7ad3b472e15e815506735b42d42c80d4cb50070ece05576fe2e0339a93f381928eac84a21f5207a1a87f040c8ff1ab8d1337b9cd111

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\0f8191cf-6b32-4245-a9f2-b1adec9608ca.61459120-e92d-4268-9b3e-d3a96db754d5.down_meta

MD5 7e80a4acb75af2c361a6a4c77ba58ca9
SHA1 0078f3b837b6bc0adc5d692210f30edca5cb820a
SHA256 1561c670ce351221bc65db947c66352506a30d037b28e34bd126c4535bc8e063
SHA512 36093cd37f91e2935e87b0683fb3b6ae628731f882fca96fc394672b8da4ae3771df798092f36863426183a4574439aa061ae478b2c2217b6e07fe6201050c70

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\f78d5263a7b5d387397de0a609d22635ba8e949b2dc63901f1609dad5fb5473a

MD5 764d84323f4edcf79c0a96e125a30ae5
SHA1 2b8ae0b773c4c5474f27cf3539ffe1436161fa2d
SHA256 4f178c2c368a9be2073ce56e070ec65b3e393dd283078d4c0ae26467ce22e5d6
SHA512 4e48b538ca3de02c059407bf578c7ee7855140603b2f752898dbf752eec0b8bc003102524cf0ea857c76babd1b4843ab40f9e0b1d5794c0dd2720a807ba36f00

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\e82c6c269eb80aac634195468f269351147cdd3715e5a8fa4c1701d5fb80be5d

MD5 bb275e6579447faa5b5c5d3139bf1c78
SHA1 1a73fade9b5e1e41d82afc017a152be5a1165d0a
SHA256 100b88f1212049519e45473aeeb0b8c7c41eba9b066b7175a3210d5919c55afe
SHA512 bfec4ef0cf7db4a79117d1cf8d20541f2072fa065d9684b6acf079c5294bc55aa9f638db10a711be30d869d1d9ba59051b4d9ed791a3a4210c01017d0457cb03

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\df0d0984d439371960407f90ea85fb0ccfd3c500d5bb9a55eb375305d2a3b0e3

MD5 01c01e5d8fd9f99924231d3ecde18d64
SHA1 6f8869be6cb55abad83adb72032dba3c05d80ca6
SHA256 a8851a88336b4fa306147f7f8cae11faaf679d22d0c94f7200d2769d1f3596ad
SHA512 02aca71ab6dcdc48b6e6ab2b9f5f1a58687e4e34c45cd88c64f268a0025289136876b02c44ca016dfafc3c4df261db03793f1ee774cb2ed08131d5d428f0cf73

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\ce0222c0324bc62ceb247617c17a7c6f85e1da487c4aa24e5743c587e0d7c741

MD5 5e04141f01dfc7e72b07332b822c4d81
SHA1 790096e34ff42140275753920f02b7cbcfbd5144
SHA256 9d51d557c7a7ce940dfc3727e4a3300b1ff4fee9a9cb7ea6338a1fcb1b3ecd4b
SHA512 efbb6abd91e6610ab7b97c43c2f765b11283f12274d42a6124890f87aac46a782c3c85217349c30e727bcb4097d297f59809aecd6f586a92e912f6708231219f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\9511e5e0a9d328dc1aceabc9e9eef27035aa872d65a5e2a1f519204e75e017e6

MD5 a31da91f14346522346d55ec13539df6
SHA1 d0b94241441b32f20086a3d9f757f3942505122f
SHA256 80fac0ca7c7847aecd83ea689d4935bf6ed899cc86936727d9f275b6098f07cf
SHA512 d8f7e9528558d3057b38f4fda2868dd59d744440d4cc458b33c5f2bfafce4ac9fbe92110f8848c689dbd6e19e8fab5aeabcc3ea4565f2618032b692eecc0d1d8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\74a3fd35b829e52e6ca53adb996dd9ebc370f7d1d5f6ad09308d8fbfac3ef454

MD5 23204041e34cebc3dfb6727d73669fbc
SHA1 5b3fa257484dd866d01005f7e202069d1fede3dc
SHA256 82d41331f06732620466adfb237bd23a7b16ca26d35609795fa3a92d4f22561d
SHA512 28f68d4b9d293cf14ba47f35cd1ee637e4e594b1be25b7fda57b884b888246e3d61dfca6e3aaf899be3229c909a95bf4781b6f68c57211d485e5c283dbf57d79

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\70ff3d4a131ad5bd7be00ef0175c91a5db687ae5ad4c96d06a69d2085a72ec4c

MD5 0b0633b690934f607fc6750b17557a03
SHA1 ea3c02f3f6f6bf9fb5ca4a46483edda0a2fa0ca4
SHA256 f6610c2c7648e3c3615fac42e7f5f8519b82d52ca5c6fa9d95b105b2cafe9ff1
SHA512 b1ca922d9d4b214b7cbf469dbf483d3958905a393a747b8526d80f4a00eda68b8c331006e67e99c2a3b4467262d31d43ffbd534d90b7de4789b8229d04188830

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\6694292562b8278f722fccadbe11f33bd66a4e3eb075a2783d9a5c5736738099

MD5 2659a344644c1fce2d306346a4471656
SHA1 5cc6b3361634e57229b6903a71261f77ed655246
SHA256 aa493e5c92a85dd61c4456b31b8bd98bb90022f775ed24c82fdfbe784bc74111
SHA512 ecb749b78f3523589a2e1d4e8276bb348d83ba57595fbf03ab849fd7392d72facf51ff6b7fbe3b7db80b439dd60e2264d1e20887cf677478a5b795e697455f75

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\653cc8ceab0512ee708f220e332011c37586cb12371c91665b3e16828b9347df

MD5 5daf68e1ac84e186f186f08b1deedd30
SHA1 d7543d4731215aa4a37f4a5665019718b40b8a32
SHA256 81e6b29f4fdb5bd3650ad7695899167ccb9b3108bfd00ffa668878985e2fb3f3
SHA512 903c91d00601917f9f5cef3fcf32eba5edf075b6fd8119ca930f7734bb170d4d2f92b4d9bbe4aac99c2b92a43b09c6fa7bca229666524a08b9f8f73317dc6809

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\62ed629118760e70f96e55878c0e4e1186c3e7867862a5f6570f359937a5969e

MD5 6e3d262f374cda351a496774ee6e1593
SHA1 46a4811c681b381987d7174ad2c8c98f3684e0b0
SHA256 9622128db6d50dcfef7e1f7118e9e7987b24213979d59e43d114aa3bc38cce3d
SHA512 4606a1579c4f556dba22cd84d84bf3f5839713f9ffafa25f92842d4c1fdbcfc5299c47348c04693010239fc764f272f7b56b6eba9f52a40b05f1954d87280b1f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\4d37196bc735aaeee1b7479ffd7be02fd8efaaa4175d538e592c451486a1643c

MD5 a8bed2495f3622853b985892a1cc5bc1
SHA1 e4ea9fb63196e392e30b1057b89d1e45cf2cc0e3
SHA256 ef90e0f733fbd90d559cbf14c5c7b895d45e5c1a1d03d2ed8598b0abfb30f655
SHA512 b1f82f40dd8f22d523f9c5dc9d61e67f4d325c90cf584ae0a3876849ceda88d6be41d678e807028424f51a10c09640067500aca46dff51bf86ee69bffc645a85

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\3783e7d9aee4122ca0a40a8f1a32a54ec18e6f61ac6fe1ddb07b3a4d2bb898aa

MD5 c67191d208b13f5188b84d74d3251692
SHA1 275b727720253df9aa81dbe5b9560dc3f3df12b4
SHA256 a98904533326c0fd752376f41bbd441cd60d4ee050e8d11d0304282a07f36638
SHA512 b6c6e305452ac302ed31e848a818593ba70ed023a91941fee3e199991a05f9878e101363ab3fd10e929fa1e87d5478f11ac48ef8adaec4438dadcd7e5ffbbb9d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\325a71c6fbdfebe3ef3567f8771d3b68d6dc89de7e1747b3450b45986e269ce3

MD5 938c22bb840906a752ac8a1ac24772a4
SHA1 682886d9fdf1078d29204628823064b101cb48a2
SHA256 6e2dcfcdb9d0aa16ce86b6ef7abf47f7f874e7657adc8555a1b78d20e5235110
SHA512 ac61e1f649ac4fc2cfb53d553b94faf1919d841a2cbaa801e38c0421f72f06617c7408f08a047dc08cbaa5a7e2365ea06f78a63ec6047f3285f68bea03c55952

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\2b6ce3bfb2d3298c3335f5b0922cfdf408ed43bd685ed194ce8dbc9f50339e97

MD5 3c4c52a0a966dbdb2a298785fbd936bc
SHA1 6c19a6ae79c91fb8e86656f18b3e704025ac6fcf
SHA256 d953f5e31a5d7c8516262c503c04cf2f1a6a7ca368b55b732ba5c1ad78b0322a
SHA512 4fe3022f74741fcaf1d0d7d5c9b7ad1cf6ae8db3c6ff36aa7b76bcea8692978e47cc24243a9deb84bea6baef6c82ed4bfd3d2cb7651e31eae72eb7891b7f2c93

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\0b0bdc09a3fce772294a1c6509ac49db63ac1b077be715fb59d5ebdfe28edccc

MD5 75ac7dc832db0755db2e2aa6715cdc73
SHA1 08e602203c82e95c811dca1a0b380fe741cbf4d7
SHA256 0d949be55653930c4d38c66811857856fef3a1712e52662f4329f77a205b3981
SHA512 716eb80069c18abc776f728852da46937082639fb4c95b4101eb02bb90bb18b39fc15b25ea8823aa82992925c6a6f00d99ff31568b9564fa7e26c6b77be0408e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\0672fc01f47fd098c05ed542f2c2812a4116261b5fe589fbdc9ed84c76f517c1

MD5 ba28cc71082575f91c7d4e109cb9bfa1
SHA1 37c6f4122736f1c44a3e19fb963838d6ed7f64f9
SHA256 a80eebba2b347cd66db7922413e19fa69cb8d36c225bfed8b559f8ce3493fe51
SHA512 fc780240c493002cc233db46340149a38a02c1f5367eaba9026b95354842a0a0e0d1a910c3a1ac13c14d3a495d7191e06348b03e886d1a7942e3b8bc15129324

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\02d10d8f3b2550b1ef1c26446560bb701c8a38270558a230195db09392dbb207

MD5 b8eb2f1f88f8827b5284080a44cacc1c
SHA1 2adbb92bd0e205f6272b67fe23ea4c27a93af10f
SHA256 90eb2669a6a17fc488bfd3a67fa171a59bfb635645d287558f1f45b1587e9af8
SHA512 7a1c7d30f8330891025601ecf887a73e360e57095a7d242b84a9ce3b8880aac9e87b8823e27f46cf1fa621f7d6c1c8912b6252e2927220faf8663d90bb60b83b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\imprbeacons.dat

MD5 2959c3e53adff926f927795907db1a13
SHA1 06afbd8bfe0b4510ea4f61e5a299180f47cc9d73
SHA256 ba9cc53c530a3df67810a2e3daf5f16e4a0acb6c15b1de07755a0ba9bfc8c3de
SHA512 a46900ab965636e053d33fe4f7d26de2f2835727f6444604066d06dc7e2c9218fbdfc7ec55e0f23b1e82aa77e995e1bcabc36e6ab915632c450db385e1955a05

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\eventbeacons.dat

MD5 92f6209667811931fab702c9f1f221f7
SHA1 bd69e4724a0d0df91c42f2d90e3c0fbda808d11c
SHA256 bf667a74669e5c8eb361df3a9bf30358a299e75ad7603eda1d61962826ec3e42
SHA512 2a3a18d9f56cb391abaa314a389447e7809636542d87e718c055cf657b326caa41488884f87daa5805c4947c5642036640426a8a56cd48241d51fc75487fc3ee

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\1728292751

MD5 b33848aeacd889ee24f3b2c2ea3e200f
SHA1 460ba1fa8fb5a4b46b940b721f0867a53022ca5d
SHA256 06f9bd400c98cea6d245accf9b81ecf0bbc9429367c29873e3846581cc7b1d30
SHA512 42f3a8b57c1b0aa44e6e0cd1ad9b45b418664b8eec22017636f613b3f9c682195d27a2a0841d927260589b8826788694de5274262bd9b80e44323893a6e12ac1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\280810\1728292751

MD5 6dc2c8bc183f9083e69960f9dc79f33b
SHA1 f18b4467285cdc4bd518c80f82543750ea7a98be
SHA256 159297be838f43e50e6f2cb8ef322adcb3ee6ad10575b28150d8a13aef78ce59
SHA512 30e052f1aadbd53b593b3149a8cb92eb993b144f4c0103bd6d2d6ca899490f288134638df795c095419ed53de7df9b7e78f90a8954566425402043dd5a9e9812

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\280811\1728292752

MD5 1d0a31a65368797ced1b9005b1d55083
SHA1 8617a9ad58c45f085a963eacda4b1071280c5e2f
SHA256 47bb12e0f9464258dc5dba407650a6f7a637f3230238a5e949b792a6d4190268
SHA512 7f6619ca13505b00c77197f5e46749ee7f72c48a60622a7cd266e0a0de86c57fe25cb12ea6dd2e235db4b76e3e951d40f17bc3321deadc4f8ab97a3bd154d740

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\280815\1728296026

MD5 a20bbd13de56dcbd55cb0dbe26f954c7
SHA1 8e32d6447d82157c06528c7085eb92f8f59af1e0
SHA256 ea3f62837b0fb4880429f2bed780bfa9b8f4b94aa2b472117968ea2875385708
SHA512 52c55c329eeb21c8ff459e32bd885fc5a8db4b20a300b3702183fa9b7c4684157eb4d1ace5bc413e4928aa659ca9366f4ecc2c7aa6616d382a3a4397a60992fd

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\310091\1728293464

MD5 999f27a8647f3844fec9a485def9d06c
SHA1 bd01ac9e82eb90e58193f71cd8cf685f3be7f0af
SHA256 3e9498cd336ef784fcdadeaf97694efecd50f710f207fe16a7468efbed31c70d
SHA512 d792588e5453fe3c3c06569029a3a224fa50c037d5752ab1f4bccb972f1357d7443fc5707dd246f747507c14a7c443c7fbd03db43230130720b28a1130b9d50d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\314559\imprbeacons.dat

MD5 3bc3abeacd2972bef8bdaa77c8c43b12
SHA1 9b922db92b0193ae67408513a021a042cfc91972
SHA256 60535c237a9b2e299c941a116b69691feae67eb4efed2e4fb67a3ebed3c920e0
SHA512 7c2696da0cb3b1c37315d5ba3715f9e73a69ac024f22f13071fd6e53f42898607c5a78217f73a6b1372fe76028c4af15d65e04ed7309d21bd1f427571df3b98c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\314559\eventbeacons.dat

MD5 8e61e7123ebb2f795ddac87b4701699b
SHA1 a401f4dfeb6c2b8c606024b724db185b19e87677
SHA256 6c0244cc42aa3d87a5f20f0ba5be6c28f048541f8e59c6efbf5141bdf74098c1
SHA512 0b0e2e178ef63c739fa704c847429d3bb17219e1017326b0a14dd5d9af5765bf44e751df6ab6a7baee2c8b6e4e0ec062af441a46c1ea60251aedc8ecec3b739c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\314559\1728292751

MD5 8b3f57eadb0757b0d43e6c705e4706fe
SHA1 570591e0df10260ae29204c33a0c6c5066636088
SHA256 076bd209dc5d2063cf585fb548efc534d9e61cea5944730dd76865368d5fc693
SHA512 652fac8d5bd656188205442f161e48d07f495c4a34d9b2a7ab14d5c604d95e75bfb0db4d37d1b4228746a72db1e35085c0e87238c7fe9ee63d43a22680bb9fdd

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338387\1728296027

MD5 1e31ce3a9be9300bcee9e4bf7a56bd7e
SHA1 b3d3c66b6ffd373f06bc44b434fdece1c528b23a
SHA256 f7dc5d74eb35a4d6f80c5a57eb81b12fbd18c7eb569b2d39c56a8e3c51f4f798
SHA512 c56e136fba3019d1a8d97192441892efcd99e59e30e569e790eb32906c02ef92e3487d5cc25fcbcc3791bb88d4df460f8dd6d01afc179d7465ccd46308880a12

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat

MD5 31e74be608b02c444b3207fdd1dd252b
SHA1 474a4245937c02d524794ad2069e6f900e323c19
SHA256 e94db37022b4d942f7822f748ee3ac053b9ffd4d79d54843b112d876c6a610bf
SHA512 64eb0e852d6008ea1dfa133af5083657605df4210d7457837bb0ac2d4d4da41e611a7e9c55de29e877817e9965e492ee7a59f92854871df2824d62fc2ad5d7da

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\1728296026

MD5 bb31c46a06e0716a7bc19d18ec447192
SHA1 a8a5bf88fded46c69781ed58440ddd55478bb246
SHA256 310134fb88806fc9c374fedbbd57c86d12f62600c1bd89a47317eaec2d75790d
SHA512 2a1c7a82273c236e38baca5d58f597707570520fa2e3381ccad54daf54426da02d03b60a86844f0b2cbd4ab72ef6cbf34807166d44a7715d8337c0946e8d7ebb

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338389\1728293464

MD5 6fcccce433afc83054d0e53244cea436
SHA1 ea027f3d8ee287bd04886389abd0e5f9b0deaf6e
SHA256 0c1f50817f9162b89415df698f578677fb91749ac4015ebb62b2a6b99c3bbda5
SHA512 f1ab58d22fc956ce13715f1fa72007a623c2389c346958f9af68c1f6498679899050804b81f3e70fb4ad07852a8affcf6ece2db30521216750afa23b34578475

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\353694\1728296026

MD5 baacd983538cbd2e71dbf663b4964594
SHA1 a52726670f44446392bcce599b7696bfb2b567d6
SHA256 454edfc70aa7c50429cdc0d4044568044c20c552c9d41950d8df868638338ba4
SHA512 2c83fea36470dbcc0c0232050d336f911f3f59b6054d02c8a2a16ca8df95efedc351e0046d16d50d5d5ffbfa28b29ada2121363470978abe5a31a67ee99e339f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\353698\1728292753

MD5 161f8fc0b4fb09a32c1122b751b49bc7
SHA1 c1a98ee2b994cc1e416f5bf45bb503cd302298e9
SHA256 21d514c44fc8530b96d8e48069d1cc37d2b50914fded116d1d6e869b96e270e4
SHA512 64752aebced5cea67c7675605f2ec04bff4a2ccec2012703e5d5d87628ac2cea5e1326d8c1dfa35ffc20cb48c98bbca571de3f1708d51d5c58c34d25fd9a4f9c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000045\1728296057

MD5 6e345b934aceef022d67214b4f68e138
SHA1 1fe3695c47951e2c0e9fc095f1d5c6eaad723283
SHA256 3f6766aa191f93dd950eeafdfb2547b64d1b52c42ddb81923bc2ca9d6d116658
SHA512 13fa222b77465f95fed9117847ade3fc02f524f7744f2c7879e241b23fe7763f7f6af06c4cda399b1391deaf91349e366fc654ff9e15acac287e67109920a0c1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000161\1728292754

MD5 a6a4a8bcc66d0bebc30c763247b40795
SHA1 0f7c64dd0642d993a7a85dc398659227e5ba974b
SHA256 b3d5ef39ac7960bc48c6d47028e3675eff41a31aa286143ca1e896e33c9bb0d3
SHA512 04c536e4f629cc529176bca60651e04ac5377a5ce5931244f68f7d6b4f43dcf8547d2bdbb45fdbc25cb7a081e44ac7ef2748dfbe69b80848494fa7f334e5cc50

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000163\1728292754

MD5 72897d18a5f590c55d85165722c154f0
SHA1 7059bc70f3b29e5d9ddce2440155be91c234c5c4
SHA256 ac29edfa7048c1005a2e1c309e8475a6926b655488732e9bfcec8965554cebb7
SHA512 20006deab0cbfd19a4edf9df6369cb18571a638d4b921120b4e2d87e3fb5b541d63c4f7040deab305a982e4bf30cc1c675e502ce62faa0c42f0219a04abdb34e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000165\1728292754

MD5 b4544537db30ab208a8a3a6ff4c7751e
SHA1 a2ce12830b915904879c004c78182dbc954ac4da
SHA256 fd9cfb57cbe0f62e980b5c14a9aa8976fc12f42c1ec980e9f8dce0fca27156d6
SHA512 11266ef7860a8cd9ad22551c84f1f174f86a62fa516cef92fe4239910be4513a2041038a8f59422b1154024519054c9fc4b36516454eae9b9f97a2042a624547

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\202914\ccf773a3dab34ebfb08a04f00a17266d_1

MD5 6d6b96a447ef2ab100f98376a95cf883
SHA1 de1bd72b721b5b812babdf3d1f4c364ee8cb2bc2
SHA256 61386000aeca2cc496da1f00ff161e0ff9ba3058f953e0e0d16d4ae3614799c1
SHA512 3b1d58c48ecead6e9c12dd9692560682f8d3a2cb536a22e09686ff12308ac920b6e81048db5170075ee6a323c424e486fbe79e42f61ce8c8fd2d51185399ce19

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\868ea89dff3c4ffc8dea8de503191ed9_1

MD5 83bfa85636959548f0ba4cdc4c8693f1
SHA1 b51ce06e4c837a42c531e7b6883900a885712d16
SHA256 91321fd35827a345775aa97a1adef6d0e63fceee4abc612043eeb9f1e27253aa
SHA512 4c5b8029a244ab31a5c6600953b1a54227c066d64ee3ae69614b7076f51940ba70b1efdb0e4a7eb498ad62c165e672b95ca1cdf9422acd9261fb4a5bb0b2258c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811\96d3ce75ce754df9b16aab05bc14760f_1

MD5 a57a55adb694c3c4f890abb6b5e8c139
SHA1 c4984f187a8f2216ecd7698860680bd10eacc6ab
SHA256 57d6948f517b7071a0ea18d6ad2feb892cca09f7e6a9f200ec120482a716d650
SHA512 a2352877247ececea9456e4d23fe381a267f41a52256275dc540946c2301761269f9ecea9468fdcba9ddec897b2fa390edd2f4d6de2eaeeb274323403ed7c8f5

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\310091\348d27a44345407dbde04d04451073d9_1

MD5 3bfc6b960c2b15b44abdab1ee3b3414c
SHA1 9acc6c25e56d7d26a241159b75d912167bf4f3e2
SHA256 7972c2473c6d5f537cf7c338ab3fe8dc674e374959e1f0d31a0f64c886c5375e
SHA512 cc6f939b5c60cf625c06ffe43493a5c5640e551b716a47bf8e4fd3cb6c14685dae827626be1ee38fd524147cdc1dbce92a6f759d594fab0666cdd26ca6470497

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\314559\7289161fcae743c0b3f264ac532c3612_1

MD5 effb00e68adb8826542fa3b1858cf4d3
SHA1 732147d8f9a9f2c2f98647fcb71ffb8bb0df6954
SHA256 d9f73d1f0ec977a6c3c2cd8a3c1723526eca46ca4c40dfc76dda627acbd8303b
SHA512 360b97770fc75b57c58573a9e333c1e442c6d3afaa05a9dbf4d16a363a1739a02baf21490f54fc14cdc64dd87e348b709f63554bf9e2725f08f06091aab8e768

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338387\d38396a5eafe4448ba088bfa6c38e438_1

MD5 60ab642e02191bfd1a45074cf9ec00de
SHA1 77c3cb5ef10285057abe39b74477fa93ac2ff791
SHA256 5bd74e4675964418a675419fd519bb820cf60e8c076f09c2c3a28cb3345a78be
SHA512 58fcaf9da271504c6bd871276d2a9636011332380a1df307b2bee411783e57cd0e133c2ff9cf1515fd772bb514db91d2d954e0cd654f343496f220c295e90a19

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338387\68453a17fa6449679ba109e45327513a_1

MD5 9c0d9b1d31a9d633f4c01cca739712ea
SHA1 eebfcc058225792837807ba2aed8927b4eaf622d
SHA256 ccd5a5adc688a71acff1a08badfe559f5cf5e1ae31210493ec73d275d075d3b0
SHA512 1c24cd10afab392a3dfafabf190e00675107c7075eeef0a603528dc3d4fa59335eaa758f190ab93d98080b2a25714d766f999aa2ad2003610d6e07efca56e690

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338387\4a08e6ba5de84e9b863bec6c723f4638_1

MD5 26a84670e1cb144da4787d33b2d15caf
SHA1 55e98e0181571b94261efe9f13688222d01099f2
SHA256 9cd27c52ee32d2621b909b91fbb6d6232f2dfac24339fced6144de868044a5db
SHA512 5003ce491f3deca384c518226ce1733d07a4604e9d6ff5ffb97986387a2134daaa05f862a991417e1c94d1909503bbedca0c053e4c3a3dd85e77ccc0da4ecf6b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338388\30539eea934c4b9b882f03c4f0602e97_1

MD5 2865a636e6fdf87c77f039b6eb9c4773
SHA1 36c2e48cd0cabdcee9944738c8b033731df4e895
SHA256 c1dafe81892c85bfd3284a6b106f180be77bd56ce6eed4434dd9acca6262435e
SHA512 40337aa330f039e775e8667af5e695481afa5de7c2c8fb00bc2dd789013d0122da4c4192e5e9d4cd6cd0a6a4a9d611e16836cc4772bafaa3e84245753b994b17

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338389\88b909df087745f8b94333694270a92d_1

MD5 e638f2eedf10621c9723b5a8f173df1d
SHA1 bf9644cc14b4d01a95b12ea8dba0770400d6a99b
SHA256 fd1d70053fd1c08be71b52cc56869f814abf4041f1a0e22b5143bda9bae1269a
SHA512 874a45ece0ac4a64c3e683c8e1ab4987e6c63a93fae9448eec18257fc8287b014fc5e65503b8077ccfb02980dc6ead32e87c10fbe357d8d36879d81f938dba57

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\353698\aff92dbad3ef4eeb93557955cf341b75_1

MD5 d9db4d00143d176b9edb878a04d1c99d
SHA1 b8ccad7481e51a04b6628570b4f9a4168f9301b3
SHA256 af0272561c52414dacd6ec1d6861b37e716bbf43a7644fc8f0d2703a233a4351
SHA512 46cc7c348fc780b3f0abef5d7867626842acee28955d98a46e2a20a8f837003d0963afb99448b20314de0326d325e7a848e5153870304f9f0c3d415422605845

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000045\d0141d8a8ef34952a0142ae89552835f_1

MD5 73ac6df43ba2ae5c7712b35e087b0423
SHA1 cf1d08cb7091edcd3df7ebf70b1f7d95e6deb64e
SHA256 0b2255cc406722da683d371fd3dc70fff2f1cc5741072f6945f3864a01437413
SHA512 cff1378eaf9efb5d99a8e92e157ddad5fca371c1dc17561db1edda389ca3c5226867efcdcea9884776157ec70462f4576a06720760ee7b89f9301a7a03bd1fa4

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\e4d7f7ffee3f43d0bd87e31444827186_1

MD5 c6e6cf48baa6f1bf937d8949be1443f0
SHA1 350d2258b1abc0ce72cb4f1853fe4ccfb324e703
SHA256 117396fc9d5a9ee82ac1ee05c2c9c0421d974266e7bcd66171da8db4254076cd
SHA512 814d9bc374b43a3f12ca867b3baf91ab43b1081c3005f4845a00900bcdb95ef3e41e7dc502347ae0c419cb56e2ab0206f4bf54b84a3497f2b0355c8486ffc2a3

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\96b15750618340c9adcf741e33d00d3d_1

MD5 1bf8d409afb405e21803639759429ca1
SHA1 7a876e93610b327bea219869deb19d7960213d08
SHA256 9da66b290c9fee524e588ad26a776f4e36172702cb9db92837a3defc43ed7dea
SHA512 9e66bdc63848e95846c3e9bc0073a3b4f5bc2f634d13963910c5a875e1028aafa96dedb2ae58279fed4ca4c7d8e68fe1ba32614aa72d0ee7e09ed3c866431f12

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\dcbf03e00ca841b0a13c4d453ff4c842_1

MD5 8c79ce9b89015699d95d088123f97c0d
SHA1 c273df8a305c11092a99994635cae50bc8fb9415
SHA256 4ab07c0bac9add10a922a24fc9207fda969afffe12ebc5353d43c21fc67e4692
SHA512 7c59e799e09924e8f1f6ad7cc1d2abda7f0e6b88345f01a62b4a0600231514971a9eb5e2b24b52435da10b31a0b07b2e390b28b5311b4ade61c3cb334d54ae92

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings-0.dat

MD5 3154ffe098b751a09218a5a805bdfdb0
SHA1 6c3fbec53ea4fadd0c4081c7193d74012ff096ea
SHA256 87a910cd49423f87552c843bba32b4701de3cdf0afeaff493df29ae855e9bdfd
SHA512 4aa40e09d2b548db40075a3424204adfee124e369fb208e1a893de932594b4b794aa81c98a08176933981b803c1b5461478c214a8b0b0b2de4a7d89a7885dde3

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\Settings\settings.dat

MD5 495fff4b6088705f221884b93558e1e5
SHA1 2fd941bcfb3201dfbf2f519a6f85fed4214d25a2
SHA256 5cae540532c5248099fbfbc5407931115fafbbaa538a6974be03cb0f56f7a97a
SHA512 93285af8f5f9994a928bf870a91f6daee9f2bbf2f425a53958bd256ee46d8e66e12916bd705ce3ea4cd2a0f60f9e1cd72b233f70001fe058c77e2ae59d6a5953

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\Settings\settings.dat

MD5 1d897a60929bec77a3636b339e97f907
SHA1 8e12ba0a9c840c4c6572561cd89019f60b4a668d
SHA256 2b47c98de7fde487ff035af428e3e73b65b0de9dd269afbec2bd8e6fafcb57eb
SHA512 b885568af05f94a68b89018b5b26da063baba7d4d0ac96902e4e523ef76a5a9541b9c21c897cc702d354759d8a9f4337fe41dc9c1ea7a1b7b61efce8526dd8a4

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Adobe_Acrobat Reader DC_Reader_AcroRd32_exe

MD5 9a56ade8534e9d83c3e8e49b023544c2
SHA1 938ca452eed1ec09b515e915579791e7269dd312
SHA256 8dc2ea05a2a6b583f7c86394c76ec16994c05cc6068fe3368d824bb351670d6e
SHA512 9e7fce44a3ce54385c7b21e8d2ca274c335b29f3d25f043b2b0842ef8917c24e8f50677586fc0f0f973bebc74fc6ac15edc70e3601a4e86109f44ce24e3ddc68

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Windows NT_Accessories_wordpad_exe

MD5 309ecc1be4c82f8f37d11be3f08f8091
SHA1 dfcdac75dfd12c3a3829472e37fd01daabbbb0eb
SHA256 99e3f8231733b8e4d7751b9175a27f0952d2480065bbf710666920afb83bf575
SHA512 3d5d7753a2d25b329f7ca10a6b5ace805ac0e79bb02f43703aed74cf69959458e28922c7433c5fda64c389cfc43704e94ccb77f9506d91bca8727f376ab4ed9a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Common Files_Microsoft Shared_Ink_mip_exe

MD5 988d8f7a55d7a70d764dfa515a4ec6cd
SHA1 0935b33593ae55a70833624fbb1edd7208391ff7
SHA256 db1ddddf683c53435b987f49f5f5b3262899451c634298bafb3a0b122ceaa62a
SHA512 3ea0e33b836e1cd0b8d034f1e4d31cfbccad59332cdfd0cfbf08005c32204ff930c5578350fd1ac111f109b1ae38d3621394227cbb1da11d64af4e46735789c8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WF_msc

MD5 92e39e4bd3e216cf76a2cf3d93c53fdb
SHA1 6b3315770d169c632712e5bfa002610c3917d99c
SHA256 be2529bc70fad82f5a753a3c4083d9ae5361c1e95a2c5fce51df6feb442de615
SHA512 ed9c3732a6f54efba8313ca533eaf6e9a5eac80977ac8028452fbfcb1429e46de192ab2afcf7f1d3bb1f0a1a8f31f00782424059d82022f660bc44fe133e3b6c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WFS_exe

MD5 0d19bea6f0b22383fff2d13e0e6ff0a2
SHA1 416f9bd9d2f0deacc06490fbefe77a6ffc2064a9
SHA256 da3cc596513ca5729f367af635df99081509cf5dcf9f5744090c7cd9fa8e0243
SHA512 e9ee700a8b17396239bc5ea79f384c80e34c7412f5877e4b6214e6748ea291341599880aa5338a9e68a3ab86f2f5263b08193a543be72372eb01da0432ae3308

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_SnippingTool_exe

MD5 9b55b8a492df2ce8fb6e9b0565dbcdcc
SHA1 b52570ebb2a3c3aa8cc3ffc6ad0955078abd5235
SHA256 e73573d120f91a45563e277015e3ca72f05ff1b18976df5c81bd490805020f25
SHA512 a8fb3c061f4b6fd17167cd8ed9f92b34b90e826b6dfc036db33c72f960052e20c4cc0fbef3988032ebc30449aa310149e81187bb7e6ff87f6249202f2652cc5e

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_RecoveryDrive_exe

MD5 295e1773200faaaf90fde45e9756fadd
SHA1 8a2c49076f59739c7e69f19852d4ea0a772af2a3
SHA256 f795251afd7834282ad149d10bebf7dceea04ba56a960b7b9e3899e4287f1385
SHA512 f0cd5d2e0b82d40c7256b4560e461b3eefa73fe51ac6679f29928faab673276ba12190dcaa404b89664bdb38e4da04c968e1db694410c9fb68d5234b58278d14

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_psr_exe

MD5 7794df1f7ea502f8b5a7afe7458dcbd4
SHA1 179f413597c837600e87609de63ae9112e3e7199
SHA256 75f6713e1ae6f0caa52d0b3957114d7653e2e002b33e1c6b173f6a584ead94e4
SHA512 2a77656d9201c8684315c1fe8693fee206b13d072fd4164491b7a4c5fc46a3ba78216200c48b044bad221c27423394529173f8d84a5a38da7343231d0f7d9fbc

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_printmanagement_msc

MD5 7279e4431c96c1030f6ccefb5fce7cf3
SHA1 e6d0c93d63c00d14e2f40f5fdbf6c3fdc3487442
SHA256 64472af7e48d716d113b1c8a8241eaa67737b21e29abd62b4a0bfb485363ae3a
SHA512 db7febd66f65a486b1b77f13d8b32787c9d04e2b07003cd0dc90f4531afe70132ed9f165ab55c012b60857bd4e6f8fe2e78f7ff132bf64a95159d7138e5df53d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_notepad_exe

MD5 7689c30d53af0dc638a76cdac2b6755c
SHA1 ee74ae57c6c4867783c282b46cce4aaee6fcd5c3
SHA256 a05bcdcfa0fdc148fc7eadaa891e11d3646b84b04f793782b7257edd77015e35
SHA512 6840a48e5725501b37455f650cabffc17086453b6d70f943ff379f2b5b1ff9d1a72da8dd27083c082c3abcaaca3cbcb36da2c7005d08811cf94b45e88392f38b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_mspaint_exe

MD5 4f0414c4ef966619b5cf9b740c9f1096
SHA1 d136f140bb9aa3d3d9b5aa5dcb413d78b93c71fe
SHA256 bfedb922c2dd20626051ac2dea4f06021eb0a51ed53d901bb7fdc3c27b0c9cc2
SHA512 bb094fd2695d2ad8f0e1f5ea5652dcf1e377adeb597cc84836aed75685689aa14f622632575bfb59a37ab86610f0595b3897adc6db7278dc141e4ef9495deb38

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_magnify_exe

MD5 b6d02c4538adb8fe15abd21523d0d90e
SHA1 35b80eff6b36fbc7bbafea8eac74344b50a6d21b
SHA256 82ab088934a98b069c24314ed6956ee4243622204adf97c220a84ddfcd8a367c
SHA512 9e85d6079b4d8f840e4cc4922736322519af20415efb0185ecfb2ea8b7e6eaf7b75d83407411de63a89003ad3ec12f14323514ea6414f23b695e461456d93f4c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_iscsicpl_exe

MD5 a89988784e4640ac2ec71f90ce85b825
SHA1 9e22ce33b9c1fbe81690d7d7b315ce815e72994b
SHA256 679f4056018986fc3f9329155cd3a826ef7bc664bd7cb6dec0ae07a7818ce57a
SHA512 9b82109d2fe226f99d2919672734ca8dfca74b3bc2032b406519ae96e37d33a6ef77be655ae0ba5c54036e3ae3510efe767e5881b17e85b04292b1558387a919

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_dfrgui_exe

MD5 f4ebff482100da28a335dd2ee22e4a32
SHA1 bbe5f2c752b40641d02cbb43d5c0fb9c53889414
SHA256 802308e769a49d907538c5fa0e974313fb6e3bf29cfc8c6d1d69dddd8cd124af
SHA512 86147c1a98cde8389145059666a7d241035f69558183d21f2d069a2f973de96125d5b3f3985732d47e556c09dd0d0acb75447293700e9b45feb798e145c5add1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\windows_immersivecontrolpanel_cw5n1h2txyewy!microsoft_windows_immersivecontrolpanel

MD5 744a0320026eb91c3f475b4ceb3a39a9
SHA1 65f61bf6a7e5094f68656494a59553c1c64123da
SHA256 b003c371a0dc78f40822f9959e084ad23cbb605dc362f04fff880459bde1b63e
SHA512 1e961b5c1d77c81ec0f326608a1e12511a4a0041a458b4551c17859b3afb83d98ca3c84cd8ff771684a6747f6df2ac82fe5851132034c1c42c8bd1029f4734ba

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\MSEdge

MD5 5998c2059f49770bd20c81c12805b08f
SHA1 c85963f4c05b4ea9a18cdf054abde21385320ebe
SHA256 c325f613d9e1f9e9df1d0bd7db8a3c59f7884d91bd4fa2078cf0509969c8d918
SHA512 814f3a603bedbab272e942040390b285e559662cd94a52a91003ffaa2f5b7d6e4d224e37da9bb755484c659fda9f6c59c0c84fe10892d7df207185598219067a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_MediaPlayer32

MD5 e1aa86a6110404c34e05c063601112ad
SHA1 0680868aee468fce12215d90684c4c7cf7769b34
SHA256 af63b4e541130d09289a3c6852de203f2723792bab7464559459a732d553f8bd
SHA512 fce875b8ab57ae028c3bdd3adc645075babb7244a9c3338abf2ce871e56722c895610ed2001c1c84de34c2837616ba3664839e0985f42ff164b1549e909c07c0

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Computer

MD5 4c670dd3a6599f46a4ff55714879c8db
SHA1 597568545fa7351902945f00b3ec7345cac5eef3
SHA256 e7a88dd960478a49eebaa28e6ac7112baa092f75f4a690f340efbbc603f9e1ce
SHA512 f0ad5a1bd4da935e649daff6b922db25967c14057461d5846820f59b200c8f0686137e4322bcada71ebbc425f49a495f5d109e943a4545331ce05e5896031a9f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_AdministrativeTools

MD5 c0ad9bd2329a9ca3c3e34331be950627
SHA1 b98dd9f8706ea9beca0ccac1f4f20b21d20ac8da
SHA256 26eb5fc9002181cb1194126e53f74fd0271bd952716200c790b6c14a99d25dae
SHA512 21ffd65dd7d163b4751eb087e978462b4034c59db98e938bb11df308c5d6f95a5b7fabc04b22ac3cfc213e4c13f63510e5163bfcd165d91bea92b5971280eeb1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_SkyDrive_Desktop

MD5 2761c23f5ae53a3c1c54e2c5a3b3ec37
SHA1 0e8fde1afc62358f737b68d1a6a822f15453e4b1
SHA256 8d0c72c48a9c3d67ee4a4747d62fd38d90899a7bf57102a11ed36e90a19241e4
SHA512 677ccb7215510fd200275108420451967ae724d00a3e4eac048f48c3663aa34bb8d2c30968eb1b2ce1296d2becf0211341a8135a591ecc7a612b5b2b03c17049

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_WINWORD_EXE_15

MD5 a03a0988894c00b0079df02367d9825b
SHA1 e7c6203741bc7b729f4ea6b7aa0afac1fcaec277
SHA256 6f37c8f98b70b89c2cc380d0aa38b0262921202d0ee63561f57a3304575236bd
SHA512 692a6dd4619f7e05c06480d7a65fbec407a31d30087ee89efe8eda8e8a578e7a285f51af58ddd9e2c1629b9b9b32c57c8031457587b3c9a7088e21b03ece1b35

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_POWERPNT_EXE_15

MD5 c314b7443a535d4b39b28c6a2d246ef5
SHA1 b7688df267a8304d3f1f6afdbcddbf96a5e86fcd
SHA256 288834f082fb5ca0868a7b8fd3f645c883841d612731771df1c9490d99af76ad
SHA512 ca3ac5def4b819cbc0cb770a2e0b482e3ad5753f167b2741e7e31c20ab7236559695297b9dd5d8088ac2f1b3886a7e644166c4fab29dd63c60a906abc547f422

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_ONENOTE_EXE_15

MD5 47c378bdc07ccd57b6e51d03085d0a09
SHA1 5e0bcae2ef2a557ef7b7feb11c032e567347c9e9
SHA256 c8306e51b61f5b4d819bee37f60258378b9605c6787f55cbed76c676bed66322
SHA512 1425b348c230aa7818d08049b57228a27bc591fbbb1a107f153eefc3e313ad12cd3ec3efab0b314795ddf00586a821e98eb042db68d3862ea2cf800a0cadb77a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OneNote_8wekyb3d8bbwe!microsoft_onenoteim

MD5 32644dead987d55a288127fe92b48f4c
SHA1 9db700bb30fc8d8bb2c03c69cb456e71b92a09f6
SHA256 81625c9854e2bca824e70cc8a98b3c8c8010dd9920983563dce3039aa85c222c
SHA512 8adaca6a7bcaaa53fe14d31303077d2d947151015e9d6e49e17c6a64fa5a378de461f0ac5a405a16db4559c1149845825fff37cd5a0123752b38b4d3fe0fd0d4

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSOUC_EXE_15

MD5 943dc823b68d13170c037022cf94d95c
SHA1 0e39464d007f8c35667277d3fa42f297a5d75820
SHA256 ee75215cb2025b29a28bd6ba4d363924ea305eceee5cb9c9afe68dd97c7b0415
SHA512 4ae351553521d41e844f6de549f1c7a6dd3eb544b50976913cdea58edd3e3b8cb81d21b2461258c3af1c65815ccdad407ae193d220656a44c6f4d4f21200eaa1

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_EXCEL_EXE_15

MD5 2c3d8b38f4706d2bd623310de468a21b
SHA1 43aa3a23be9e599c8df874b631e2291fa0fd5e25
SHA256 eb7c131073394f7824cd2152e9ef1f87bfa7feb09097af42d7a882b3ad7b7ac3
SHA512 45fa14f771adb80eaac8d0bc02e70d9e9e453d27238698c7953de7434c4a182eadad6e7fc908de4e5babd487f9dc917fa3ba67ca599c5889804d948da7fd1fd8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_InternetExplorer_Default

MD5 3f7a4b60eace07c59ca0c9072fe1a711
SHA1 06758e981f2efafb5822873d36b218e40cd7ee94
SHA256 8fdc9fdd3adfe90a6bf4765c9b614b7072ece2bfba319d09b8e437b33a59fc4f
SHA512 1227e79685832d7b850677170bf4e04c895776d05628030267d3d659b675ce85adbe2dd7e2423ba46969264903dd74d4a243b9747e8b07031b11cf7f4a9785fa

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{DAA168DE-4306-C8BC-8C11-B596240BDDED}

MD5 855718d0bd86e35b1d42ceabdcfc61b3
SHA1 2a6698c8231e2fa27f93fd5141a252a4b06251b1
SHA256 78c940de004462f42d6bd01aaa33cd73f2c3b06652730c385f1f9c4760ac9537
SHA512 bea1a7ac95e76b120c65bce325d87c27d385f992c6b95def100ba50fc4e7eaf13c61c10bd95231046885a17afa1aba3fc4158d095360caa46412ae8b136288b8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C1C6F8AC-40A3-0F5C-146F-65A9DC70BBB4}

MD5 2e455b88290024ba91a90deb1f194a19
SHA1 d17027449bffef8c398ff1ffd8fbf078171805ea
SHA256 65afc3f47f89f404bb847eca3c445bcbb15af5fe0905fc050fcb6b6d2f6d00cc
SHA512 1cea9d5922894fe900df5b186af735997cdc2132ccdce5690681f4e55608c5c9dbfd5b072c81453ac7456df7fe6577f55e5f86900363fd3acfafa78dbcd6ac5f

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BD3F924E-55FB-A1BA-9DE6-B50F9F2460AC}

MD5 e799eff0b7816a5587d146f9bb951f1f
SHA1 28f99125424d8e0647ed01a21c378362de181cdb
SHA256 daee10eef8cdad237bee08e5429e529bca3b7a10c1bd76578588108a3a6b272b
SHA512 02ad638295b2a21c3b4367e7f3ef345b81e3ba8c62c61a97ef51b1f102c28b2fd6863f3ca1b3b87051ec95da92c42a8bfcd4e0adf18cebd3de0a2c27a388d563

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BB044BFD-25B7-2FAA-22A8-6371A93E0456}

MD5 6ba483c92ecc054466753e522db97936
SHA1 f46a0ed2d9d68a979241974f1588d076f64f68aa
SHA256 25b4c976977835c431d466db710ff3d5861cacc4e77683ec6fd4d5c9d5ae0afd
SHA512 ba9fcc6b649ba53bbead16cc9e47741fbf4abb3d115212b15931d7e759b07a3ddd926042ebc93dc1887dd25dd33044c44bae4fcaf2452217d7d1180b1b269f0b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{923DD477-5846-686B-A659-0FCCD73851A8}

MD5 0705d6835877cf0e3c45fc7427647c75
SHA1 b03330cd06f821600bb0323e7c2277311f065f6f
SHA256 b04759fee392d36cc20a319943c4ddac356cd1fbed6223a4961688689350a84e
SHA512 0faaf02180ef6ea2a8a74ab2be7b72be24eff69e5aecdf97bec838a637e7b3efb85ffed32c2e035b2100615e2711cccbe8afe231ec55a7245d00d6c98329d83c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8ABD94FB-E7D6-84A6-A997-C918EDDE0AE5}

MD5 93a41069c98050e3ea095a2185fddce9
SHA1 92eecf90eb3e8235397bf0574acf0e7405541b26
SHA256 0382664c279fd723231cbef1f76c8592dfa408b3b42dd8f343a21f4e77adc497
SHA512 7a36bcf3ef2c41b5084c36404ce692466934931428f2dcaabb86c2a666cf39b53467161a6d13045eb7a68f31461163d869135aca4c744b9215fbb8891b36fc0d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome

MD5 3f0b6f9c120427797ec49194b7b2684d
SHA1 94b42d47c67f254aed67e13e0fcc3b1dc22763b9
SHA256 c47300de08378a4ab89911e77d5ba068651f04717e85a8d9304be5d9914facae
SHA512 7779115cd1f87e150de121b5af4fccf6ad8acd37443e67649078a53f1cf512a52a737caa2d81d5bd41a20d392f0151de202c609f97328cf748cab2f83875bc23

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\308046B0AF4A39CB;PrivateBrowsingAUMID

MD5 a86b5d0d4a6ecaedaee39c49dc80a3c1
SHA1 0c686e5164d49dc1fe4cf3c990d21c047cf0829e
SHA256 a8dc9ea66e36e8aa0a9620a12228bc62ba39cf632862f67ec825b7594cdb2757
SHA512 a75e786237d02d1ce666a6ef98e66db53ce696f3481ba01f6f311709ae42c299503d5b6c2cfed95c55310d0639f11038f7b0ecfb6d54bfc59045233006c15ed4

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20241007092410.log

MD5 5993b1a672522d8478784baef740b105
SHA1 7afdfe53ff7507c5429ecf867918da3faab9b750
SHA256 876db63d9f865d7b6328e43c53dd6926e7ba45205ea7281819af124b51ca3edb
SHA512 2ab47f049ff539e09bd2903ecb49c1084f7bb5625d455087040b776b161dbe182fb376d6e5e5192f08cb3c49f480f313ecf1440d77a10930ea3479fdd9e28373

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20241007092331_003_windowsdesktop_runtime_6.0.27_win_x64.msi.log

MD5 888fee465fd7707a9118b4929929bdf1
SHA1 0e13bddef6c4a5a30599f400216a9fa359304597
SHA256 6bc0de70a3741489a0a2f3042ba8f9d037742e370794a4fc409187e0c83803ca
SHA512 958a6544bb1999a32e4400ca8df8c76fe1e40650873b580b6c4e99074a23fac62be6f9b1423f4986d56ec1181aeb4371b4b7206a7cbf041c7c42cc454e01c4de

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20241007092331_002_dotnet_host_6.0.27_win_x64.msi.log

MD5 a05f77d77222dbe4ebcbf59c79f0c11d
SHA1 cb1c2ab3ef234035ba2d6437dd8129e0fef4193e
SHA256 240456fbee8c06ea39b78d1eae2ae6039983527af07bc54ea94eedb8d0f8db0a
SHA512 fbc35930ac55fd94684e0c93f3d34ed9f84e3f0e5040d9a357556f07a8a9a6f232f1e1f4a945303f46bc35c70b1815e758653b98aa1d4585b3b0252a14a5d8ab

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20241007092331_001_dotnet_hostfxr_6.0.27_win_x64.msi.log

MD5 86e6e18fe08b801e374baeeef5074e54
SHA1 132d1e1c75353e45b45148fd1aeedbabfd9eaade
SHA256 19e378e604d7764fed796eb901e7e17b0f2436d1b2357b4b27c3c448e3ae208b
SHA512 abd50174480483a2ca978c23ffe8c47ff89929dc4dc586365f0957e9cbaf3774095f8253a614cad74c77f7fe1832541ef31be79b8a789cd8b24ada7cc43f41c5

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20241007092331_000_dotnet_runtime_6.0.27_win_x64.msi.log

MD5 95f0b005e946dad721f5a9139324e953
SHA1 5079f2e8299a55f3b2185631cb6de34345abfc4b
SHA256 8694fbc8429c102ea3e6dc63885fc1d36b77a2a9693600d3243de914f614dca0
SHA512 f781be03a12d92b2360146f393610b817e370c03c97d490a341193733bbacd3b577d9db38851ee6720e25d6c769bab8984b1a34c9e5e39edf841057af7f15abf

C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20241007092331.log

MD5 0d60dfc3581efaa08675159a66300cad
SHA1 1f5961059b1ef99bef0d2653c5f3e9eca90be0da
SHA256 66d151dcb2b9eb661cdbee0efacc8e6c113b7c2c7e9ecc20e45202eaab3d919b
SHA512 5e7a27dbdeb87eafe97b1bb1db3cf589ff1ccf46cfbc212d676dbe7f1b60360173a29472de5469122081256e02fed3e2739e117e73ff718dba8636aef1320e3e

C:\Users\Admin\AppData\Local\Temp\mapping.csv

MD5 d3186aada63877a1fe1c2ed4b2e2b77d
SHA1 f66d9307be6cbbb22941c724d2cf6954b41d7bb0
SHA256 2684d360ec473113d922a2738c5c6f6702975e6ac7ee4023258a12ed26c9fefe
SHA512 c94e8aa368a44f1df9f0318ca266f5a6a9140945d55a579dee2fd10aff3d4704a72a216718b35e44429012d68c2bb30a92d5179fbc9fb4b222456a017d8981c0

C:\Users\Admin\AppData\Local\Temp\LockBit-main (1).zip

MD5 68309717a780fd8b4d1a1680874d3e12
SHA1 4cfe4f5bbd98fa7e966184e647910d675cdbda43
SHA256 707bb3b958fbf4728d8a39b043e8df083e0fce1178dac60c0d984604ec23c881
SHA512 e16de0338b1e1487803d37da66d16bc2f2644138615cbce648ae355f088912a04d1ce128a44797ff8c4dfc53c998058432052746c98c687670e4100194013149

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 7b95083e4f8b89bdf754da4e21f593f1
SHA1 5928baaff6eae60cf01a2248256424350238eb7b
SHA256 ea634151abfdafd63a0949973457e2eef867d39c6e0c6d0d5c66772bca8ac0c8
SHA512 5bed215c7569556d99f66925168ab203928e13bc2db2a20dde92fb399b77622c1a57666c46587b7b0c90533bc4f64f5c2ae155705236b95236d9bfc0f78648c3

C:\Users\Admin\AppData\Local\Temp\jawshtml.html

MD5 b2a4bc176e9f29b0c439ef9a53a62a1a
SHA1 1ae520cbbf7e14af867232784194366b3d1c3f34
SHA256 7b4f72a40bd21934680f085afe8a30bf85acff1a8365af43102025c4ccf52b73
SHA512 e04b85d8d45d43479abbbe34f57265b64d1d325753ec3d2ecadb5f83fa5822b1d999b39571801ca39fa32e4a0a7caab073ccd003007e5b86dac7b1c892a5de3f

C:\Users\Admin\AppData\Local\Temp\JavaDeployReg.log

MD5 c3831ecb6ef5618e3561a56759e9e101
SHA1 2a7a1d0f19b2090f282d0de1f82c91a03475af46
SHA256 00e6531b4c4974dd54a58a6f144fe173f86e3202d0724426b433cb781c6947ee
SHA512 9e97da4cb0578a99ddc63555439f5b9c1d09e4fbbb102783cce2b5ed24a0abc9c64a587a793e4745f99abff5a24fd28dc5a021f4e7e816f1bf56bd4740304d01

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3C4E.txt

MD5 8fc69c1d279baaa6ba201205c935b06c
SHA1 eff8af7bfecaef7654f25f41a5259414147eb5f3
SHA256 e5d33bd6d3f8a0088b768839859e69027b0eddd6cd6fc56f85f58f1913950f1f
SHA512 d832a5d0d8f5c89dddc4a7fe13e7c8a6c0659f6231b833991cecfe6e947b9073a7047b266b1dc037aa8c18a464e23a78cbb99b5042fa7867e61e6699cdfdb439

C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3C2D.txt

MD5 117adca3287be411cb5a7c0ef3c85bfa
SHA1 fe9bc39ac5ff7f7e2e47273a15dac8ce68f9ffc1
SHA256 4618e59abc86f7f393ce654888dc8f12075b85a159ec8f62ab733dbb4c1ff983
SHA512 73cfcd2bc536964b6025cc91a612548821207af29744df99c83f93a2b6e7732d0d5d9b2714d565a763a88bf1160868033e0814e756ca8934ae1891b0de2e2138

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3C4E.txt

MD5 43efca4ef47f05b2046d37a5bfb4a564
SHA1 0ec7a768e7036fcff71b40846fc9fe75a449d237
SHA256 a2784ec2d374bb423031320b41bbd10fe8ad0e2fdc8ec2f327332913f81c7b8b
SHA512 c32b24cba40b3431f1c49ede1a6ac647ebaa45227e8d143d124ae459f1674247e26c575b7f256d889739218ceaf72c2739fef6ad9098fb55efc075197d039d0f

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3C2D.txt

MD5 1aaa5a6d307dc929b1d174c6abb4c17f
SHA1 d57cb554a36d1b39730746cb31c36e6b0983b9fa
SHA256 4e1552c34473c3a5a6247719948b874c9e137c3281794663609aa71aafc658e6
SHA512 f9e765a87f4a1521dafb989231e5760aaa945a390d61f140ea86b7cbd42eb1df35f1e44f7618fa5ce41a6881b696a86ea21f5b1d624ced23ef5325b630dabb13

C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt

MD5 c04a510a2bb7738143aade3aa19bab0a
SHA1 c26b13efc2770644cc22cac48700bafa87c448c2
SHA256 16bd7053f51a44ca9f827b4f05a650840c1c745f070ab5572407050b16737b10
SHA512 e021152698b0a91ede31289b4bb2bdc4b37173671006401a55b6fccac44257d49b6fb3a2ea48adfe755bc9fe4518f764ba9eecdbd55895092c1a3ffa85173f75

C:\Users\Admin\AppData\Local\Temp\chrome_installer.log

MD5 9c105e0eff54f67c1bd28b6b5924a4d9
SHA1 4912aaecf840fde2dbf1d5ab3cf67c8639660265
SHA256 01c7a1a99fd54497a8a074a5439259656b5f4be63d02d451641baef335c4a89f
SHA512 08a0ce0edf81f4f649f3510c2cf82bcd7aa0a9193583204e2b4dd21dcaea269e785907c9b5843811f9ca5639e6d6d67675d07c6f0314583773de473d4be0adf5

C:\Users\Admin\AppData\Local\Temp\aria-debug-2780.log

MD5 957840302a5977cc261b9108f2df3ee3
SHA1 b0fa7fbf45d4ae69a2caacd71f17f46e9c619688
SHA256 c9edb7fe5295cb6c67f29f3c1311e29dfe26da825bd0f1627dccaf2153f111f1
SHA512 57791348b65cdb3af44bcc9098aecac5183ca62f50c4490745fbed50202775df85adbc3fa8a8f37f81a968331a9546707b6bdaa617ac0c31370bf5c415ca5354

C:\Users\Admin\AppData\Local\Temp\AdobeSFX.log

MD5 12e59c25f04ae88b3c88df040d276043
SHA1 5094db7894c91cc88c3260ff7570fc5d3f875bc0
SHA256 ad8948d2a6f1718f4ada56ce340e4a97742dc6aa3920e1a94c6f83bfca07b235
SHA512 ac91911f1806417c3f00c61edb91ef1534b34f7b3297022be7ac2a84de89d2f31ad67a3b325a269ece7dfb2051f24502d86af30e23f03fccafe642d4bf75d027

C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\Reader\DesktopNotification\NotificationsDB\notificationsDB

MD5 b61b1286a7a1bd76d14fd2e7610babe0
SHA1 63c8d288e7658fc2cf9fd1b648262a3e221a0b09
SHA256 1066d0f47a94db55a0992879e90c455fd8afea75955db35892006ea124878bfc
SHA512 bbcf43df629e53b27f141fc222611d96e95e6ce3f1c85e962b5ed4d188cdd077faa4a130e88473d525d765cc871d9371456d18d1054d19b9d4eebb9ae05e9cbb

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\index

MD5 999ba39039cb9049a6597a5b98cf9c1d
SHA1 9fc07ba0e7b7d6ca573ae35dbacbe28df3d24c3c
SHA256 2edac576788622103ed05290a3a2e3cb976df2da2483343a601c802499498273
SHA512 e71d5eb2e4283665a597a7ef5c786c6ad4ccfc9e13dc6e903696030ba5c0ec964203f412200327e64b97a6c9124d24c62bf2080ab69db7eaaa82d8ee1c7ff427

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links

MD5 659feaf6dbf37e50d4c718defcbde7e2
SHA1 2ce0ef0222fb067fbbba785e531e7992c885e232
SHA256 26a6e135eb668eb5fdf695de153d715f6dc10a419ba2d9dca959a12e029fc619
SHA512 6f0b0d86f803b5ccb150b1899aef95b7022e5140f4e4079ca9cffa6520d345ca33d08c129a920a15119ca0d6eacd4dac308c863544c4524b2d8e69a96804a71b

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

MD5 905e4a746a4aa18b5bfea776911291d4
SHA1 1a38608ac92c0d36b2a62a12fa9a8ea6f09ee051
SHA256 82dfdfb5112175df194f60b2b86344ee7c733a15efcd8543644358d574883f0b
SHA512 ed7c05fecc1f74bcc4b4febc6c7c7883771beb69db7a76761758732a359d8f02d536b368c06fee0c2b319c712955ebbcf7665d7db50c13dd645be73f33c1c2a5

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cookie\Cookies

MD5 6443b09b6e59e3c5dace553d1c77dce9
SHA1 b8c2b84371ff265be31cac9e69c6dc52a265f388
SHA256 6bfe6b1fcf62bffeffa26a3b2091b2519cf26e791bd989a20a4e374cf3c43e20
SHA512 62f2c1f71d9905b1086262f81df82ca30ab73da5433a41adabab18e979b1ca63269b6f656643d0dffcfb3d05483d1141b33c122ca2f2579987b98b5d4a848be1

C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\deployment.properties

MD5 d802c88c88a75d71a170e3093303a248
SHA1 de1bf2f33e1d5fb3fca269af6f8efa69388c8224
SHA256 c75659f2e05ec131323908b60ecf5088199a6747153222e993e092f296928853
SHA512 58060574a59524672d4a0e4f8ccb80e722f85e3298ff601e63200d3945ca17cf09ce70eefc207c1e02ebafc7b2e883750ac2ff43db9aee308d52e9d1a74e00ec

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storek

MD5 41008909627fedb7f2341fb03f7ccf8a
SHA1 3c8a9f1355adcd75a22feac0bb3c7f4cc4d6254c
SHA256 c71da2b2a737a08a134de4e22dd787a2a925049159df19673c70e565b4634230
SHA512 4398b503792861d1001775eadaf69868284c28b974ec0df0211b73741a07b6b9f9c48b09adb582e5bbbd8cfb75ed760c01dd045985cd3a70af5c71bd0356cd47

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storei

MD5 da6d152646e22335ccaaff4c8ddbb564
SHA1 546767fd04ed0a37111951efa26f4e603dab9ccb
SHA256 98e9b7429e2035520cfcbd22ce2c1d874ea7a1b59182a9cea34d0aefa5f23d16
SHA512 f1f07137ddbb0315903f27375d2c5ba1e039fec482d1e2331acba259fdb21c546c0ba4de58e12a2e036485f3d3f08e3ae2ccb3562ce1f29bf9e143e23c747b39

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_store

MD5 01febd83930503a8ad84c7c5b66102b5
SHA1 3042c58ae5bfece962d53a2af8f77ebf66030edd
SHA256 428807c9e2dc7b17147407e20fb07535e35578bfdb6e435672580ef16c33c11d
SHA512 873effe97c47c85c48b66ac35a20df22b8ab51ec7e4df6521f2a86abbbd03902e1a00319bdd287de5b1efc4e187e6e6c43c05f31d0797c23491a5a38f00f390e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\thiu03m6.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js

MD5 30cf0a01c6ac62c6fbcc7c847958caf5
SHA1 448aa3e1d0f9cdb1eed424ef223e75c1e654ca3b
SHA256 803fc88553d844ce79918b237620b03b625d1bd154ab54c5ee809c886d432f26
SHA512 f86c9560e663accc84f90b6be48db22348cc3eebedae76520b58f73fbd6dd5f07d15fe2a4ad63e35c140ce6494bf531c53a644ed58b6b3e37e2a093566d22dbd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20240401114208

MD5 89a9dcaec8da9f79f47f73e7c95f1dd6
SHA1 590b4841061df57665df6b283b7903d2b4a30e6a
SHA256 549ea3ca0a465776834911590f1f58ec9fbfc35b7670fe902a7c237d001d04d0
SHA512 2646503dca35f464634ed761d025e834562258757a1e57052f7cb8a6a278e3869ff38860a169ae017fc1fc9919bb11bbffdbc115025fb0ee579ae39f82f97909

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3yrocb08.Admin\user.js

MD5 7ada55b29cfc8f73143e9fcc7e7fb3b0
SHA1 bcaf6f80bc7a400be561fffc5466b985cba2b201
SHA256 f33675cdfeb05f651b593a4de2c41205f31b25f39053904be733d61cdbff19ec
SHA512 e9a97250780c29e7173c87dd96ef026612b244e9434b63dc70a47f021888120d92188e5c69abde647923cf62bc82693a80719eec2963c731e9177933878785a8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3yrocb08.Admin\times.json

MD5 4d881d940b4b20cc5b0af3127c21e807
SHA1 934b93fa28b6c6b4358935374f8128eb541efbda
SHA256 8d1bff935b001a7fbbce15f7269133ddb5eba2977b05616639dbf513d79f22c9
SHA512 fefdeff2c7ad1fc6481ef71fcf2ec6c4f9e1888b9c39d20f9bb1b305b5230789e3117e7106b96aeaeedf3334532b8e50e271dbce8a91ebf9de81604e99849449

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\sessionstore-backups\upgrade.jsonlz4-20240401114208

MD5 bee15128ae7e48e948b21e4f7ac05a0e
SHA1 388d962ac55292c3a8731d64fae48d3b56da4013
SHA256 3eecb9c27cf2a866415434e6f55e1e2476394f9b517b27eef4be46919e05aa64
SHA512 6992d8add7729429ded0983c224fa26694765d2bcb3d3f9df991ed04b10a77bbacc47a130bfeed27eb7810be53d16ab1f70dcaf4be7dd53f172f06c0fc76a9ae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 52078d3866c90fc970526623ef4c73e1
SHA1 e4b31b91917ca2e8a80c7b6deb34a5bf19da2ea0
SHA256 22491386ec4043b5e0bc112a5ede42c69b67b7b0d192a36d6edf4d3e7046cfe2
SHA512 ed63e554ecd87696e61217eb3f89194a3b0dfbd187dc52fbcb59bb09744214c80f9c92d7fb53854b8dd029040c37fd0e54b4fdaec0b1f509f1dd68687ec9e7da

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage\permanent\chrome\.metadata-v2

MD5 5009dff27accde0444a5d8a5688715a6
SHA1 525280d6a38b19024436679d0b0063ec48207ff4
SHA256 f6e4370f7650541bc7c6d624ae1cc5de7c76a7d96814700496afd22de9d2be6d
SHA512 8f364be0e93625f82fd34541a8757737079a37fb1983c7bdfe7270bb9403748aed1f42d23408cc154ae60cfa364df031905f94a4d0fcf1c74342a1083f0505c2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage\ls-archive.sqlite

MD5 5c75681360b86bd5fd7a42dd924fbbae
SHA1 d3801eecd9057e810648656eb7c0fb4a216a742b
SHA256 edef3843ab644a5ccfca2b23957430e8ba4396dc5cb794303fed2a461764fd83
SHA512 4eaf45f0037d9f07913b0693f49859d1a0656f53072fe0080847dd305d3bf2d621fc5b3fb1e0f6468bb15e029693179c07c84be96d22bf2660b80c54d7a418ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\webappsstore.sqlite

MD5 a88be12de697e8ba9913fbdd6a5f6b1c
SHA1 ed6140e4bf4ce9d52b22c7a72aada44e72ba056e
SHA256 143c96eb81aa2b7d84ae645449ff6c6d9da5d48b359860cbe993f47638b28c4e
SHA512 f797123de21049435448c519485b33d3fba8a5ae80f39d2b23911fa96a858f895463c6b386abbbe83aa082c700c27b2dc4d5c94123a829c8478c43ed78ee50c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\times.json

MD5 a3c001823379b45e593e13f4564be8eb
SHA1 98e4fe1837f023fb426a37bea18d6ebf2eddbeac
SHA256 ac9e209741610c99e638d10fe0f45959c98fc7296e57fe6aa90c27e60af9366d
SHA512 7d448e312aa0954929aded43e6cc3112a8b1d4ea354a6a8f9afa7bb916f5074a18d93b59e9e80dffe5e1e971908692ef4aeecf3ec61c0658749fb388d0124fc5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\storage.sqlite

MD5 061a96dcf8563edf32bd4d74d2873d9c
SHA1 c52f582395458462584e252c6c51a04cec385b32
SHA256 9b8cb467472cb8e0680f6e831ae94f6a5f26e1aee8129489b4af0a7fe0ac720e
SHA512 bb579b7e7a9e087e753b883d8112ccd2a01523cf56215f8080788d969654485c7c6a5e235c8b6f7dc48119b23ef193f9f3825c7531be52662aa18867abffdb65

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\shield-preference-experiments.json

MD5 285cdefb3f582c224291f7a2530f3c4e
SHA1 f816c3e87aa007b6e6d31eb6a4618695a7d83439
SHA256 704d28223a4320a853df4a19d48c7015cf79d56a5317cc3475b6305fa43dcc05
SHA512 8f1decf1e4b5755fce8f165daae115f45d6890985c9c4bbb33a6f724cbfd26db75f6da06f9ef675de20fe755da9b7f55e5ee37124296a12a520a393da159bd58

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\search.json.mozlz4

MD5 440cb4608b1e1d350013eca351f00910
SHA1 78cb6da2832c850c605fc3c66677d7dd5f4f8ef0
SHA256 ceb7a9b0986ab642e99dcfaf8c14e19867640e998d6837648fb56a32bc112dcb
SHA512 cfd69afa8a8d8dd44b9a73b4fe60976b16b1317ec9aa2aa903cdc391d070d94202cd426979adb95c48e99025759d53ec588845876aa2fa483948e37c2bcce7d1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\protections.sqlite

MD5 76786a4c0dd19d88d6d3ed95a293bf2f
SHA1 b0d6d676127a7694fc6e71ee57fcc2ffaa621ff7
SHA256 1a2564c1ba20b8038d35c2319258d94dc15d97914dcf753b31c48b79940dfd31
SHA512 8cd3298e2ebba763d3c80ac4b17e44af7eb63b46304967d0c6316d314baf8611c05f7b9979c2c5c329ac167aea0246e8c9f057ffbb272481c13fd5e4b4bcb2d0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\pkcs11.txt

MD5 25822d0d0c55f47e83b5c788f847d21b
SHA1 3ebad1bb9e69a77a36dc67a412a0a9e08b837ad4
SHA256 cb062502fc99d4ca841d588cb93a2983551774c8b2a57de96cdd812c65c4965b
SHA512 483d52bedb19b1d2ea087324be62ce2ed131ed8789f10b0a4a65409a228af250a8ed7246c3531cb0116359b4eb34f8703049f4fc0689bbec3821374d8a957f1b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\permissions.sqlite

MD5 d30ccd26d1e5df37d71fbfcd1012de2b
SHA1 dc8fa8996ad44ab484596a6b97001d9720e5d3db
SHA256 cdd1d69918595039da92d9fc5d39be1b2abcd8dc72d7a314db06e7263a7d09e1
SHA512 25e5fade84c1167b08ea02c6a3732efac3d24458ad5eff4759732f7d182d336f99278063d836d1b2335c7609eae72d51f43a081a8d10c720c1afecbb644a1b3d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\key4.db

MD5 3e92cba80956f0b249c06eabd105c5e3
SHA1 fefcfa15e05d93cde098b3abbfb5e32f096c0872
SHA256 9c8415646e8eecb8bccb4ab2b9672485468a8d77b5d2a26be8421cf38100140e
SHA512 e7a4e56fb36f852e8faeb48cba6203f3c040b9d82a8e42bd2c53c16cbf12ca4d86456d2706a812f8ce7ccee9594eac0e91eab0a55598825a7a34198de92dfb7a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\handlers.json

MD5 a2e4be6328337b95ac3bdad5bd4c0983
SHA1 0badbb13d20ca84b342d077cbc00fdd7b342fc28
SHA256 a0e0f7d600383de873dcb01474154fbbf513bdbe55638481ffce6d198399352c
SHA512 138be3384a3c874c967f0bdd56a6c1bca334deea67d21ade2ff281cfd1f10047561590520bda496b2e4d0130a42295c5ced08cd9d07f10a64ef27226f4daa149

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\favicons.sqlite

MD5 271a7614be9a55f86f0575fa6490df06
SHA1 069f71131552958c89dc510968f00e841d568c94
SHA256 4ce25bff0ad2c07384736fbff815cbfb6c79b9aa60d0614c72d9bfb204edaebe
SHA512 3c657fa223d476aea06e8e693d1296fe8fa6306007ddb831b9d26f4ec1343d64cdfc4573ef6cfbdded1cf05a6680bc0572fbb4ff391b04ebde5488294cccfde1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\extensions.json

MD5 c173020bda817a45f64c5fda72db5eb5
SHA1 ac783e559c844ec5f4d5bd2fda77885468ff09e3
SHA256 a58a854794b075765417498a01ebea449e55b0f25dd7662888aab27d5817e28b
SHA512 bb9079de6b3c32ffc8504ae1dd6881f9966b53586212049d5bf27f4e2d6471c4269c36644af928fb7131a20acb33c3c8a5f9d902861bb496e47294fd84829953

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\extension-preferences.json

MD5 595bbe5db89449108f79af7a8eeb2bbb
SHA1 4b375c2e3eb556a8bed7fa6513496780011d4f65
SHA256 0902d47be8eb591fe7a6b6bc396fe95980ebe6f49e819a47149d4ad37be8e6bf
SHA512 2b55bc68aef6f8fc6ac0273898e1ec49476a2df3939c8e1358d52843ffa185b5c69947792568d3d3795f234f0391a6bad8e2a2a47b4bb48e282f8a571102b92d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cookies.sqlite

MD5 40f3eb83cc9d4cdb0ad82bd5ff2fb824
SHA1 d6582ba879235049134fa9a351ca8f0f785d8835
SHA256 cdd772b00ae53d4050150552b67028b7344bb1d345bceb495151cc969c27a0a0
SHA512 cdd4dbf0b1ba73464cd7c5008dc05458862e5f608e336b53638a14965becd4781cdea595fd6bd18d0bf402dccffd719da292a6ce67d359527b4691dc6d6d4cc2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\content-prefs.sqlite

MD5 b41ed219e2c8dac47f2701562d092621
SHA1 90d507eae3ec943a121dbe5a080412e40470b54f
SHA256 cfed019635a1e14f74ae78f2c03fb96b40ac3da37b67489bd98c144afc200f1f
SHA512 5c6027ec701055efb3b6c055727af5ed261e8f1d5ba954e64e8a34e5c791679b1e4a6ef49896ab8089ec151fd758ba41efc7333611af42b851606a0544a9b947

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\containers.json

MD5 332d1459439502d9605d59b2c597af52
SHA1 aeee847012744a06ccd5201f288efc6c0ee6094e
SHA256 b32a837702b91f3d6c3a6a50da2e31f1cbe6384e991aefd08eb595a05dd27761
SHA512 18ebc86d13eec67ac1e3705ce9239598f1a9b7ea5d5406ae41b854caba080d4d9f9cf3965643b793e6c8561f96177aa68806bb7ecb700e8515e8ce3be0095278

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6ir3v68x.default-release\cert9.db

MD5 0eea337a127eb61aff614dfaf19cc6f0
SHA1 1ead6633fc34ff9ed02a1fed1ae310605bbf76a4
SHA256 dccb8a02f1d4f2c64846cd85551e5936f5c50720ab18abb8bf3800a9a0645f69
SHA512 58240ae14bba995167829f7669453ddd0373d2885a94ee8ab153b7ba0786c91a07f4b072bab57cacb3e98129f78a758320cc530e769253ff90f777b5ef172983

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\profiles.ini

MD5 c8aa2e7e12dbd04066603f292ea32df5
SHA1 544a93f2bd0c10341229c38112e96e86a1a17fff
SHA256 c998192b83dbc406b40afea44b711d77deb5e2525f667af090c96439a36512a1
SHA512 104d2865de3b7a4832c9bc8b86fc52247536541e52f3ce4ce4c39b728c27149d5045a6e0fa447b99f0cfbf6fd0b110b97daaa4d193419fd6652a2a048a501fc9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\installs.ini

MD5 cd693fbf8f57a2fa36d6859563833bdd
SHA1 3609d49d0f2c74d50a96e42585250522ef768cb6
SHA256 17298cd2b064bade182fdbb850fb8b153fcfda7c2bee30556bcaef23dc57e4e2
SHA512 e4d810b91fb6963a0bd337a6e3d5db947c43da92702d47e480cf2476291a19a593f0d7449d1eed1aca308e5f5a67aea7b5d56b8c35a447bf7bbdbacde2ac160a

C:\Users\Admin\AppData\Roaming\WaitSuspend.xlsx

MD5 480281e44ff8e3674ccc5f76e6b6c867
SHA1 3bd99931cc1f9e6808b9ffa9c355baf712f99172
SHA256 5c2b61fed8ac0f6558bba5bb688d56a4c4ef7db63a825907b730905ec4911ed5
SHA512 3ae8d2d63c4ee103c3d519690017e5e1f90cedb423f81150a038deea4803c7185f247d0df765e59268bf37a2575df0720ce687269b46c8d2c43663a5bb79fa5a

C:\Users\Admin\AppData\Roaming\UpdateReset.gif

MD5 173e93a499cd200f88efeb12498a0454
SHA1 c8c2222ca4219d93cbdd3a12609d08c1dc3f513c
SHA256 3b0ed00a90036285d98784b06562dc3e99645535b833d4431a84a16c8f75f733
SHA512 17a6bab0829ba7540975aa76d648ce3a637651d18241d2f8ca779f4467d824a2244b28b0fa02c4e8e80afb3905c143da623f29b3f08184ddcbc58543af53cdb4

C:\Users\Admin\AppData\Roaming\UnprotectEdit.rar

MD5 0e27db27432c10a9da7a9373592e2c5a
SHA1 f7ca7e08c7b2b9c7d8ffbb9ec3048f45febafe44
SHA256 94c9a0409c7033317a66974bf2bb86ba4293d69e80a60db38be9624dc41687bc
SHA512 8e4123ab36fd9f8f05933051cb91f2019ba75ef57373032fd64f416dceab105e226f94266bae00acafc5ccc4275e648631133b018be097482c2cce37c9d3be83

C:\Users\Admin\AppData\Roaming\SubmitCopy.xhtml

MD5 6642b33e8045c6c1f4a1abcfdb54c107
SHA1 b08043f1dd9157859db02c946a1d372990ecdf68
SHA256 55979fca92dd7f640e19c25de23fd50f48d4876fd90c4987cfe2e20b2b1241d5
SHA512 66b57ff9fe68a43ced8ed5dfd73ec3d89d0167e747af5ba5da2b93cf1447e0411cbc1a54a3e5c7ab781da40d4b1e6d0fe8ac42487b3751f024791964fdadd058

C:\Users\Admin\AppData\Roaming\StopSave.m4v

MD5 fb683aadfc1748e8e2258a0255454fee
SHA1 c5f41c89c6b1dfba47f1f96e1d4218ad098fa3c1
SHA256 f53eccaa8a5ab905a704a92c5895ad2c250dce7e5f5684436fe76cf7143c8858
SHA512 af3f0d1c8bc0bf88e61ec85db69e267949bc9217261f301b3247b29be33b8bc6d86603156b8a36e72edf27e1b6b5c5d3102bce08388f371d6eb2b270c09e92c8

C:\Users\Admin\AppData\Roaming\SkipSplit.DVR-MS

MD5 96ff4806c5240f7fabc8b942d48d5352
SHA1 f23d36564bfd82e87c1156118576e82df03716cd
SHA256 1034d25be7e320fb41193a441c3b0eacb8ea3568caa5c910325f125b5be262b2
SHA512 4d03ea4fd29fdc1277d6bbdb6a3f697744cc7a684b9d18ad98edbe6c9f42c3d4d43ab245c65558ea947d21ffab271d9fbdfb4c13dd2c6cf461ea19de48bdf62e

C:\Users\Admin\AppData\Roaming\SetMount.mpg

MD5 a4ba89afd1c16d56c4b89bbbaf48342d
SHA1 6cfd8db44c241f77d7f52d62c762e0a3cf89accf
SHA256 8abff1d514c289f7e1714487e0a7af9f1c440c1a1e0351097d067e0075688a30
SHA512 7243eb688cc11b3957822aa98105c4baa5130ad65a857c4a904df69b83f1750edb9890add7902bda70cf95f24d919e0dc67111b3994638cff4922b7d5a2d0410

C:\Users\Admin\AppData\Roaming\SelectMeasure.xps

MD5 deb6c8844b9a6e635fd42d27e328ca68
SHA1 67c615f694c42912e68e81652db9a29ec01e03f8
SHA256 d6e72f012b8ce5ba4bfb977e375ecdb54b66be1399c77fe011de7e4a03cd3171
SHA512 873072271648bbc524575dc6c568a6756b58c1dc929fe2876f121a40d62d280698c3a177f5cc3fec85ac6e497b60241754d1029a9f563a596e0af735f3bc5d54

C:\Users\Admin\AppData\Roaming\ResetPop.mhtml

MD5 2494645f00864f7981fa526436a9704d
SHA1 43cabb4e0f9150d4c13f334661421aab696d15b8
SHA256 68f4a06fb886999a875c8fba6b52e4efbddfb1bc17147d362ee347fbe7468ee5
SHA512 a5bcfd92d03f67fb095e1c1f8882d3d141449bb95bf1c2d343269a982ac09c2dd676277a112652ec9a93e545ca70fd5af5e527d6cdceaac9779df63f7436b1c9

C:\Users\Admin\AppData\Roaming\ReadDisable.avi

MD5 929597bb695abd772ebe71e51106d097
SHA1 6289bcde2dd59e3d651d0c33f94336f02e60a81c
SHA256 4e4e6ce2d89cbcf3d08af179881d81d865824f755bc99159eb0ac0ff99176b7b
SHA512 6aaf42d78b03947335056cd5e136fff752eb343684db861cc6a48c4c8824f46dd7c4554dfcebd1a05b7aa220efd2bfe6ea85ea040208fa5e9a365c35cfa26b0b

C:\Users\Admin\AppData\Roaming\OptimizeConnect.vsdx

MD5 7f9417b2cc563d3852d98ff93a68548c
SHA1 66748bf5b1e3045dbc0a53f2a1dcbbdb64415d34
SHA256 951c7ec2214e8d8226020884b7c180a0f2de812b52b085c53d23dbd27673d834
SHA512 3d44d8e9cf13266114e0e6416fd21fbf0fb863f93df7f97f3bde23407c1c04b2d6d7179d4ee67548e42a901eb37d62623473aa8dcb3fd18ea1e85b71a56784cf

C:\Users\Admin\AppData\Roaming\OptimizeCompare.ADT

MD5 09e244a1029a65a204de098feb9a8cca
SHA1 081cfb84fc2a12dfaeb6beb53ca1dc86a9bea6fd
SHA256 6d606e257f88756fe4da3d4d8638d019b2b43d1cc336a61f5e528be0ed68cfbf
SHA512 a965ecb6d84dd87ec6ccf280491f1bd5adb62f5a6a72e9f4a2fd15debdee6d45e9518f120d30f29224f385cf699322785c7c0fc4867f605c03d6dbd0d686603b

C:\Users\Admin\AppData\Roaming\OpenInitialize.jpg

MD5 bd6de4f3bfe8221cd777c6d1eae196fd
SHA1 d77a455e65c4a4cd668074b339a739d7f05152bc
SHA256 b57f53130eb8a9057db2a881fb5b4317c5a7da0e3048f7eb1112af6f84d69065
SHA512 fa4120842bb0f417846c767696c468782109dd3612ae0a316a23340b52a6573b7bd4fcf1b7ae9f5dbaa4397c1474a52ca811e403b282f1e25978e3413e169922

C:\Users\Admin\AppData\Roaming\ImportConvertFrom.m4v

MD5 69609ec3fca7d3742aabbb99cfa1d0d3
SHA1 761014368105851cee09bb01fb2776927b6cc42d
SHA256 048da9339176eb04f145b8a1c4e85dcee9874b2a555208bb2efc9213d40ccb74
SHA512 0fd6c9c890b357ae876a51712d2e3773fa1b408f9c36dc86e9ff3a7e821fd56038bd14ce35bd7b50c7c242db119b3b26ccf992e606a802c5b17a7c3543fb4a49

C:\Users\Admin\AppData\Roaming\GroupRevoke.TS

MD5 faf65a5a604cfccaddcd5b3232495aef
SHA1 6416a09b1eaccf97142f5b05481096e7dfda1cf6
SHA256 fd5c704e4fbbf804e79d5df1b38e2b5838045640a410c8ec391c082892e3a640
SHA512 2041f952fbfb8ead18419d5291075c675a7c4ee6f06dd96c977d214b3bd401c5b5072ca6bc9308185cf980b522be94e92df8017c5a2510206098bf7149e21573

C:\Users\Admin\AppData\Roaming\FormatSwitch.mpg

MD5 ab7de857ae0f790a0323d27da30f2dca
SHA1 8e42d581a3227029f7deb67d936d1ea05c85c9d0
SHA256 203522dbcac6b0721788bfbabc71a9a460bdf703fa8f2c419aad8fcf8bffa261
SHA512 4cfd663a08a9e2d279fca4b22c68164a90a048741550f35bfe42e651002ac240899bf1ad967b2602afbd5520fac97b466688b0729aa63c22dce5c99fc4711514

C:\Users\Admin\AppData\Roaming\DebugStart.rle

MD5 199c0a143e18c19c671361ac163899cb
SHA1 30b08abb5a2689e10eadbcce80c0fe024f2a589b
SHA256 bcc7854dd0a093a6ab5b12010b43396607184bd567c55d5976e9fa7457401978
SHA512 5b7ab33137148250db4d0092bae69a52d80a7ce9e2ca57c2ad30fcb78b03357452c8788c1a3f586443d7bdbf6af967d72faae511aeb1166964d16443328195db

C:\Users\Admin\AppData\Roaming\CompressResume.aifc

MD5 b58335133dc62545ac36a3bb4823a6b4
SHA1 6e6c15892e3d2e1f3e12cf43ff5748a6ba64cdaa
SHA256 31dd8d4c0fea145bb7e72f1e6da5b756fc284b86c7e89d3624e91b8ff128019a
SHA512 02f6678cb68a03eca309218b3e5e4108e8f6ab676e1343dc2cf52c4545489311543cb84e430cda3b18a01f0cfda2ee13adc5672ace0e699cb08cfd99362a5d18

C:\Users\Admin\AppData\Roaming\CompleteUninstall.ADTS

MD5 89d69b09be96ad06bde4386c1f4ef28a
SHA1 a6cc6b91acd11f92a69a00b40e33dee65759bcce
SHA256 784fa58693e495458ca4ef992ec6005113e5fdd0a5d08c713c282ad0e7d8c590
SHA512 d149a868d587c3ccce56973fe24f50082a76fcc8b557c0d3c3a9fce2b86dfa7b77e297ca592a37376580ea57e6522285aa1cdc9b5e51c878d306927a3a315f5f

C:\Users\Admin\AppData\Roaming\CompleteReset.jpg

MD5 b91bbff5f4727571b1828953c72b7d87
SHA1 69e4561e8ccf4b060867ecd65a37a8a9fde27d20
SHA256 75ee75b00d4baf3bc18ce9dd60141c55b4d8aeadb127859529634600ae9bb1f4
SHA512 56a1f7c4656c7498f0609ec308e8b82e46579eb07178d4e5daa28469ed6a878246c6ac7f67df1936fa315f2e3c778f2e03ce09fe35a44e85fee79415b352d73b

C:\Users\Admin\Desktop\UseDisable.xla

MD5 dbb26fbeac48f929bf888bfc008769e4
SHA1 733d22207355ddc454cb286f42364a3cf2555fae
SHA256 c70327b974455292635f92cfed44fc40c2c43ce324452cfb520d45e5d6adc081
SHA512 b021545def6831cb0e9598ac4c11228ee12f2a83c9a0d62189b4e30ac86effdb9797e0e6b65bd40c4c246f15bbb2d6c167a8f10dd01894d2afba987898885421

C:\Users\Admin\Desktop\UnprotectTest.docx

MD5 da2075016c22c2e8b1e1e07ee7a9c160
SHA1 08cd8c2a2ecb2349cc2c9d8fcd39403fa63b5bd8
SHA256 d9d4e59bab2cc1798d155f7a59e12a01d7f29fa864a704ed473b08ea43bb2189
SHA512 b49ef17952187a0b3e0bb283d9be1ce1e46268999ff295e0ec3b0a866c0b656ddc3011c4dc398011368b92fd7b8046911c00baa1ab64e5b1089a7c0e51688f05

C:\Users\Admin\Desktop\UnlockJoin.wmx

MD5 f98041526fc17e83ca074c7ea9dbf8c2
SHA1 3dd304157047f90da7411587f2ba35348097da6e
SHA256 8ba2d9a6b5f88b873e29643a6cc7103baa8b870f74528a3fde18c4e263a2cea4
SHA512 0194534e74360fcd3fd3109783faf37b003b85c184ee2bf01ac3a509826e6fbb59fa765a2b99bf3304bfe732f0dfa8fcce0161818b1a5a6c84163e4e557bb3a5

C:\Users\Admin\Desktop\UninstallDismount.emf

MD5 39bb1a3f3c032e7521b45e5993e59d25
SHA1 12b1a97c99fa23d0bd5f821d9aea8131253a1427
SHA256 d48cff6a564b43d505db91286fc998cd673b89c971604ec56a6673fb271ddb75
SHA512 e0183f7aacda81c1dc232ca838bffe2a870e994f3e67600859e24593a13d478c4132962083f6ea41b27052dff84bde8779c905ad471f228e4c029b53d6efd455

C:\Users\Admin\Desktop\SwitchMerge.ram

MD5 e71643bf83ea0abc695273f7bcab7a1f
SHA1 01138001a7b653b255d89aec0d4d842bc2dfb1cc
SHA256 b15053efae0c5c361c97bea8f946b4255428b8a14dd370f51854aebfd6c0f69c
SHA512 298e2ad3c1bf1e62119e8e847500d08b3d56a01f7696ae73035173752f7f938de1c27d9a47428177449b26897ded0730db2537a2c1e520529944637a4e3e9af6

C:\Users\Admin\Desktop\StopConnect.xlsx

MD5 bc921f7783c445eb9e005da846805b45
SHA1 653ad47cd026669239f8f44d7e09728569cdf851
SHA256 67bad25b47c58697b17da0c529deac244b4431639a4963c576d9f323951d3206
SHA512 a1affb52cd6674298e2cac1dfab67011a9a0e55c6c70e5dd9822082eb94baac52d774895d078011dbdd6df5412e26ffec6f3a37a74aac400c978021fbdc73a90

C:\Users\Admin\Desktop\StepSync.aifc

MD5 4feda47bba8b74f25ce99b956abf4fab
SHA1 0b50ac8f543c331c9613dbece639b59df330c189
SHA256 e648d65041c480c094eff840dd1b4a115ff8cc9db5454a64e833d3c8b7eb1560
SHA512 b0befe6b26e3b4b19e750da2b307594c4af6f9036681b976f5f6fb7959fe26656c9466fe62fc3881bf838f976d1f8fd0e9b812dab38e9e957c1dafe75249e110

C:\Users\Admin\Desktop\StartStep.M2TS

MD5 b8193150163bd0493fd8f20764f3efc3
SHA1 c329056ecfb841054d9c271f20f2b801c1f2d1c3
SHA256 d404e96431184b0f5d3a30159116c3f01b4a0dd2e66f6a7ef12d25948823912f
SHA512 156d55348c6bb61b2bcae42788ce7ce138c00954036fb04e49d836858b719194d7dfaa281cf06bb5f72817bce0813f05828a14d371601ad289b87c3c080cc5a6

C:\Users\Admin\Desktop\SplitTest.m4a

MD5 4001414d7e609ea85e888aee1cf5cf94
SHA1 1e89810c8ba7042233586f72576c11c9c225a272
SHA256 dd2792df2e972412645963e85ff2b3128b20a6ca7c51ffa9f906ff6a9990e9e0
SHA512 b1db6949030fee7c91dfb93b793f7f890559115d1f1e5b9735f1cec5a42229b8251b3ff9fa41714469e5a92385de83ac9d93302ab0972ab93defa4ce58331b57

C:\Users\Admin\Desktop\SetSuspend.eps

MD5 6e2cf13409c11a8816e07bae60f553eb
SHA1 26f7ddc99ac0e28f3717fbc80a2935b5b87356d8
SHA256 53d7515ce50234beb8fae3929cb1f5194e497d71f719a9c45cca634b72d7b941
SHA512 c1b0013a34977fce02b7a72216b0103743e49f5e7dc42eb926b4c02679e5ee96c37c907c135d642de595ca6b8b6e689643d488a0a57a40830c8e1e2843f573be

C:\Users\Admin\Desktop\RevokeGroup.doc

MD5 e4cf75335a806673c117239fa1b74c39
SHA1 2ca19aef935f4c80b2669ccb7ffd6ddc9f5d93ea
SHA256 848191ae75575ff8ca11865f29494327338321bbc32715b1583b9c91c217be00
SHA512 b89a0aecb9cb31fa05a2b844f15d5dcd6b18f93ef4f749b2d78cfcbd33ecc164c0d37303dfac527e3cf34d33bb40ac58cf4b321c4a5225539e43260336687c73

C:\Users\Admin\Desktop\RepairMount.ADTS

MD5 55d8ee39c560d083df04c1912abe0120
SHA1 44efda26e871038885b5e7f34a5fd2802c7bb96d
SHA256 a73e5e3f45c0760cae27d851dc526fa85228ca9b4f7bca24cde58b64713dabc0
SHA512 db6900e9409579239e7b488f771f67c88b49b5622ae19b09701517ff54d51f8b1c20079a9f1294de677b5f8e9aad9c64714f62725549417310f26366f9d8de61

C:\Users\Admin\Desktop\RemoveJoin.crw

MD5 648385918817450275a1b9285b69fa06
SHA1 8bdfa1fcd6027657c2e3a5129c2139bc4e01d84b
SHA256 205a11f26d5acb712d8ed2c4f5ad9ced07291d6564796ec2f5d0b1de995ffc31
SHA512 c8b7b202a6bd8737f9b834794db49c2e12a73ac4762eccfb37e9c178321929b8b31d8c9a747ef5e7718d8f74ee6657696f2b8f422305f6da1345d3e8f05d3e49

C:\Users\Admin\Desktop\RemoveInstall.docx

MD5 c7f756aeee8c56d331604f0e7661c2db
SHA1 b86505109d59510a0c193bffa6ed163a50f4e8b1
SHA256 b9f4e42bb9d8a784b7e42dc6bdc0fb4aad9d467b4e96d3e7df59850e9577c8ce
SHA512 900854a1d14d38ccd3fd16575e43f916d3d0a8d527b963dc70e4629374e9a0548ad2a5bf4d278d9f322a0d22f455274a75e0e077e156d4a68a11f0af23b31416

C:\Users\Admin\Desktop\RemoveConnect.dotm

MD5 6116c647547fed3acc02630e5030f2bd
SHA1 59c1122765d95034f68a4be19b13fa365b8c1771
SHA256 f5e3624fbde6514f2afdb749cdaace53f1f1f38b779123e587a6ad24f32b9a0a
SHA512 5ceca80d9686b45a76cf96949d3b2ea926b2de9275ed1d984fb8aeb87da457ff6463dc001dfdaed91ac2db2d20d07e0347aa6488c72a1201f4a0bf7ff2e0c403

C:\Users\Admin\Desktop\RedoSave.mp2

MD5 e3c5940b5db9b8c8c0a1b9abfc8338c5
SHA1 648448c30588404a111cbe97b4af07b71adad30d
SHA256 154f2b2c83373b7e8b1057aca750710bf725c48d413c45bbf6cec5adf2b75e39
SHA512 afa07c40325744e57023aa52e116c860e62eb3792d5bb559814030d3680363aefd81c851075e0474d4f9fd15e7e6ecb4e2ba7bf400e9db09b20abac324abda86

C:\Users\Admin\Desktop\ReadUnpublish.docx

MD5 b64ce7fbcfd5f518bd860ff841c60dd9
SHA1 c72ea11e1cd2236d76ed039eac4e870d0e24a7ee
SHA256 bafa98b0634e8486e85c361a4810c37f9e8fca49a90bb854cd69a03ffc88c706
SHA512 1f7213b63cc88ff3b72abbc6700cceef71b1676d346d48ccfbf613606f565e94e1f252444b427878dbe01856a4a02f2f7b45f7d7093476b6dc574582b2a5d168

C:\Users\Admin\Desktop\MountEnable.pptm

MD5 71c9e51d1a1da876fa7976f94b1ae22a
SHA1 0cc58d3c7594c374d549276799a088cf286e1a9a
SHA256 07927c3b3ed98fa48aa98080408583b70b2c209a84c3a0477bd652f215097e49
SHA512 c35054a6613142dbed29df40fca386c82814984fedded09e2fbe18f457cccbde605091822be22c5bf313d7d1b008642fae46db0120d3d905b7d32e20912eb0cf

C:\Users\Admin\Desktop\InstallSwitch.docx

MD5 1382b3fa3c9ac572086d07454ad2891d
SHA1 0b17e5294db64c7696ac776c2b70e1e39976962c
SHA256 4e33bafafcb53d67f835787981894080343367cd95c9ee0c3464c4acce77a034
SHA512 3a3d25a282fe4d6dd363175b92d34655840945c1fba2ee674c612eccc2b7fdc77756b75c1ab362c3c1f9fedbf5f1fade15b50b55319fcbc41e95dc2ba4d07e97

C:\Users\Admin\Desktop\ImportExit.mpeg2

MD5 fb30e9de83f285b0ba5ab8f4d39e8dab
SHA1 63fcb9f443b31502f5df8088bd5a1455d95b81d5
SHA256 64b6a60e9beea88459bc17a33282c7faf44c953f0772d742503622aa52cf1d69
SHA512 e32009df6523973236c74e047a596043b8bfb784e9df7dcc89abb1d407f6c0376dd4fc7e1374596736262cc3586f36ce3a6ec5f3817cddfb8306f1819b51b1aa

C:\Users\Admin\Desktop\HideUninstall.xltm

MD5 63d56a26011e22d4a2a21adbee22ccc0
SHA1 fa2ee0cf9ea89d240deac85d8d910834b96a1d0d
SHA256 4bce469da99ff5b02467b8806abc136249e9ece8173bb3833ddb17fa448e02f8
SHA512 e1fc2fad2ec92dfdbd5e5326c008866cab96c5c4d9fc39d9b641eb32ed488dafff8c01351330e8e6af527c3710ecf679e0b72d237f492ce69f2a324ee59f5703

C:\Users\Admin\Desktop\ExpandSkip.jtx

MD5 3832597571fdf900ddd8a8f8907e40be
SHA1 ff1a4f5dbdb6c68dd0c45af97dd10a62bef65d9d
SHA256 eeeb37e3f3d9326cd1603de095666b40b2aca3f4e6189fb804800636f3cf367a
SHA512 ac54394f3f85d2e8825ba36865302cb3ce9d7943fa445e91e2a370677b73b911361c591a311943d6bf331772fdeade073701935ceac4985a8c0141184d3b4036

C:\Users\Admin\Desktop\DismountCompare.ram

MD5 f6dccf0e301ddb7e2696fb56d0fb7808
SHA1 9d906a563c5439094f49a0c5f42bf66836206d67
SHA256 cee3976265fb37533790aa2c2adba59dfa0e1c59d549d3314b0f6dc5ffc9bf3a
SHA512 befe5f05fc713e99139c9403e945dac61b67333d195cf26c37cfbd5da940c64a557d5df410a4ac31216e6dce62311f51ca75591286e88ec5bb51efaf7dfd800a

C:\Users\Admin\Desktop\ConvertToUndo.docx

MD5 4ca9a2ecd25d479576ac167be93abd98
SHA1 ec77848a59a7c8f2f631e0e2252918352ada3918
SHA256 a755770179ff373d156835958374c0734011e86244323f80fc6937b294c03334
SHA512 2b0cd805838dffa6e5fc1df21cadc6341d4ae46bbb9412c3106c66bcaab4f3e77af48b7be963365b624e8fa9dc990a25bc28f6610aa6b1af4ff6e259625917e7

C:\Users\Admin\Desktop\ConvertFromPop.jpeg

MD5 a98fec822e000114750f57a19f3d2b40
SHA1 7cd141a24f03ae0fef6231ab47b7899aa3f84eca
SHA256 2c1932dfcf7ad10cff71fcdb6ae5458c4604da1f9eb6bb4ec663b195446f1cdf
SHA512 602b34dc1f8c00d8233cbff879da4031e8100061558cf19e651056ab0c61595d4394ef27a732f27e9947bf082b8fad2790db741b0b74779952084740801b901c

C:\Users\Admin\Desktop\ConvertFromClose.png

MD5 f32937e0834f341d59764673987cfd4c
SHA1 2d8fe0a713fcc9353121b0eba5f92b4741e43d66
SHA256 a8922f0d9d0e991f8cc05400c713779474ba5692c640add542d22e427208bdba
SHA512 4655bc19f41e0f73022b31c69a0f9b80682e4450532042acad0fd2ed749e1abc15f95d3acb9ef6122ef9535657e87b1a633b1b0e128f56749b4c9e7accb716c9

C:\Users\Admin\Desktop\CompressResolve.mp2v

MD5 dce659b94f92017bd22b4e7d5fad05c6
SHA1 4a3fc7c6536ad9229fef0bb7aa8dcbcd170139ae
SHA256 565cd9799ccbe36a820b983665ba4a3041e71c3f36cb4b82acf5d150831b6d7e
SHA512 725b8b3236bc15ea64c6882811abe65a112c8dfa46fed30743d2e7c6c6036b3b4e3e82c89f001f2c429d702e1200352017d4fd16ff080ca83875ec55e4baec8d

C:\Users\Admin\Desktop\CloseComplete.pptx

MD5 ce13fad84c55f89fff8a79b04df7884d
SHA1 a9d1d771c681428ccfbde47199ed2978de028a38
SHA256 e77e270f0c6cfac4f56b6f07c00e844eadcc9c625a0e3ea219bf1653dface96e
SHA512 6be9a6e2b2665f585bb3cbef833c0f4ceb8c962201d2a174d5457a5e024b030ad567545f0895ea4673feb05f62202bdc71939f2b7539ec1e5d49a1a14400b432

C:\Users\Admin\Desktop\ApproveSuspend.otf

MD5 814665387128c1d17565bce99b78c702
SHA1 493ba41ca173a5b3266aa24bd9a0d5497c67e355
SHA256 97bb12f2cc15f803c7a5628f9030b284f840e122c2c691dfd7e9eb679b63507a
SHA512 110abf600955e943ce459e0f122236eb6265405da36de1777f9e21837cbc68300b44e8506c63b99a49773cda6cbb71f67e2c28991ee510e5a0b5258e740d84b7

C:\Users\Admin\Desktop\ApproveAssert.scf

MD5 127f3d7934d9509f223b23f6d17a2e7b
SHA1 ee3ec054df55fac347efc978fe3597aa5682a134
SHA256 6dbebea3d7e94584255afc64617c2de3c05b53dd3544ac275bfc3af738a92aab
SHA512 1c7c6771f808dbef5773f9f1c4a9add619c82f2d34c279800ffd23320e868790fcc0d0d8b1dc0e1e9f4f1a923d7dd6188810a06faa68a4ae3efbbc133b5889ca

C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Quick Notes.one

MD5 9cb6405d3575c8a2abc2f93760116fe7
SHA1 3f6276b384e60b42e5708786001326d36f9dca9a
SHA256 db3ec62099660e9e56c9e9c65f2def08597bfe2e0c6885bb4ce5fbf6d622acb4
SHA512 dd52c4b46e8835d19381c28dafe0bf5256934570279ba849d9fe3495a7000db65dc899ea99bf2357f55a870a93329f17b3010b096dbf424da25a17a7c7c47b91

C:\Users\Admin\Documents\OneNote Notebooks\Quick Notes.one

MD5 b3280c83e10676b5d90f547b5563685f
SHA1 e21cb2b91f2044c886d41496411ce8b592f53c52
SHA256 0b935a4fc7f351c3558dd78751ce6f9777cddd27000d8a68f783a680bbd9f42c
SHA512 3eac3c3246664c53a1cb2cc0be33ceddca7b5f5a4f3bee2bea3f1e284740d785e59c386e4718afea0ca957cb69bc359a228f3102fe151da272faa787c7e1020d

C:\Users\Admin\Documents\WatchSelect.mhtml

MD5 666325240f1a341ee76a9cc761f548af
SHA1 82903baca7ad7769b9e62158bf14706d53b64c68
SHA256 9ecfbc3ceb827296c85f4cf5ae7a2946cf2044cf4f354b12d142dac52bd143a9
SHA512 a36f3a617c84fbea1dda02284c381e31f58e17face16f6f375c8c19fa5f820b7e2ccb06f7c7455988a98c30a0946aa5137cd0b11aa01110dcf0e5088cb51236f

C:\Users\Admin\Documents\UseSearch.pps

MD5 45f633dec840a74ca4a4e22fe891b2f0
SHA1 0c82bd77e623d133c233ef38562207fb9fbbafb8
SHA256 25a2fca1576a828cfa738288db22a97ac4a2a4bcfdaf8a7fda320462d80ea2ea
SHA512 efc2d3d27418d32f883527620a5007295a2ba12511da144523914c48b325fade6d44b24fbe0f8a895218dd12125dff8b9cae00ac8e925d6893eeba3e822f354b

C:\Users\Admin\Documents\UnpublishRedo.vst

MD5 12461a6ca87ba440944d344797239ed7
SHA1 25c5d0dd01a4b8706aaad6c950e3e78968560136
SHA256 1079229d5c7dd4cd700db785c653df3628872cc6d224b3e8cb2cadd0697f6335
SHA512 810dc115ff10e8ebe367643eb52c7bd1261920c5048736d1c57e73728cf6e9fbaf225d6c9b2f69e44694cfefbaf051dffc29f0bed367092349564f68c20c4f31

C:\Users\Admin\Documents\TraceResume.html

MD5 e5051223dea5f3cf9b628a7bc401f02d
SHA1 05221fa2f9106f7ac011c52ddbae6e9d485a7dc3
SHA256 259469383b38bc4359228afa923b32efdbf68c6d2eb68b47ca9aaa210472da42
SHA512 37129dc5d93da7f2d4a8d42b19d1ce16fa7ccaaa3f64fb3bc3e99a20ac478fd5baefad2b71e45739f9bb2e737f9cf3a850cd5234fec371d1fcc83cee423d2ea1

C:\Users\Admin\Documents\SyncResume.wps

MD5 d9ddb7f56c13660ec38147c600c7c9fc
SHA1 d7aadeedc7e49592c7b11450d1ac83bb8bf2ebdd
SHA256 58643c84ea2a9b207eb567e654c123b4eccf866e47ebd7cf92d4c203614c1076
SHA512 38481bc8619f2771566ee0decd5f8f556ba92d52298dd56c0c0ae937a1e602c12669a0c192addbeb99ef070fcf6858501d867a896373bbec364d9ad08279b9a3

C:\Users\Admin\Documents\SyncFind.xml

MD5 d17a358f8f2fbfe6b7af060b5505e2ee
SHA1 24f6bbd831028d415770bd4f70cf5976df2c523d
SHA256 6ba438557c531f36e84aad2eccebe9bede588532c26d698260ac993b7ff9bbb7
SHA512 048d2dad9d14d298ad59b8a9a9e5d60b74270eab10089edfe32d063b78b68e1e087f7572acf91795ee4464dc3dce9934ebfeef8f594b51019b59f19767b17040

C:\Users\Admin\Documents\SuspendPush.xls

MD5 45ec6ffdb65bce7cdb20161aa4e25917
SHA1 33705a3fcda6d207691735c0cbccfd330bc80850
SHA256 e7594d073b206f75c1004672285dbd2618a2733425dcfe1cf8a298902de31d8d
SHA512 a721a2db693f8e0865f3c204b775231c649e16db1b122185d7d453a3961ece7655559bdb73b9b1d9ddf904fc07c029e016f900f37b4157e00f37bea206fa87de

C:\Users\Admin\Documents\StopImport.odp

MD5 184a94b36f4714bede9f46db1d30cb9a
SHA1 30477445ffa2e8e218240086deffe6213c23255a
SHA256 271eacbba085bc83feff1b1dc0eddf6df2924b99a90dfa4e2dab02381d18beaf
SHA512 0bff4eaa07a2ced2715ec378d711c6d2001951e2d919db48a4a23a55a3a6eccd8b1f674b110cc3dd1057d6a6a26fca2f025ebd1a359955b1ab7dddccff1a18c4

C:\Users\Admin\Documents\SplitGroup.csv

MD5 ecd2e9a9d3988214125e7a1c47d0c990
SHA1 40fe80f0dd0d04edb8cf42d71bcb4d6d3e9a5f90
SHA256 034b534b92fe9905fb589b982352f6dfdd04e5712b3c572ccfb708ed38731265
SHA512 bfae000b5900fa2b0928bfd7791040ea6ee01e163dded2d25b7cd6748d56cd06aeb55a06cc6cb07999889ec9ea6685219cfbb6bf6fcdcb0dae998053e734c78d

C:\Users\Admin\Documents\ShowInitialize.pptm

MD5 f1dc916339e9595ece7987d366c15ddb
SHA1 d5c6cef5a1cfca031553c510900fc86c35e34bae
SHA256 edd5fdfde516e8825512a3979e3056926928a59c181fb3957c648e774b233849
SHA512 55189a70a537107d45d49ee247fa46f4eca3ce5e33d4bc87c16702486b8f87c290e865b91ec9726644b85c05041279d286bbe02d5a20254f8d36116ae5260091

C:\Users\Admin\Documents\SaveUpdate.dotm

MD5 421ba08bad096858dc2cfddef3ae5dfa
SHA1 47e5256a61b9c645a8a49ade664353a952770d50
SHA256 737ec49ee782bda37f7322fc0190ca951a69659b2efa2c9763686ebaa8d8319b
SHA512 2e9d3a50f7b4f680714257afe84af42965cd8dc67794a1706eb2a78aecaea542bda292a41c3487c35e738951a1353e41babb7a04a4f94f56275607cd2eb62821

C:\Users\Admin\Documents\ResumeNew.vstx

MD5 ded9d79692df0e7069794d14773e139e
SHA1 c350a1757163e2aee38b498d8484e7e154c0bba9
SHA256 c84d5580050eb91db1735885d0f64bdd729e1b8b35c3b310ed2b6494a9380221
SHA512 ea9da074de6862fb5e004958d5d0ec25332ac4e2a7beb9af469ee6e454ebd7764daa5f35012b842d65e8c3cc2ea2046c796a0f69793463ae1c83aaf9a1d84ec7

C:\Users\Admin\Documents\ResetSearch.docx

MD5 681a15a5ad5b8f53ca918965dfb97cfb
SHA1 ec91a0dfb0fa08b9deefbf96ac8208321704439d
SHA256 fee49779e7835ead530e0449aabe33d4ab09b27eeb2155d7c4b21f305d23da9a
SHA512 3d3f047d018b6790eec15d4f0ab81883753604e87ed96fd9b54392d4cb60e5d02cd438c3496fe09a70784c6a67799aa7460582ba85675dd8d065bc8f7c10af1f

C:\Users\Admin\Documents\RedoPop.docx

MD5 bc939f8d50a34194141c27a7e48ef879
SHA1 7714bdc1e273fb5521ba810ce87eca1423c7e8e0
SHA256 36da3aa546fee87f31435be8483f0751704baa66b83a672da174db1121d7eb83
SHA512 9fb85968c7aa4a09544110bd73d9b2e1fb8b255b594d479fd9efb329e1407c0328201a12c81e4a9f184b6b36759d46c35f61806612c4fa0ab92c8e688f6ac3f3

C:\Users\Admin\Documents\PublishOut.vstx

MD5 7cae671692c05339ebe4d9ab5d47f362
SHA1 140579042c7013ebe70c745e9d8f6a83f7cf1ee0
SHA256 f2f6ebf48f795fa8529962dfc9035b2e7754390f0ffa6edf623449fd208e1ae8
SHA512 68b176e13e7eb8697a3ebc24621e1fbfa7bb2008170c1a32f8ea7ab12799e2e91439cae454fbe9ac71d3456adcb15bea46058d6a9f6cecc1d96283ab451e1b24

C:\Users\Admin\Documents\PublishClose.dotm

MD5 ae77af85cf7ecd3dc1661a8f47940052
SHA1 9278752b5f0e80f4b9c49ae7aedf7b65c6303cf4
SHA256 2fa20733a244cbd02160256cb0636a3b5298939679e30fbe242287daf086a5da
SHA512 58b6ba47eae80fa859870fdd81d153edd50ccedc0b807db03459927a1b5ec13f185f1220b94c586d3b926e68fb80fe3652dd4e1174121d046453dae163aeb81b

C:\Users\Admin\Documents\PopConvertFrom.docx

MD5 4a6b12c9a32e32dc521de5298fb96443
SHA1 c0c11c49105c691aba083956ff1859fd72a9b52c
SHA256 87cd930804fee6a1dd72a2eecf70fac886e70098915f0d6b1b822ee93018c4a9
SHA512 85535507ac7a913f6aa5765b762261b70c9bd11e81178529dff2e798368676f922620aa8eaf36c4b188c08b4b672b92f1e87122406876b551d2c243aa9387e89

C:\Users\Admin\Documents\OutHide.vsdx

MD5 f911c8f58ff0064b01bb785a4ad2ebaa
SHA1 ae5d6740df94a8f2c77ec65610f46982a1638edb
SHA256 e2ff59a1c8f306e18972ab800fb68556e7a98022fce291071846d1a671797276
SHA512 94113a5166fc89056bd35a3ef275a3f87a3da2630f6b2523b66b2d5f9ed45e5a952f39c05258d0fec5fe926131a97b579ba96edabcb8b4f2b5f1704112dafa05

C:\Users\Admin\Documents\MountMove.vst

MD5 eeb6d46c89201a8264114648555c7699
SHA1 dab0905074e045487668c5d69593c5d593a6f574
SHA256 70af5cc936bcedb15fdf02e9e27712cfbd8de8cf1c3ff719eeacf698a7d48d00
SHA512 ebbac5a9b56b159285f4947f3e34c5cae4313289ddcf15a4550ae4bd93297249d1740f210fd99f9106c4377b0665f5d09e2a7ccfe529b50d3a96ec3a3ebe7ce2

C:\Users\Admin\Documents\MountClose.vsdm

MD5 8f92469b38166c39d33f0ab3ceef86c1
SHA1 e33d11d3fc6b2b94939dac57a36c64dd5337c5ca
SHA256 62bfabac4aa8ddc48f0ba8ecf7475027b07dc5855f8edb3401dcfad022c2ef4e
SHA512 22936d67c78afb9e3f778acd87454b5a847643352b18339e6c2a4ef7881a6989d456676d23b04099b65771a6e32ca1263c4b4c3401a223536882a199ee575c7b

C:\Users\Admin\Documents\MeasureSelect.xlsm

MD5 411f5626eb8b8e90f03ced2be45d4555
SHA1 60f8a48d3d3089fc7ef1c098b7dc10a3c1622701
SHA256 7305284617e57084a92bb2205fa2401816c16770f2213fb928ddf49330817708
SHA512 5570a124fffb18f72dc38e7e22b87a888b7d4728d86f338e6a992ce1cad04e3bcbe2162f747866d9a757bb7248ac73bda9d344303fabade2b47cccc1c0693f09

C:\Users\Admin\Documents\MeasureOpen.pot

MD5 7a698fb7112e105505c2a9b5fbedbddf
SHA1 359571b6c8708d0b6a66ee032daf63979d501baa
SHA256 1c693e5e05366c2f18adb2098aea5c276c1dcd9201ce41fb46d211e0ace59b74
SHA512 c58905cc0d5e2fa37423be71b088d90a7479d905830a3bffefccfeb40cf75ccbed3669b8cca78f436552377264c310e88fb4919fdd34af536e61e36d254dce84

C:\Users\Admin\Documents\MeasureDebug.vsdm

MD5 aacff3a7db891be98f2d61847ca3043d
SHA1 b1b853088520491acfa56ba644833b3e254b0bb7
SHA256 77af2c52b8fd99a421e759b32dba64ab41bfa6203170d80c3582e5a615565d68
SHA512 dacc7f37d90f5e926f4783324bb8d4f7f047ea8ea9c49fe9e490e64bc70102b8070d72e35c69eb9ffcf7742de1779bc0948bcc00396cf35c75bf83bb91f57382

C:\Users\Admin\Documents\InvokeUninstall.vsx

MD5 cbeed1757c9133f9312377e8707d60ab
SHA1 6b3fdf963a9df244618924e84f0e65eff934a8a9
SHA256 3e82a45395ef82a35ef0106ab93cc6cde9309b2d2cbc14fc93bac03a6ff5e613
SHA512 574c28dc9bd2e15dee67104ea99b97c68e807a79cf459ed5cf80c3c8754cb5d22db7e954a56fa93c9b331e966e4cd3dd5febad8f0a55338ea329a8ae5b939162

C:\Users\Admin\Documents\InstallSplit.vssx

MD5 100c8fe04fdf1386911abbf2157d49fa
SHA1 150ce23fad2f36b9c5809fd6671a3b4dc5ef2784
SHA256 da16820928a466d8d91908defb65ce1d46449b1dc2ed0791c8a4ec7300c86b45
SHA512 39a82b46fe1d35eca048ca036b9b3e5ace5e0665e34615af1ec02f7ddef8289090088a9e92efcec9b8ca04e51f2c34053bc49e19e06a593ee2f84ee35b75bbf9

C:\Users\Admin\Documents\InitializeStep.docm

MD5 548a64e1036d443aeba98b16fefefe7a
SHA1 a924509102f9ba120a43287e234e7ba9a6c35f06
SHA256 db8db6fd8326c6a16c9d92f839917bf0fddfea33ff29fad9f874bbe686cc655e
SHA512 d94736d807fe1f45732349160921e591ab03ccf4e600edb103d0adab0bf9c5c432cb106f9e7bf57277b9dad984d57a2577619c8a0deb5eeadd65a1d0b0666c70

C:\Users\Admin\Documents\InitializeSplit.xlsx

MD5 1e3e0429a583f115e1f0617a83db3303
SHA1 69416b468bee5330a8aa53e11d2ae5b703b2d572
SHA256 cbc9c9dce96c1e86e6a5cd0f01bc935606669e59d1e7974a515309b9aa45efcc
SHA512 82fe8d32582b19e38f9e4d923a3000cb88b29e89dd6688b01b7f31b98f90606a2c044309f012578e8ce8092b25c2ac72d7233f557c0c9cb73509855e890fa992

C:\Users\Admin\Documents\GrantSet.xps

MD5 536682daae32871ae1819a4a8765c58e
SHA1 7f59cde7f92ae7aba08170a54641a55819609124
SHA256 75fd46cfc9159b154e32b28c967f0cf3f2f1e9ca82bcb2dc51117dcf71d133e6
SHA512 18d942ca1e7765c3cd5b7f92113ea70d5286f9876fc8c0f602725eda1ae7cedf54690a982d287136eb7945abcd85b3da2ba849c31c662fb7392f2fd742ce9a0b

C:\Users\Admin\Documents\EnterGrant.potm

MD5 205c37ede320f9caa0db2c227f7303cc
SHA1 9b2dd00c4287db3bbce7ce5bb9a77113a6c5641b
SHA256 852524becab939fb0303d3907c4c4fbe21690fedf5a10c29d8870ab3979b86ae
SHA512 ebbe1481e5707d187558a4fa3c7bdf2952b1b07149f1df7f083218fdcec96064f28850ecfe0d9790fb5849c2264668a63a66d94417f4af485668f6a1a184bc35

C:\Users\Admin\Documents\EditCopy.vsdm

MD5 9c39c4517eb510a5e959a2993666393f
SHA1 d30b32a0add8f9ba775b2a10e4a1474b07075c64
SHA256 578680786287681a8634c615c0f5602e2f00760af5fb587391858d4bff344f96
SHA512 1c19ff4eaa4875fd2244db2a2e1872256274df20e4dd230841263c4968aebd1f81d486358bd1c42350d857af183c2a29db5b091036d8e0a8a3dc8f76b7edfaf6

C:\Users\Admin\Documents\DisconnectStart.vssx

MD5 42876b4ee740b073cab5abd64bba44a2
SHA1 17f051aa95ca4e53476d0935b18dff4611ca8c3c
SHA256 2c5d9d5ad16b4d966722f72b6101ddbd72c521145601a2eebad69a41d0005798
SHA512 bb2075cab1a6f78355ba8cf3400f402d3cafaef32650937de91ef921fef22761169c9e8d3eccce83585fcd4c499964c81741b1a528fe434261666e4cdc5a0926

C:\Users\Admin\Documents\DisableFormat.vdx

MD5 b47eb3b5094cf90f861ea7a04252620f
SHA1 93df849accaa7eb19bfa17061dae30802a948053
SHA256 41790a62c3f1ba0dd442b18d46a756999d25be6efe11f3ec58c46962591bde1e
SHA512 5be330e6a09db87b04ac0ce4effbf3a0a95fec58d865e456f870e2f20ff2170db60341dae10b9f32cfc9bb26d1201ab7837c957cb7fa718c03806365ae400950

C:\Users\Admin\Documents\CopyConvertFrom.xlsm

MD5 b209ec52a558fd7dea0ab9df35d298a7
SHA1 03b6091416b302ce421d1a9b7faecfaae943e2ec
SHA256 927fe4bd1d20ba9149c4c1ca65fd9994ec4eee1e50c0cc1c0277b6598e9107ef
SHA512 2e592b6a62f188dbe035f48fddc265096a5d29cef4f08c13850e2441e6a93025d5c744e5c23e775b6620e9bc0d9d53c12e25f3e8293101556823a65e6aceae1a

C:\Users\Admin\Documents\ConfirmReceive.dot

MD5 1a08230b047e12101a6b358ca28fbc3e
SHA1 c9fc32b15fafa9ac501bfe4cf59922d62017c8d9
SHA256 e7eccb821f313e44de3d3bbe3171381a2746b8c48d0ac4f1c27e92f4c147fb7a
SHA512 94e573bf8561918cba19770de68fd26b2efc14e3d5d9afc9a7225e19495fe636014001c863847798587caa247817cf486ee10dc4e220c31d0548b3efabaf2e99

C:\Users\Admin\Documents\ConfirmCompress.vsdx

MD5 94a48df7743a88410bc69d1def8590d9
SHA1 85a56dc7d349c7b52f0ee67e44af7febb6c2070d
SHA256 dda71a9ec3a0fa550b2281daa350d4ed4a4016cc6c7a0ba5b4f19bbda272d3b7
SHA512 ca3486a4e2eb33d5877eae16e73155937d883e9e1157553799bc2493296cf0ef55a46ef8ca7f7dfd487c2442db55f80bbdae114640cba89f5cc5f51afff92d94

C:\Users\Admin\Documents\CloseTrace.doc

MD5 be321322557a9276617bd761c94ee98b
SHA1 183cb8d5721a2e919c92fc63968f19e57b62495f
SHA256 6a56df785584f15e61de358157edeb8e726bc5673b2378f7c39c997ba65bda0f
SHA512 32454e521bbb494569129c86e696725ae6842bfa9b1af0e6bd22254789fb7de45dcb32076764f6e4458b74769df3ba9e955e1e031e46f0285b8dfcdb4d52d3bd

C:\Users\Admin\Documents\ClosePublish.vstx

MD5 0e8c780722e24faf9554145e3be43dc5
SHA1 8a19d289473f4cdb26830f544ff07c90629d0cef
SHA256 561ca331f0447a4c19684fe704fb64b16e889e2a91b1b226ef8745a5b06b2460
SHA512 654332763150d5080c96c2938dbd1139af88cb2b4d8b62009dd0e2426f3fbb6c2ced5f7a95a5a5094cab98217e83e2c6a1030e4f66a38cf29a8430eba5f4a9a5

C:\Users\Admin\Documents\CheckpointUnlock.vsd

MD5 18a87015468630e3ab200ec7ef99a518
SHA1 5cbfc7b0543c0c3c4db7ec525c53c8cba5b96c68
SHA256 c820ffc5a04376dfa6f0b42efbfe754fccc1ee6db62da2d234f209d3cf086d15
SHA512 d010d891f3dd2e603e0812c4975b91243707d7a5e437bea0625801537c957f34a6864cf0190e95e8d1037ed89f696fa88bace43099135e1b1ce5c0a8c9846748

C:\Users\Admin\Documents\BlockWatch.xlsx

MD5 898378c38c0d8692cf7b8bbcbcbdafd5
SHA1 7e22f13ae50c9de1133188c01949f8bb318de419
SHA256 874d34f0c42d075c1a99befe636d5898af9bbfaf7b339e88929d119efe5929d7
SHA512 abd9d4bca45234919893ec4be93efbd4512d2aa621cd89bee96699ab5926b989124003e1fcad22f2fb77b052a5f4ef66c3fd6c1e09c6c8fb3e85a840b66dd5e2

C:\Users\Admin\Documents\BackupFind.xltx

MD5 cb64bff0402b48981c27650cecaeff5e
SHA1 9418214f0fcbdc2516d3124c030ad53f540fc8c8
SHA256 2b6d8ba41eb8c4ad5103c9ee6a3ecb17b9f91909b87dfb743458625441c34256
SHA512 cb87821b99ad740a5fcd46c75d11473140a80a087a077159ea6264057a3fec8477e58bdc6d20da03ca116fa2052e8b3a36f6f3f8ae43e362e3e8ff58c4cdd3a6

C:\Users\Admin\Documents\AddSubmit.pptx

MD5 1772ca2c6ac2a2be1eb84cf716c937c4
SHA1 81854dba1a3421cd9d751d06ff4e732c893854ca
SHA256 cc4350219502a6e068f0a076224301c3891445a22e4f4073ec94477fe8fe0bb3
SHA512 eebbe579e92bdad130862c9f43482602241faec6b3c3a624a54505cc6d704826c66395a5cda9bfd6e8cb739845921a869ffa6d7f4f572fec72a1121ee9122460

C:\Users\Admin\Downloads\UnprotectDisconnect.doc

MD5 bffce9c75d0f71f5fdd10739365c5c02
SHA1 b7603dd7a660d821fa73cc33cac7b99e447d0dea
SHA256 1c06d966973d869fa9ef396857a5070a9048dc4b32f2eec81ec75c4ba2b6598b
SHA512 f8e4e7970e7be815414d02a3de1bbedd9ae9933d430a77b5203846ac914df28de9e292545575f3f1d4320b64838ba0d73098ecd2c3a1018b4c496b2dec0990c3

C:\Users\Admin\Downloads\UnlockDisconnect.vbs

MD5 56c29c4ce4887cef9d710e1fede96c82
SHA1 484523ba5448b5531e14bdc7406f8254780e7792
SHA256 370669ec0b4748ab354dbea8151ae68681b3e6c1806935d12ec88d1f8bb99289
SHA512 3f4e4c0ff833d5cae2062051cf0bda11415c84598b13be26c3d14e2ab44300ef22bf8f4b8a94912cbe8b55c249be72b52f83753e8e04470ab16c33c7a7984343

C:\Users\Admin\Downloads\UninstallPop.cr2

MD5 83ad5b63f285e10ba4d90a4d3b6fb7e8
SHA1 3400b1635f65f5b564af918873800b2e694df01a
SHA256 bc55cd0f58965591eb7cb7d1f66558389f9311bf748fe4f949315453fd3bcc31
SHA512 ee0e4ed2964ebeb82329d4a17dd21e9e23c91cd8640fb302bf0f6092e80299fd4146d7db837a0b3e4fc4614d3081765e0980c84917a735967233312b14736380

C:\Users\Admin\Downloads\TestPublish.docm

MD5 3cfa020fc61ef925555a13afb45a6502
SHA1 c1c47dde592f068dc72cef5689d2954c7dda2849
SHA256 14b65a89ef1c13727b58bcefc922ccbec53194473b2e4ce644b1be02b04005fa
SHA512 45cf3a366f9896bec47ea9e2c756f6b965a57471d73e1b8e8181f960fc300fe99424499f5e32219d220cfff266171b89ef11bf2c599433af78b9d5badecb8211

C:\Users\Admin\Downloads\SyncEnter.7z

MD5 991969bdbefb800f6764f5d04acc54f9
SHA1 cd9d51e4bfedac2b6d9199ffa2926ad7f3b7c591
SHA256 3bcdc35bbf43138230e68fcc5e283a9269896a2483dd6cd951dd0b90b80dc953
SHA512 a18260f9ddb32f8b58704758d939fc0234f030fc63ddae3e272a7c7aefb4464bda073213928591db54615892697edaab89066b7671ec6159e5625b907e416870

C:\Users\Admin\Downloads\SuspendImport.xml

MD5 34fc011f13470e1b1440abe37afd489d
SHA1 5692f1d08e0a7c390277d9e1bf4b0ca9357c2fef
SHA256 da24f9fb70bf71bfd0ddc48eae3017e34837e811b2cb1a40ae739551fbab550f
SHA512 048cf3b8ff9e9fdc5e8242e88564254cb8ace47daa31b31c29cd0cbbd52608fd904f12bee4bdc5b2b1442c83a18e11ace74f4d9df58e33972503db8e5820b5e1

C:\Users\Admin\Downloads\StartClear.ex_

MD5 fa0b5de0280df97559113ebaffd80121
SHA1 cd26151d63a9fa0026131b0af35769a25b48a3ca
SHA256 8f9688b5810da489d99265c8cc77bfd8a42c160c1f6a5c47bc7b8835a55b8e23
SHA512 7125bfaecb1b8f3778d462ec54a5de40d838e548b613a5d82b50cdec6f94eb98824b87cb4ed99e7865ac0c8758ef965e17590f3b7accd527b045150867c52869

C:\Users\Admin\Downloads\SearchSkip.mp2v

MD5 c8a3275ef487348caaf8619295f2604e
SHA1 23450503773d51af4ec14fec9b154edf24c298f0
SHA256 8af16482528a383956b3ca86ea7649a7d8ca6b810ab74de7b6e8ae20e3b7a44d
SHA512 f17e2267c15ca3637aba94f7b6b711ed040284dea0aaf4fa438c7e68ebaa7114d3daa51bbbd4e6b802b117aa9eb86caa9d4e88dd5509ba5883c3bec5a570f89c

C:\Users\Admin\Downloads\RequestDeny.pptx

MD5 880b7c76e914af7697225b1e0e0fd2c2
SHA1 e91e638e806c5749ee04fcf29ff4024ffeaa1e29
SHA256 d5102258d177e09fae9e48c80f1122cee0dd35201b5fde16f83a1470c8c7302c
SHA512 c08799ffcc3e8f1e78934d469bdadaaaa6bb1348876e45f7102d138399794b7efdf0eabe3014a2717b1807052d4902dd6ee7fef73de13789d19f0055b8fcbb88

C:\Users\Admin\Downloads\RenameBlock.vssm

MD5 ec096f4124b22e152e4ee421fd6ed845
SHA1 8ca38532e065f5e371c8d122f4e66ed4b8126868
SHA256 12275ccac3a8cede4e35b9f22a8a687361794b7249b2a87cf03861b55f089351
SHA512 c4b0744ccc7fdd3c6b71bd3367ecafb0532b07bfbc3bf9a37d9ecf75fb914bd49bf78df1feb5436edef2b2ee7181a027f2f3507cb4816c41e274f3ad5aec8622

C:\Users\Admin\Downloads\RemoveComplete.odp

MD5 a994978256540981424f4ce06bf0d33a
SHA1 00ab8c5517cd0fcf6d229dcb4ec28fb7c005c2ce
SHA256 6960c6378efa0c566e30c44d3d37480b112f8577fb8af2723326b2feb35afb12
SHA512 b76778765b209f805b3f8ac268e6189f8975de71e48dd13a0cb9e10eeb2ccbbd0e207b8e20030bdb32be4ac991380da422d1c4366bb69e36760b8b6a2f168e01

C:\Users\Admin\Downloads\ReceiveDisconnect.pot

MD5 dea08ec3c93589182b5d204dc9644968
SHA1 ef3865c042d2803a2c6777fa32b7e2ead430256b
SHA256 7bb9e412350b04da9db292fab679716ac7a48d80380cf0344b578341b9bed356
SHA512 0f4a0b783655dabc3ba439f3b5a369fd19ce2a199c2351205b35a42df102122cced7b36d9d39f1d95ff5a350c45c5bf7fed5259662b0e1dcf3f555eaaf6db51a

C:\Users\Admin\Downloads\PushSend.mpeg

MD5 236949bd25d765685d0d55b90f580bda
SHA1 92694a16f6979c3cc9c58f5e980f09aa32a38181
SHA256 e8719db5394cb75768e715c799ce4764a8fb0a4d9f0c428f361ad1489bfdf44d
SHA512 5b4f71a9313d7a4138150bc7cb0642ae6862bb5adf208b90caa55ccca95af2cf435cd30e56fb3afa45c8a546a1acbfb1d3c480c9500d733ce8d446933910ef2d

C:\Users\Admin\Downloads\OptimizeUnlock.wma

MD5 8e8d8751ce609bd471240839ef62f55c
SHA1 bed8cdbcd6e50f358c9767e72ef9d60745c4ada8
SHA256 4149050ae97b21b22602a7cdd190c01572ef30fac121b6dd60f917956282ca96
SHA512 04e4fcb5674aec1c6e5dc7ce492bc06f8f9364a07b2f8a643bb351bbf58d46bc6b222425bba3d2c708bb7c0f5d80d992ebc67d5bbae61a8e8362d4f4b9599ebd

C:\Users\Admin\Downloads\NewUnblock.php

MD5 3f23733823dedeb89ad8d6b7e4a3790b
SHA1 09389fb57d4489338e2f02c5c80c6db507e469cd
SHA256 5c0db085282437af36f606bb077fab3c96d63fb51dc1e831d84d1fc290ce9822
SHA512 53122131480d9819f5a91e6393f9d8f5e867535f64eb24df3fbf5fde1b723edc93db6dc457cc7a8520b03aca9a45d94adb89aff611d246bad9f057af2a618bf4

C:\Users\Admin\Downloads\NewOptimize.mpeg

MD5 7a5a1781829c310b5bb3376efd114368
SHA1 ed3f9f0eca62c8036ef8d85bc7f5ffe40817a1b7
SHA256 076ab09174bc803329696a1e205ea75684c9c0d00de437635bbc178f02550b11
SHA512 d8a0a3d8d0212bee6b9cd4e4acb764eb70bb0d9de83c3b8629eea9d035fa56f261829f979c2f46963d4fc907d0a2f58e77ced32b82df158ec54eb33436b2ceb3

C:\Users\Admin\Downloads\LockFormat.vssm

MD5 8552e78320f7b73abda5e244d72dd47a
SHA1 de68a1d6b759b1c379eadb8705f2c6281611ea2c
SHA256 aca95fa0d82751481b09f74c18266db806cbd78db56e9c0931ac83df43bc19f4
SHA512 31d88aa2e9ed1e8e7161edda1a18baef719ef5e4531424a942682044d592f0cb8ee6c5e9c727421be78ec4fbc4297029806ed43294d48494a27d996f945d5b22

C:\Users\Admin\Downloads\InvokeEdit.jpg

MD5 0655563a2ee563b732d5dd9606b186b2
SHA1 2f1164ad318917a33965626d7bb6eeeba6bd64f5
SHA256 e3db2dbc93b934d59f74ba56b9f45c5d4bd14ee8568535d6c98572d01b648b19
SHA512 d35ff0383c02d662d8cdb8b4e96146a9e6ade0ccc4d95c536c87c1c6e22e0c4ed1bfbf3d86135b99a136444296d638f38be6b885113c76d089875b14aaa01c30

C:\Users\Admin\Downloads\InstallMount.vbe

MD5 d7564b318475c388418feac904ddae60
SHA1 0503c15eac38730cede26e589e621b59c22e970d
SHA256 363079fe687c2c37d603b3db9df8d47156be5f39a36a67644cede48a71300ca5
SHA512 c93f9c784938b3e8d906ea2284bcbd7b94433ebe8ba87c044ce13080720bc42acc0fe548861b21093c42b2fea0374d7754295afa4f5a4f407d1374a2220bbd66

C:\Users\Admin\Downloads\InitializeRevoke.svg

MD5 18a1013c8b31c214e2f4f4ba02c63e4d
SHA1 73ea1d3593d4e29839519458249496a287b13066
SHA256 0b6562d57fab9c4db3ee37965f4156cb71564369bc6a6f878450866bf558fa09
SHA512 2aaa110ffda42802ace91942397c4a3c40fa81b6a892c34da7a804da5b85aa764c689f5bc2a7158d0a7566c15a5037c505331a8c5e58286984e83aef3f23a892

C:\Users\Admin\Downloads\HideConfirm.ADTS

MD5 4eb768a8bf2e783fd13bab22d3375d01
SHA1 dc318e64eba678d2cb52964c14e69423a1c740ba
SHA256 9c7a2266afdb43cf6c7979e268a230e8b0351c4f759491ad993c6cfb341c0fcf
SHA512 76d156fb8d02d9970d894cc029a2d2463eb2b3eb0709281d39dd3699429894b44ba5a9572aa79176badbbd7c522d29de669ae7422e68b8df0b15ab759dcb15c7

C:\Users\Admin\Downloads\GroupSearch.cr2

MD5 2899c72bc754ccf3360ef7175f76959c
SHA1 20bf99431dd9d906eaaf42d3278a20d7708532dd
SHA256 4e46737168d919cb53e123dfa67b587135c468e65e06c4450a0a138e4e73b185
SHA512 a761bc7fea5da14603c1bb95907a571956aec1613e0ad3c51fbadc393f84c94876cc8f42c9638c22a0b81e7da4810d75ad0dbf331b738e4104b11c8261c7e37c

C:\Users\Admin\Downloads\ExitClear.ADT

MD5 c99cfed953fe402c893b794f08ead399
SHA1 abf20738414bb1cfd93a7fbe7a8bfc359853f98a
SHA256 de7d50eb23368b8c8c8e3573d2806177cf496a7d9f3c926c486067fa2bd859bb
SHA512 bf017b93130fbb1d7d702ce4381147b510810eda82b7b52273f0940aef06af7c0fdc114a0711c6a8ab15592b8ab906147dda98a5c5245d8422398580f8231dee

C:\Users\Admin\Downloads\DebugDeny.rle

MD5 f7bd5a0085ee7e1541a24770e4bf97d2
SHA1 73d2e6327963e4b36e6cd3b3b14fc1a34270a123
SHA256 308c16c1f5743811ddf102ccf58ed748ee59176dabad987b2b9ff9ccc708c448
SHA512 b592b2364c7e6486add2669efd9416dee9e8fe9df9a3a0adcba97db575bf5a80d67416fc8d3b09a4a692ebe8451dc5cf63885abaf3f4cd00d33ec8521fdb0008

C:\Users\Admin\Downloads\ConfirmCopy.pptm

MD5 05fe4fae9d482d3d1c25385a6676a6b2
SHA1 6b9170faf8dd409811a560d65983783c4ccec800
SHA256 09bba50b6da391cc9b879d67be01e49cb70fdf4527e77cd079f7541c63c1789b
SHA512 11c102354483795142d1f989c95256cec32ea7895a5f68a09fe5ac9f34e73e1318982ca3c657b473cc7c9c76b8a5290f97b56c7a84a256bb28f95427bd3b15a3

C:\Users\Admin\Downloads\ClearAdd.bmp

MD5 fc2444cb9766752c29cab7e1d5e25a3d
SHA1 2363d8c22feabef1efd3834ae05948cb7f94e04e
SHA256 31cde18d01e175c505ad943f99ab6cc933d26b20b397d74842f30e8aea771772
SHA512 efb3bffb6037b6d9e3e404a7a14f6e7f78e64f56d94c43f87865373cd50604c8cd5e11334ea4cbbf6d35c5c87dedda06cf7a615dacfc42c205f3ecaed27a509b

C:\Users\Admin\Downloads\CheckpointDisable.rle

MD5 b6080be13d03ddc7190f7c84a0621e73
SHA1 91cc582a4418a64ba8c26740cce33e8417247e9b
SHA256 a2ec7147725c19fa4a11fd09148cde8e2947073bc6fde5f925229c94b9f7e330
SHA512 d826801781c13512e64c96e69619ede8d0efdddcd2b5164393b9704bb0c09ce288cfc822956668544b785b85415493347b35265ee59693000a5f837d4e812354

C:\Users\Admin\Downloads\CheckpointConvertFrom.bmp

MD5 eaa27725f8af1a875f2f27ed277471b8
SHA1 c9732e1a6e297faaed8f6a0ccdba65dce53ead63
SHA256 cba3ac683a1f173269963502915da73461673b55fbf09e3baa1c70bcc8e8b5f6
SHA512 87063b82a54541bbd4ab4ebe6e9ff8bbc3da45a0df6b2d3e5288694dad93476661476dfc3d933104fdcf2003984a0dce59074a2fb3d38394dd5122c99136a6c9

C:\Users\Admin\Downloads\AssertExport.wmv

MD5 f21c2b053d2795c21c4a09c5d040c7be
SHA1 f35df269c70319148de248f9634bdbd8e9dfcdb5
SHA256 3d193fd9edd4f1109c327f3ae3775c1bcf0fd0d1482699d0dc552402116c7222
SHA512 c706c77c691004eeafec9d3d42aa97dc9204832b190360eeb8676a5ed2edc5e945996b86a9c087f6c9b9f29e1be775f04e88e55e499ba56c0d5a7f332b05ae9d

C:\Users\Admin\Downloads\AddWatch.xml

MD5 d97e7f07646660c6a8a3aadbb4c56292
SHA1 469d8452a5fb42914f48a97ffafb503a1297bdbc
SHA256 c4d65b9ee8d7a983c2a1aadb43d68056fb144924976b5a7af840cc14a93723f4
SHA512 283b8f7c689764c45d06073f02fc85fdadf40924502f7dab44e504e8537a2b58aa3b34ce21d0d75de9d84a358c30699a3d24ba493c4b7a1ea5b020add32fb2a5

C:\Users\Admin\Favorites\Bing.url

MD5 5d42dddda9951546c9d43f0062c94d39
SHA1 4af07c23ebb93bad9b96a4279bee29eba46be1ee
SHA256 e0c0a5a360482b5c5ded8fad5706c4c66f215f527851ad87b31380ef6060696e
SHA512 291298b4a42b79c4b7a5a80a1a98a39be9530c17a83960c2cf591b86382448cd32b654a00fc28eab4529df333a634bcdc577aef4a3a0a362e528b08f5221beb1

C:\Users\Admin\Music\UnpublishWait.emf

MD5 284f6aac1f8961f105046013c74fd670
SHA1 c8c06c9afecdfac4853441a98441d1060d126ab6
SHA256 2f9d6a79c5e1059402fa9e8704756baaf9ef3e580acc801f1aa10f2ae7acd713
SHA512 b831d2ffb27cc62d8f1b5e783f6af19144111caddc1e7037fc1d945661b9eb6209a0505c4fbce76814bad38464edbd61594bb05b9d892f9562fd4292c41ac719

C:\Users\Admin\Music\UnlockReset.dxf

MD5 b5c60a3fd3a258dfcb1addec9e6b78a5
SHA1 c61135b1c6a548f20b21e61c42e3244ef5dac294
SHA256 46408d238f3f7e15410aa9d68b14c54cc0983d76521d111559ab880c453be2b9
SHA512 7873dbe9db0aad98dba02910bb433700e0925f6d70238a8ceaa376bfa437363682e310128a9495f9ac59280bc55091676c6ec38ddb8b42891f2542de47f7eb21

C:\Users\Admin\Music\UninstallSet.kix

MD5 a04aed1019fc017b196817033f439dc8
SHA1 a68634151ca525ecabf90d7fe5758665edfbb9fb
SHA256 f8ec31aeb0d31f709c1a61ca342cbe0d5960dfd8eb6d2e91eb8f690ac493939d
SHA512 b0603a888d1df9e7d1b6aa31b9bc7e1632bbd1483cadfa00fec6d190e647ec90ffe472a9a8aa52cd1b1bec8dc3a37319625ac4a6cf279c722b9dcffea44761c3

C:\Users\Admin\Music\UndoFormat.mpe

MD5 6ed1661c0bc6b10add7e5f003004fbcc
SHA1 51df5f8c02c9b5be81f5bb24d3f7465b4b60544e
SHA256 ac3a5d68f89d08905f593047bda3da1d7f420aedef289887ac9e720b68518acc
SHA512 ca7f54665055b900da97d9b1eea9effad2072a0f758d8fe5727a2057128df8152844df230bf4ac2a1cd897bab15e444286e4c796cf2f4807f78888f8eb557f8e

C:\Users\Admin\Music\UndoApprove.potx

MD5 07725dc4fb4938a160b44b77609d5b78
SHA1 de0aed83d73b9488bb7216dd143de7f11e343b53
SHA256 31a2b1136ad6b704eac618ab0a1d092e7543a8bda519d782225b95915627fd13
SHA512 63dcaacca8243bab1c31e85a207ddbac9fbdd96ee3b213e6befc1b34cd573c193fa76d36fdae4ee1abc804ba820f7174f1e7fe7d62b22bcc80050f7cb6a8cde9

C:\Users\Admin\Music\UnblockConvert.midi

MD5 a707896af4f126df920613af6c4235a2
SHA1 182ca8f2b01dbd0322d93ee3e66f2ae2a8ee7953
SHA256 7e9f72d649e40fd863753d26f39d55b6c7cd76c7f41e3fcf9f161406b25dc997
SHA512 fb9f0ba810340873f30ed2bd9b37a16bd9df9860f36c0ce444af60c1ffeb43b6b82056f69009c48abc692a6a6266409ff98deb5aef3162a7f7addc44e8e33d21

C:\Users\Admin\Music\TraceResolve.mp4

MD5 d582a87c3232b8bc5faf529c8a8c74f2
SHA1 98d3fd2f4964f26b28afe09fe17fd506b9aab0b6
SHA256 d6d0d7faec71132ee00f8722cf9757a8237174d6e21a1e13660b708da5fdcd1e
SHA512 4036c947d811d32fc696552945c58c41a3f680a533b79eaf7c21c60287ef27d8b581ecd9c41e511e0332aa12b2e0816d0ee31b7e930ab4c28e8030747f69732f

C:\Users\Admin\Music\SyncConvert.emz

MD5 a6480db9d71b1fc56c3cb574511c2f4d
SHA1 3c73eeebf64bcc3f9da81c2ceb67d3e7bcceeb75
SHA256 77df62e6c8c93fba44b66865920c958074d7c2c82f809ab276d834bf09bdfe61
SHA512 d49a74b40ecf73c5727011057169a2b6deeba84daccb7cca3c6bdd6a0e36b60871c6906bee24a515e44a96fee1cccd4e504499d26ed7094758731ab551c0ae13

C:\Users\Admin\Music\StopTrace.xml

MD5 a919ff22ef87a7ce10f3c20aee7ef61d
SHA1 983ebc6397d48654dc1a66ae0999f601f0f00ba2
SHA256 d2599b6e719242412ce0711cd63c8f7db3072a482c55d5ea33b965e376cf550d
SHA512 a663c192a1fb25330a8bc3b9c4d41d8a41a03211f5b9d6d814ba902fc4ebed2a245474003ebf348314428a3232d1139472a4a3cbaeabc455cb6981c82e354914

C:\Users\Admin\Music\StartSplit.mov

MD5 79c86f97ece996180110c414c5670b4c
SHA1 009ff4806d30d0f3cb88970e79a19a9561d08c8f
SHA256 45f82c317f1fd59d6ffbd8da07424183cf68b2d44e95cf0ebf1d5390d1856e60
SHA512 f62d259000ef3fda2a6d5a5369098fde9a20001bf28a26a9dc3d748f63050e91cb288c0cbd2d4927c5571a4297faf1b4ac47866135de815ac1a664853237cda1

C:\Users\Admin\Music\SkipHide.rle

MD5 e942bbd8ed24f5b7b87adeb408c17beb
SHA1 5d1061913e7d58e3368dee0b466fa725197abdc6
SHA256 f22ad1214ac3f5fb3d03e35345e6329fcf776040ff9f5eabf5b5011013ed6121
SHA512 e4208d6166b6155a7078f53868f00f488f02bcf159102c9bffb381adeb712288caf0b1c39cb1386bf95a7083dea8e887b87eff3317f1ab7389eabe13386c8b34

C:\Users\Admin\Music\SendSubmit.png

MD5 273a130722a2a58d2a0a630de4308bc2
SHA1 910070fbba919dadec3ed5d833620ca6a37f4f7a
SHA256 07a195c2160e1248861a2f34c9855906dd74220c9e01e4869e15c4299c424c96
SHA512 58b0a0365d0fbde72c26636212316f4dc58aad17b5960f957f98db0c287b6dc16ccd9159827d5bf03ffcf4a07d3919e54880945f504ee1951cc15580d4beb359

C:\Users\Admin\Music\SelectRevoke.mpeg3

MD5 60368cff63c0e36ea724bd4be9584532
SHA1 6ec67530ceeecd091638d0ffb6743d1b8c1a4a13
SHA256 210866e58e527a5b06b052bd1c5f447f7c8ef71bd93f25c56b8996e8e23b0f99
SHA512 433e302fbfb9a7e789344e3a9191d89b12d7747dbde675323ec02b7af2ad77dbafab0927be5e71869c8d0496b7ec66ef13b2b1cef99c2da926e7e5b6283dbae5

C:\Users\Admin\Music\RevokeConvert.html

MD5 2e26c1b31862b9c23003318d9bb402ff
SHA1 d8cfc623bf333d87b7be771363e408452def3055
SHA256 a2f1d8ae5b13bdc8abfbe5def148f2ea9586a3b55a830ec9802937981bd234c2
SHA512 a529e142ea8d324c17f69cf3c0f22830727f5a6536bcdd8849bcae48fccde619e6f94de04b84bd545f0f1fd7608d5163a8523e9c0062206f77cf84ed41edbf91

C:\Users\Admin\Music\ResetOut.xht

MD5 922a53d9aed59441ea6202c2db4a30b1
SHA1 cb397f7fd42da7607b353bde45c5b513db936d2d
SHA256 0c11bb8242e821f31910c21a832b7205818f028b61b4b89d4b6e0534fbf98793
SHA512 4f43a542a23e988306a4b80b726c15d4f1a33a00649b3f02713b8a86d52606a6be657c4030530a0d0ef3fe1afea08b419f11ed9d960d2e6aca3b87452af2da47

C:\Users\Admin\Music\RequestResize.rmi

MD5 e6dfdca60e57a4e877a21440c0d46cef
SHA1 dddfab4e531980d62b025e1838686b1ecf0d3547
SHA256 8c4778cb091a5c34e2f9a1d90f9792ef2efd5a7b0f9b56fd653dc7babb7f2956
SHA512 bfc4bd4b3096bdbf5613399d1ee179195d646aa749f68227c9ad3b382cb5947440f168c5eeb91a5b633789feff155a71062ceb76776754753c864278f5d438d5

C:\Users\Admin\Music\RedoGet.au3

MD5 6ed82282bb894233343090e616a23ae5
SHA1 a99542656e1fabdf62e25942aae2c38cb385fb8c
SHA256 5c343b5aa3e038ccfc2511a600f28fbbb915ab714d2d57c333c97116c6268e8c
SHA512 2d1d3877b36a98bb24a6a2692368c3eb070db5c102a17b7f9607578015c27ba7d5317fde2562afeeb1fd2ca6dc0b2867cb0dd03a42ad71c7e43f16d42ab246ca

C:\Users\Admin\Music\OpenDismount.WTV

MD5 6545933fb2209d717219a7616130d9e7
SHA1 6b3feb2adb5876dfbf82acf4900fd6d2a9055878
SHA256 1d090e4a79ac4eeba0009e5ff6f3174e4bf8a0a953765d7f53da2162bfc922ad
SHA512 5b61e5a7d9c6621a26c9bfb1d9682828229f0b0e4e36f151c8f99a590f2ca966757b3af7272f6da9280f66452a6864736bcfda5acc56a83c9a44fdc153136f97

C:\Users\Admin\Music\MoveInvoke.gif

MD5 6d46b8ceb1b67340a01c30887008f6da
SHA1 3ff717f760d2c2b96dbb2cd5ec1c727353985c9c
SHA256 1eb11ee8e83e2d7f57950b1139e1e69df0250a8b921d725f090521167be7ef5c
SHA512 b9673cdb5b99148d6da9c484b765ccdc9154a3d16e07fece44481b892414ded80832d9e1c56d1b44ce6cbf37fd7558b2b536b17b55031e2aa8bec86cf4f59e45

C:\Users\Admin\Music\GrantConnect.wmv

MD5 b12fdd5ea94d08568334e3b8da52dda4
SHA1 2966606a8b5f08be45b1d0b3169e12598007237f
SHA256 185d152a8e2d398cc70ac57b88c15f3304ef0004ea2ce1839b0d3b185e22acef
SHA512 f3e7e992982d7307790f1ba757179b0d92d4b7d1ac44f0c4301dd576012094eade6e88c14227b76e5ddbba8adcd89033e30f0f6ae8d78aac33fbbd89ef4b19eb

C:\Users\Admin\Music\ExpandUninstall.potm

MD5 8b019a2d5874002210909803e99f2d73
SHA1 26b19d16a243e862ea5aada009b500f0b5467581
SHA256 3bc7f507cc97297f7318d580b56450bbd1a1d9443d9bdd87a757340162c011f8
SHA512 a5398093f2f5cee5809fec917271cbafbe8fabf0d0de77b27c126b14bb3604b61dba539edcaecc4e4308167de99ec0190450064327c89715e01b61872b70b169

C:\Users\Admin\Music\DebugRestore.iso

MD5 59ec7328a03a61fdf0f2e3c03be939b8
SHA1 cffef0a8c3faa2bc901ca5e031f93e25308bacc8
SHA256 e49f2eaec052d0fe3d47a48362b21a034a8d4d4ae74682df002c3e9679563f3b
SHA512 e542b51b6384d682191b3bdc5ce4cb6bf9f33a623438c6200ce51433997aeb232d6ea2b0277c50bccdaba0989d5d85e1b560b1f180db3ee9202be8e811346f82

C:\Users\Admin\Music\CopyRead.7z

MD5 79efd4c383da283015d226a9e2f3326c
SHA1 026ddaaced0c2ae3b04f03eddaf6cfead7d5aef4
SHA256 b601e7ea8aa070ad094a0479e8d9a1e02dd1dd859a77dadfd12ae783e4da9ce8
SHA512 b2c4a194756adde582df56951db48afb5b85b70bcfec7da401a8bb087e1eda0d9208e3ad18169ec7f3fcf9162635fc9a30d6141eff38eafed7467f45a8a9e885

C:\Users\Admin\Music\AssertConvertFrom.mp2

MD5 ab8defa14e2b65912c945b4840569f51
SHA1 06e0b6516946612993e941fa4c273aee6468e0c5
SHA256 d4c27647e61af2533a352e06e4aeaad54dadf1d2ced83d366e6dc00f4f90e1a3
SHA512 df9536d7b3d6bce796fc90d2f4da8b2f33271161008a1b0a44c121261b0cb3ab640f07c945961a3037d73be6a404ef6ac8c4ab79cdd4d467de0109efe6b6ca5b

C:\Users\Admin\Pictures\UndoReset.crw

MD5 5ffd86da757b1ebe7d4e23f8cc13d7ae
SHA1 936285193239b77ab8e16b1c7e73ac3edb5089bd
SHA256 671223c72c073e721795dd216f2ecfe0f85ea88a8fae43bfa1413f95e77b8094
SHA512 bcde9b1e9b69c09d1c2232018e4565d3aa02af50cb4601c31009cc45f18f8739b89fcda4e09cfce6490ff37003c90425800d28b5cbde32c3d216fabf7ac39e1a

C:\Users\Admin\Pictures\UndoDisconnect.emz

MD5 04e8a3e21f02c99ad5ca2992acc98e0c
SHA1 916e481c41f3ab87f3aa196f185e8eb74add11ec
SHA256 f7ada956cf284ae74e7836c2264f3f9f9dc36e9e1a65fc08053a6869e6b23c32
SHA512 0ec31e37d6e3a6af2a10bee0761642e7b7765d443c7382312e9c7f233b0aa9613e013bf59f19155248996114e9ac2ee1bc3400520df3b8b80805e469a6676745

C:\Users\Admin\Pictures\UndoCompare.jpeg

MD5 6c0eb81e8a11ec629479907fbea409ad
SHA1 09e8d62c266c468e14fbca8b15d2d28fea3c143c
SHA256 2541743769ddc006b9330274e9b790727892703649989ffc5deb0e1f0d48c516
SHA512 beb20a5255f94313ce522eb1f3d14c88a302acde1f5606d8d44fb38a63ba5517b66808b87a4f63399896f7d22da4a4efb8b0b134dde429bb54952652dd74e21f

C:\Users\Admin\Pictures\SyncBackup.jpg

MD5 8442be2df951bc493e6856fa18976126
SHA1 2a47805db49791433a6bc838ee58076f94e6b003
SHA256 95ba06949e4b0fa36f250069c9d5fb6a7f995c6a2a699ca9f819a05cb0333883
SHA512 6b026d1c7230882bfe3117c0bad377605695343aa21bed01d217c7b3a5bc555debe014be42b1d1ba9dab8608c957375dd7df639409f918edcaf1614573db82e7

C:\Users\Admin\Pictures\SubmitSend.jpeg

MD5 f8abe0e2908faa5ff8ef2878631dc1f6
SHA1 81bf580458eda2607063ee282a4fec0cef0ac5b6
SHA256 4ed421fef297ac526bb1ea997a75849763d1fcf94d605e68ef6ea7e037704746
SHA512 a832947850a466d99773ac72e201973fc8ff79234b0882e062bae172c9ce16df328afa99d3663bd98fc3affe44534ea5f990f73afbc07a5a0f9295eb6c17c353

C:\Users\Admin\Pictures\StartSet.emf

MD5 ef4d0bb81d9c86030cdca3550d50dfe1
SHA1 d6fe074a356e6a2a0c1254e7c17c05e6953d9106
SHA256 940f2b5b3da20be4e12896aabc336abc4151ac33dc567774e019bfb7fbda3815
SHA512 8615881f01660d6043a51f43ba780f9409243fedb4f052fcdf92e70030b290e804a3bd57bb67c0f5a6c49c8a3798e29ae99fa93a65cc03ef5791deeedab5aa2c

C:\Users\Admin\Pictures\SendProtect.dxf

MD5 500f29a2cf2e68dbd7c37b8b430a94d9
SHA1 79e44f815e280c835874f0f1ca33411cc69c873d
SHA256 6bfc90c5e92c1b1e4d02bb958e22d2f57bb0dd6ae23ce2de8d5c91cc46849233
SHA512 cc743390ef536d395d4b9cfc91492d7ff8af4fa3d5e8436e1aa548a4760d08c7c0bf7b9bb5bf014a0517d029ffd2ca01595a52d9ee8c834806f8fa858d436e40

C:\Users\Admin\Pictures\SaveRemove.png

MD5 adcc44669f0f414b374dbe3f1f3e3a27
SHA1 c84326af1fe1a68f06bbdf0c6b4fd367e2ce9942
SHA256 b763701eb0c7e352265a34a0b690d1c31125d7816aae3e2ffa867f107469ce17
SHA512 46caf0546e906a9a1731ad29184dcd3b9fc73e8f288dd5aa0b30ac8e317192320ec9d971f2530ef824440578e04c1d848cefde1c93b8e7b971d136166b957ac8

C:\Users\Admin\Pictures\SaveEnter.raw

MD5 64e648ca9b95496a9fde7e610683c137
SHA1 d29fd0c5babb39df58a0c542b77c433f5916754a
SHA256 58e6303e7d2123a583d5d265e7d2e85ce8fd815c86b9205f84a5137306ba675d
SHA512 81128998fd2b2189d4b074efa19f933aacb1ee90a109c4716b30695b53eb567a29ff58f856e913b7cbe5159eafb58402d3c61fb13baf9cf7289a7f9bba33f31e

C:\Users\Admin\Pictures\PublishSend.jpeg

MD5 aa84c044825eaa34e8a15003a40ca628
SHA1 b219f3b1a6bda9f0a54b22cbc5c87a9535cafbd7
SHA256 eb8e8355d57eadfe1f316d4c326d489a9ed6f86ddb27a139ac2f21951f4c9a3b
SHA512 1ce953752f7526eb7b5a46a0d167548d20113b876a8615b4941286c6163fb65e69b89eb07f65b51ddae3d82a8e616d8b8f95074782528515b6e19bf1e392929b

C:\Users\Admin\Pictures\PingNew.crw

MD5 880a4ddbe715e7812188787ee24ba9f8
SHA1 ede09f7b549e9b3846082106d4e8245e8297930c
SHA256 212e35109dd1227093ef3b4399e93bc6d6521fe7dbe4bfa35623dd491bf7a0a6
SHA512 f590eb669c03833dba1fb7fa96c0052aca4623b7c3c9a5864cddbe5cf6de9292f07b8c6b8932ccf549dc9f4ec28f99e7f6ffcbd3897eb832cf9bc232efc3dc2d

C:\Users\Admin\Pictures\OutSet.dxf

MD5 c7950f32b02d1b48004c2778a1c24edc
SHA1 2251b8e13dd80b4f6eb7a4d64f45a10871cbe0fc
SHA256 5b785aac4226cc84634506dd53043b0542152cc9445a221151f968da4e5239d0
SHA512 85ca4c267696df96c921607706646837cd3acf1db4554b70384e7a62073033cb390e9b3a8774cc9028aa65187294807b2de14688c8170213a856b54df20fbd4c

C:\Users\Admin\Pictures\My Wallpaper.jpg

MD5 a51464e41d75b2aa2b00ca31ea2ce7eb
SHA1 5b94362ac6a23c5aba706e8bfd11a5d8bab6097d
SHA256 16d5506b6663085b1acd80644ffa5363c158e390da67ed31298b85ddf0ad353f
SHA512 b2a09d52c211e7100e3e68d88c13394c64f23bf2ec3ca25b109ffb1e1a96a054f0e0d25d2f2a0c2145616eabc88c51d63023cef5faa7b49129d020f67ab0b1ff

C:\Users\Admin\Pictures\GroupResume.jpg

MD5 aa9c8ea5ce8a68ee42e2a267ba87b4f8
SHA1 e335c9933e44abfcdb2d6bc8c10eac8b279094d3
SHA256 8caf8ae7715f82e378d23bcc4bf8fdb95f619702ae246659084cc9ad595f1d96
SHA512 16efe20bb6c33d4c20ec854edb484a64c5e7695ea3f7b548eb806f7bdd2e24819db7b8b86760ae6c514df657d699c25ab34db6ab55434f3ab5aa867c9ccef94a

C:\Users\Admin\Pictures\GetUnprotect.raw

MD5 a931feee2043337934a2041b7e9e6523
SHA1 5ae032c3990b228a61f7cd51f37032528b8c7292
SHA256 0f8a21c41308f6303b6dfc9bc4addae152fe41e9806fc2e1253351ba79cce2a6
SHA512 3966da5bd4413923d739710c66c6a28f275877906739003cad998c035e37243c246487d80149f98284d80d62291f35ab1fb3e920f61063599029f14674a6bfd0

C:\Users\Admin\Pictures\ExportConvertFrom.emz

MD5 8493aad5c420f6d5cea004af260ee545
SHA1 eb8f21f25fe46758a78be1c8b109a85171373366
SHA256 a0ee9f67acd14d64f7a79dfd5b219a9a053572e29295120b5ca54ce29b8d9366
SHA512 b3835b084ecba9492c2fc6a98ae42f1045c3d712156140f5e2b41c70ccbd42e3a2a978dbafcabd5edf5f29ed8699d8b36417ca376541e23759aaa19d5e308422

C:\Users\Admin\Pictures\ExitEdit.dwg

MD5 7af3737a096e8c41895f28e29998ae5e
SHA1 a18d134c9e4e2222c9b23ec24a179fcbf26a6861
SHA256 40afa5c60e27287645ee521525902749cc324dc257b3ab7f4e6f20b860e7acdc
SHA512 21c25137e42f3ea5ad41d217fd3fe6ed1a3bd063e7e4688f6aa011f156fdb93f49662a27c21caadbf161c77e8119a2672502c1e2a5bffa22bf403cb0add59c34

C:\Users\Admin\Pictures\DebugGroup.cr2

MD5 e7cad972c6bd7f65c730c706dc645cfa
SHA1 57a1f7f077b881901e8ca17bdd2e3a834ac657d8
SHA256 f77ae4d80391e257f70eec5de5481f1049b01fe75fed57c69eeeadda119f6abb
SHA512 3ed8c15a2d9db300507131a162fd63165ad3810fb36fff0e081864f5005aead20c3534ad49b8f8365241eb3623d5180ff23a498569f0e3711121455869b9e3a6

C:\Users\Admin\Pictures\CompressPop.svgz

MD5 79382b8cd60ecf2131fc303ff9f4fc82
SHA1 fe28468b13629c23f255d1e5673b8a128471d522
SHA256 457485c7ab50c5a34f6f09f52c01b32327e015309fa0703d506ae25d98481336
SHA512 bc053abbaaba66f776dc6ffc13f7e86b15fe3013c8ac070ec34be677765994bf6fd72185a9f17e6b376d6ec4e4504dfb26df1a9d8604643793e2e6ed5a959a8d

C:\Users\Admin\Pictures\CompareRestart.jpeg

MD5 5775c0a576df854f78fd9e0fddeea92b
SHA1 71db05a5838e88672728fbed2ffffb7d2fd321b6
SHA256 bcc2be7cadd170c91e2da31b41a48ec3a07764dfc19944e479073eb94cce0cfe
SHA512 2b46ebc26be3c35a6ce03a30a34c6cef00e4965b2929ddb622f74e46f6a3de57eaf762bbc6ec9ff0ebf34a4faea0a0a2e72ecf245507b8655bc0c1992f97162b

C:\Users\Admin\Pictures\CheckpointHide.emf

MD5 e7230bcfd2cec8a0da93d1e7bef79342
SHA1 5cc218bb57c28b79da7f03514382981470fc2c12
SHA256 18fc48f8464e05a33d27aaa90cee7af8816d9cb3586676fec9aa4acd897a6d75
SHA512 cc7c36f8f23b6d32c690362bb23b1659afaf4bd911b7163a9e8586b416f525419424ecc35b0209b37b4e39cc1330eb35e54dd6526cf0a1ccb0faeda8fcd3e422

C:\Users\Admin\Pictures\BlockUnlock.jpg

MD5 b70eecf82f88fe8775f4261ba0bce51d
SHA1 3e8b4979270090b0348fb703ef654eebf5be2daf
SHA256 36ea6cd949950c2f6d3bbe610e6410e14935436d669dd955d3fa3570933c49b3
SHA512 4e2779d0edaf6c0e692ee51843377683685ba71ed7796b968ecad905889e5b0d4e65dbd632107506ce9fed9693cee8a9a732b5444aec95d47b589afd6843e640

C:\Users\Admin\Pictures\AssertConfirm.jpg

MD5 c70e56fded669d51d98181b67fe3e454
SHA1 bb4deb882b6ca41f0b10cf2a299d188f20e6c477
SHA256 290abd6af968758e3aeacc5b4f2edbc7fcd103ebe0a78d744d16760134271317
SHA512 ac12622647429ec022c693cfc139cb9440ad0afd4eb589e05c3f3d3c062911e80ee87ce772681b2fe7aa0de8c88d00dc7eb0b2370d5519b60b914a03e31fa7e6

C:\Users\Admin\Searches\winrt--{S-1-5-21-940901362-3608833189-1915618603-1000}-.searchconnector-ms

MD5 992009de527be1de9516e097949c2a07
SHA1 076b88835f651ce2617ff6fcfedeaf4af9d22c05
SHA256 f0c712cac3eb083b2eb6b9a9389c669310104faa7b3a7e0b036ec742fac21ac5
SHA512 5a4ac846b03aa169dc7d2692eb01729deda1c5098e87537540c169ee343da8ff8f839197a4fcfdb0cfd30ea3ace0ec1ecf6c35ff22fd187d1b21af20ca297013

C:\vcredist2022_x86_001_vcRuntimeAdditional_x86.log

MD5 265b78695c90910ef5e929b3bc848d07
SHA1 df70fea1dfdab66936dc100de19bef9f7a982cfa
SHA256 51bcaafc783871e77cadca49420c76a778b952ab4fa54bd02abbb8f6fb1d762f
SHA512 4dff369817977d8af007c669d3ff2b5974ee90b22508b4b2c119b1120dae1a1c5fdaa0e3e402b65dcdf7cd1d08ce9171074c9350dad9bec6cdbdb02d51f4c3b8

C:\vcredist2022_x86_000_vcRuntimeMinimum_x86.log

MD5 3fb83c6f49d7f882fa5415b3b5a04623
SHA1 9574735f8237cfe179678ce63488511577df3cc6
SHA256 f163f34031651effba7cc3da3957143d40d8177af9459a82933d4d1df3e82850
SHA512 8e76fbbd533cf9111d28388cf9d8b1ebfeef9b257fa1aed88e7a3f918740a0dba2e764896c8a3b0134d98afc3743c13bff666252963c78ed70388b0bc50f65d9

C:\vcredist2022_x64_001_vcRuntimeAdditional_x64.log

MD5 31db5987fa62bed19fca19c7450a76e1
SHA1 fb84ee3738e07890ef3ddddee7a9368331b6bb79
SHA256 e06438b3de86d1f9f345c3e34326470a27caf8d5ff098e48b8fa7e2f5d4d4986
SHA512 cfa23bdf1d2d5ebc5126083058af7d6e885618e66b0dfdba782963958ff26fcfef3c43b4b4eac0fdf02980e77f92f266298f41b56291809aebba9e44ff8c04f1

C:\vcredist2022_x64_000_vcRuntimeMinimum_x64.log

MD5 7865e796e09d32690a3de999a9fc7319
SHA1 a8fb842a65d42c0baf91c9459438958ed4ee117b
SHA256 634b6c0c6287ce9aeb21d7ace985e36f8702b50b72328822f49164e14d2deef4
SHA512 2e897ad882d0bec6315c3124964fb7852905a16d33b2577b9ac0fc52d404ae7b230e3dda436777a0e955235775f5b8f00544ef071d5630217149166bf00c2b83

C:\vcredist2013_x86_001_vcRuntimeAdditional_x86.log

MD5 9de8c2a1ce10395d2d8ec421f3dfbc1b
SHA1 4ccaf1745c0b1ffa13598d433738f262b5ba6f55
SHA256 7dc06793358068917800342b06eee69a257f049f5134a6dc7a2abd6a4e05ffb9
SHA512 37b7c7bea03b5ff7e19bdad0209e65f2627339ec722b3a4de78df40effcd57e226a04160cf7e812e759fc8af0ac6580636922607f1dd3c1afd6c3de31deee6f1

C:\vcredist2013_x86_000_vcRuntimeMinimum_x86.log

MD5 d4394966f1c57602a80d6532a2dd5bf9
SHA1 89404402a845aaf9fba9ffdba9f2e87cfef8e1ad
SHA256 9aeee59b494bc53564b2d62ce5f934e00f5c2b753f596b5058c66de654a7cea2
SHA512 12afbd86f8a1520353366bc3ae609c9e7bf293af77499597c027297b4c08b72ef037bda35f50bc336b3cc1454daea131d398d8d0cd9352de43c99f2117c98f01

C:\vcredist2013_x64_001_vcRuntimeAdditional_x64.log

MD5 1fd0b300fa8f8ae4a4aca561c58c1fff
SHA1 4bb0430c586c741891e5608c9fc2d30cc64b029e
SHA256 d64c095f31d7d0ab15a4fd770d03489113e2bc3c66a0a5ddfc91249bc2c6e84a
SHA512 ef9ae2f6b34760eb51992b958e06c20b9db2a2a5db73d085927d0cb4dae22201c95cb37ef26210431286bfa8b76454affca06b311ab3416edffb25c4ad73cc48

C:\vcredist2013_x64_000_vcRuntimeMinimum_x64.log

MD5 4f23bb49be4f2d62ac1016e657ca3908
SHA1 9c479a6185f5e4a5e25bc8ae198dc7f265f2a0eb
SHA256 280ab67c52c5cb50fbba2c836081de2692396cbdb0c0aef2ae095bdf100e9678
SHA512 7c439595f951e8a86287b2ef7c73ff9c14a96f0aa64ae5a4221525312b55e54d9ec5c9d17066cc8ab0a5685adbb9c68cb52e9c732249356a6d733df0f64047bf

C:\vcredist2012_x86_1_vcRuntimeAdditional_x86.log

MD5 8f55a38ab11126ade7fd23688339d00f
SHA1 4102f8a226482f63d4a2560547ea9b2116bc7303
SHA256 98aa056448693eb365e9c771fd461273b8d00e53dff2172f1b17432ca3ff87b3
SHA512 5ac6e5188e87a30158438ae999a37effc30c4b52600d0a6cbd9442588407f32ec4d1294cf465080c3c143af7fa7ca9d95d2b2586e529e888fa833a9e11afca58

C:\vcredist2012_x86_0_vcRuntimeMinimum_x86.log

MD5 b62cd8ea76657ede8cfd5db8c9886395
SHA1 3ba10cfc9fd4f781b8fae1a4d2c409cd74ae4986
SHA256 86c7e8ad3f712acfe4c0f247842e0577e281205c6cde807792cabda160620240
SHA512 07bdf5cd2e8c3ecea86d773470bb39d9adae966080d6ede23c1179d550b8d06ae2b76fd2b6e2646fbc077a4b20ab62187025177f0db910f6d490182a6a800813

C:\vcredist2012_x64_1_vcRuntimeAdditional_x64.log

MD5 0520d2a32f6dcb86962cdd9b5719a275
SHA1 eb7d4e2020e3f0d29aaf924905f0ead45b70cb42
SHA256 46271210b84457b05753a75e4caa11a2ef8ced9aa35fc4f8a4a1730355f865c0
SHA512 b80f27533aca142029280e72276e60e272b2c9b888b7a830322f3b72d6974f14c368722fa2e1fc2165c31b177a5185b38301524a34542a5805c10968eebb7ce5

C:\vcredist2010_x86.log-MSI_vc_red.msi.txt

MD5 d3f598141940ac545bbd3ce153ca6099
SHA1 32235e7a74f702570e5d3d568960636d074799c7
SHA256 09134372c404d260f4359db8b055977d3949be3d2db071a791db9186276997d7
SHA512 9f0c4310bcabe9b6afe27c6f19220b4ff9924dd039adb2a5cd029832e37dc48a8ebb4462a0ee568331ea1051f4710563913fb197fd6631a9a6dfee0f0e95527b

C:\vcredist2010_x64.log-MSI_vc_red.msi.txt

MD5 0d5f0a55f9aeb893eb74d87b31e51a7e
SHA1 8350df6fe3c68a20c35ca2cb72d99ea2c1eff126
SHA256 bfd65570310226bb198f43bf6b44b1a909a6813bc393bcc23c23c7f82d0d5389
SHA512 fb8b592b98f109af912f9184924171b4c0fa6834f0cc0ed6ab7136c0efd983b5939b2d1c30442ac8f4866c99824cb2e3ff4777203e22574d34a6c70168d8998d

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-25 22:00

Reported

2024-11-25 22:03

Platform

win7-20240903-en

Max time kernel

120s

Max time network

127s

Command Line

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\LockBit-main (1).zip"

Signatures

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Processes

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\LockBit-main (1).zip"

Network

N/A

Files

N/A