IOC Report
UXNob1Dp32.exe

loading gif

Files

File Path
Type
Category
Malicious
UXNob1Dp32.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\$WinREAgent\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build3.exe
MS-DOS executable
dropped
 malicious
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440002v9.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440007v3.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_114932_b84-2220.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199673019888[1].htm
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\build3[1].exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqln[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\script_300161259571223429446516194326035503227.rel.v2
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\shell\remote\script_96032244749497702726114603847611723578.rel.v2
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945531046117.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133584016293449682.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wct3D66.tmp
MS-DOS executable
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wctF86A.tmp
MS-DOS executable, MZ for MS-DOS
dropped
 malicious
C:\Users\user\AppData\Local\VirtualStore\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl
data
dropped
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite
data
dropped
 malicious
C:\Users\user\Local Settings\Adobe\Acrobat\DC\UserCache64.bin.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Google\Chrome\User Data\first_party_sets.db.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Edge\User Data\CrashpadMetrics-active.pma.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\acrobat_sbx\acroNGLLog.txt.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct150C.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct33D7.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct38F0.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct3D66.tmp.bgzq (copy)
MS-DOS executable
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct443C.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct49A7.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctAB5F.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctDB2E.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctE4A4.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctEA40.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctF411.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctF86A.tmp.bgzq (copy)
MS-DOS executable, MZ for MS-DOS
dropped
 malicious
C:\Users\user\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\ProgramData\DHDAKFCG
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4
dropped
C:\ProgramData\EHJDGHJDBFIJKECAECAFBAKKEG
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
dropped
C:\SystemID\PersonalID.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\.curlrc
data
dropped
C:\Users\user\.curlrc.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old
data
modified
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
data
dropped
C:\Users\user\AppData\Local\Adobe\Color\ACECache11.lst
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ko\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\lt\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\lv\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\nb\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\nl\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pl\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pt_BR\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pt_PT\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ro\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ru\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sk\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sl\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sv\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\th\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\tr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\uk\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\vi\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\zh_CN\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\zh_TW\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\3\ListAll.Json
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\27160079615.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\28315153308.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\29939506207.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\31169036496.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\brndlog.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-UserConfig.log
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\01_Music_auto_rated_at_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\02_Music_added_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\03_Music_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\04_Music_played_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\05_Pictures_taken_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\06_Pictures_rated_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\07_TV_recorded_in_the_last_week.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\08_Video_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\09_Music_played_the_most.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\10_All_Music.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\11_All_Pictures.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\12_All_Video.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{45F61A7D-A745-417E-BD88-2FFDE87A6DA8}mt16400656.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7B3AF8A2-A95D-4447-ACC9-7895C91C2D45}mt16400647.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7D2AAE1F-E21C-4042-8EAB-08D27101C10B}mt11414620.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{967E9DC2-54C6-4D72-9409-715F9A3F61E5}mt11829122.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{A4858C46-92BF-4775-ADF9-F93EB4C5F636}mt66963475.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{AA4547C7-FE83-48AB-9053-3A60F16A4C34}mt10000137.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{F5FB5847-D24A-455C-A647-40C253091672}mt67739505.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{FD5FD857-5A38-4C81-A322-3226BB279FAA}mt45299826.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100110v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100113v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100114v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100115v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100116v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100117v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100118v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100124v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100125v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100126v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100127v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100128v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100129v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100130v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100131v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100132v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100133v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100134v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100202v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240012v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240013v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240014v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240015v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240020v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240021v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240025v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240026v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240030v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240032v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240034v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240038v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240039v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270002v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270004v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270005v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270006v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270007v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270010v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270011v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270012v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270013v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270014v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270017v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule310000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320002v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320004v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320005v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320007v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320021v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320022v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320032v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320034v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322004v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322006v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324011v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324012v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324013v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324014v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370007v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370011v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370012v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490002v13.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490003v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490004v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490009v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490010v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490014v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490018v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490020v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490023v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490024v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490025v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490027v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490028v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490030v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500004v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500005v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500007v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500008v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500009v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500022v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500023v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500024v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510012v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510017v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510046v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510047v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510062v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510063v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63028v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63030v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63038v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63040v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63041v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63042v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63046v10.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63048v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63049v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63051v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63052v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63053v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63054v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63056v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63057v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63058v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63059v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63063v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63066v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63069v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63070v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63071v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63077v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63078v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65136v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65137v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65138v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65139v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68002v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68003v12.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68004v16.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68008v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68010v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68012v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68013v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68014v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68015v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68016v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68017v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68018v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68019v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68020v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700400v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700401v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule1000v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11768v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11769v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11770v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11771v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11792v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11793v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11794v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11834v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11890v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11930v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11939v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11981v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11989v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120100v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120128v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.0953.5356.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.1052.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1149.2948.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_114938_158-b2c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_115005_9064-2616.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-04_093243_16a0-1d8c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_115005_4240-5892.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-04_093243_14f4-1074.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2023-10-04_084137_4224-6092.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine_2023-10-04_105957_c7c-3d4.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser_2023-10-04_105958_19ec-19e8.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall_2023-10-04_105950_1894-1898.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_114942_500-1efc.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115011_3184-4676.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115204_7008-7012.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115740_6260-6264.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121144_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121212_7980-7984.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_082907_5964-5996.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083412_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083652_5268-4940.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[1].htm
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[2].htm
JSON data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\activity-stream.discovery_stream.json
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
data
modified
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-child-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\startupCache.8.little
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache.bin
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.6dfb6b5d-10db-4868-b4ad-ef207a2dda1b.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\ntkrnlmp.pdb
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\winload_prod.pdb
data
dropped
C:\Users\user\AppData\Local\Temp\wct150C.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct33D7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct38F0.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct443C.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct49A7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctAB5F.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctDB2E.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctE4A4.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctEA40.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctF411.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wmsetup.log
data
dropped
C:\Users\user\AppData\Local\Temp\{02662522-698F-45B5-959E-0EC7B36298AD}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{139BFC28-947F-45CC-9DE4-AB0FCAEF6E9F}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{5871238D-BEB9-464A-931F-701C8F0FFB10}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{5F969F84-5F34-4AF8-8D36-D6D6A1668750}.png
data
dropped
C:\Users\user\AppData\Local\bowsakkdestx.txt
data
dropped
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Unicode text, UTF-16, little-endian text, with no line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\CameraRoll.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\SavedPictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AIXACVYBSB.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BJZFPPWAPT.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BPMLNOBVSB.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BPMLNOBVSB.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BPMLNOBVSB.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BUFZSQPCOH.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BXAJUJAOEO.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BXAJUJAOEO.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DTBZGIOOSO.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DTBZGIOOSO.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DTDRDHPPSM.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\FENIVHOIKN.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HTAGVDFUIE.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HTAGVDFUIE.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HXDJBHSZUI.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JICNOHRHAT.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JSDNGYCOWY.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\MIVTQDBATG.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\MXPXCVPDVN.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\MXPXCVPDVN.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ORJXLKGWYJ.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PWCCAWLGRE.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PWCCAWLGRE.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PWCCAWLGRE.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\TBTPTBIATK.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\TQDFJHPUIU.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\TQDFJHPUIU.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\TQDFJHPUIU.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VAMYDFPUND.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WQRYUPISBO.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WQRYUPISBO.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WQRYUPISBO.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WUTJSCBCFX.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WUTJSCBCFX.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\WUTJSCBCFX.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZBEDCJPBEY.jpg
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528
data
dropped
C:\Users\user\AppData\Roaming\Skype\RootTools\roottools.conf
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMDocs.sav.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMGrpPrm.sav.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\UProof\CUSTOM.DIC.bgzq (copy)
Unicode text, UTF-16, little-endian text, with no line terminators
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\CameraRoll.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Documents.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Music.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Pictures.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\SavedPictures.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Videos.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\AIXACVYBSB.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BJZFPPWAPT.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BPMLNOBVSB.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BPMLNOBVSB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BPMLNOBVSB.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BUFZSQPCOH.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BXAJUJAOEO.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BXAJUJAOEO.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DTBZGIOOSO.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DTBZGIOOSO.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DTDRDHPPSM.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HTAGVDFUIE.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HTAGVDFUIE.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HXDJBHSZUI.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JICNOHRHAT.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\MIVTQDBATG.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\MXPXCVPDVN.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\MXPXCVPDVN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ORJXLKGWYJ.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\PWCCAWLGRE.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\PWCCAWLGRE.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\PWCCAWLGRE.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\TBTPTBIATK.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\TQDFJHPUIU.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\TQDFJHPUIU.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\TQDFJHPUIU.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\VAMYDFPUND.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WQRYUPISBO.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WQRYUPISBO.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WQRYUPISBO.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WUTJSCBCFX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WUTJSCBCFX.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\WUTJSCBCFX.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZBEDCJPBEY.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Skype\RootTools\roottools.conf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\AIXACVYBSB.xlsx
data
dropped
C:\Users\user\Desktop\AIXACVYBSB.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO.docx
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\DTBZGIOOSO.docx
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\DTBZGIOOSO.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\HTAGVDFUIE.jpg
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\HTAGVDFUIE.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\LTKMYBSEYZ.png
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\ONBQCLYSPU.xlsx
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\ONBQCLYSPU.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\WUTJSCBCFX.mp3
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\WUTJSCBCFX.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN.pdf
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\NHPKIZUUSG\DTBZGIOOSO.pdf
data
dropped
C:\Users\user\Desktop\NHPKIZUUSG\DTBZGIOOSO.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\NHPKIZUUSG\XZXHAVGRAG.jpg
data
dropped
C:\Users\user\Desktop\NHPKIZUUSG\XZXHAVGRAG.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU.docx
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\ONBQCLYSPU.docx
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\ONBQCLYSPU.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\WUTJSCBCFX.pdf
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\WUTJSCBCFX.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN.pdf
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\VLZDGUKUTZ.mp3
data
dropped
C:\Users\user\Desktop\VLZDGUKUTZ.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\WUTJSCBCFX.pdf
data
dropped
C:\Users\user\Desktop\WUTJSCBCFX.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\BPMLNOBVSB.mp3
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\BPMLNOBVSB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\JSDNGYCOWY.png
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\ZBEDCJPBEY.jpg
data
dropped
C:\Users\user\Desktop\ZBEDCJPBEY.jpg.bgzq (copy)
data
dropped
C:\Users\user\Documents\DTBZGIOOSO.pdf
data
dropped
C:\Users\user\Documents\DTBZGIOOSO.pdf.bgzq (copy)
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\HTAGVDFUIE.jpg
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\HTAGVDFUIE.jpg.bgzq (copy)
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\ONBQCLYSPU.xlsx
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\ONBQCLYSPU.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\FENIVHOIKN.png
data
dropped
C:\Users\user\Documents\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Documents\JSDNGYCOWY.png
data
dropped
C:\Users\user\Documents\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Documents\NHPKIZUUSG.docx
data
dropped
C:\Users\user\Documents\NHPKIZUUSG.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\AIXACVYBSB.xlsx
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\AIXACVYBSB.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\NHPKIZUUSG.docx
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\NHPKIZUUSG.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\VLZDGUKUTZ.mp3
data
dropped
C:\Users\user\Documents\NHPKIZUUSG\VLZDGUKUTZ.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\ONBQCLYSPU.xlsx
data
dropped
C:\Users\user\Documents\ONBQCLYSPU.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\ONBQCLYSPU\VAMYDFPUND.mp3
data
dropped
C:\Users\user\Documents\ONBQCLYSPU\VAMYDFPUND.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\WUTJSCBCFX.mp3
data
dropped
C:\Users\user\Documents\WUTJSCBCFX.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Documents\XZXHAVGRAG.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\BPMLNOBVSB.mp3
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\BPMLNOBVSB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\UMMBDNEQBN.xlsx
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\UMMBDNEQBN.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\XZXHAVGRAG.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\ZBEDCJPBEY.jpg
data
dropped
C:\Users\user\Documents\ZBEDCJPBEY.jpg.bgzq (copy)
data
dropped
C:\Users\user\Downloads\BPMLNOBVSB.mp3
data
dropped
C:\Users\user\Downloads\BPMLNOBVSB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Downloads\DTBZGIOOSO.pdf
data
dropped
C:\Users\user\Downloads\DTBZGIOOSO.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\FENIVHOIKN.png
data
dropped
C:\Users\user\Downloads\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Downloads\JSDNGYCOWY.png
data
dropped
C:\Users\user\Downloads\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Downloads\NHPKIZUUSG.docx
data
dropped
C:\Users\user\Downloads\NHPKIZUUSG.docx.bgzq (copy)
data
dropped
C:\Users\user\Downloads\UMMBDNEQBN.pdf
data
dropped
C:\Users\user\Downloads\UMMBDNEQBN.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\VAMYDFPUND.mp3
data
dropped
C:\Users\user\Downloads\VAMYDFPUND.mp3.bgzq (copy)
data
dropped
C:\Users\user\Downloads\WUTJSCBCFX.jpg
data
dropped
C:\Users\user\Downloads\WUTJSCBCFX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Downloads\WUTJSCBCFX.pdf
data
dropped
C:\Users\user\Downloads\WUTJSCBCFX.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\XZXHAVGRAG.jpg
data
dropped
C:\Users\user\Downloads\XZXHAVGRAG.jpg.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Amazon.url
data
dropped
C:\Users\user\Favorites\Amazon.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Facebook.url
data
dropped
C:\Users\user\Favorites\Facebook.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Live.url
data
dropped
C:\Users\user\Favorites\Live.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Reddit.url
data
dropped
C:\Users\user\Favorites\Reddit.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Wikipedia.url
data
dropped
C:\Users\user\Favorites\Wikipedia.url.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeCMapFnt23.lst.bgzq (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeSysFnt23.lst.bgzq (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\IconCacheAcro65536.dat.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Adobe\Color\ACECache11.lst.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jcp.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jtx.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00001.jrs.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00002.jrs.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USStmp.jtx.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\store.jfm.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\store.vol.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\FontCache\3\ListAll.Json.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\FontCache\4\CatalogCacheMetaData.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\brndlog.txt.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log.bgzq (copy)
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-UserConfig.log.bgzq (copy)
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100110v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100113v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100114v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100115v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100116v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100117v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100118v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100119v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100124v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100125v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100126v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100127v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100128v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100129v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100130v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100131v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100132v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100133v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100134v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100201v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100202v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10450v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10625v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10626v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10627v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10781v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10784v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10800v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10801v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10802v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10803v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10807v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10808v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10818v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10819v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10820v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10821v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10822v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\PenWorkspace\DiscoverCacheData.dat.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\wmsetup.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{02662522-698F-45B5-959E-0EC7B36298AD}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{139BFC28-947F-45CC-9DE4-AB0FCAEF6E9F}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{5871238D-BEB9-464A-931F-701C8F0FFB10}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{5F969F84-5F34-4AF8-8D36-D6D6A1668750}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\bowsakkdestx.txt.bgzq (copy)
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms.bgzq (copy)
data
dropped
There are 1435 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\UXNob1Dp32.exe
"C:\Users\user\Desktop\UXNob1Dp32.exe"
 malicious
C:\Users\user\Desktop\UXNob1Dp32.exe
"C:\Users\user\Desktop\UXNob1Dp32.exe"
 malicious
C:\Users\user\Desktop\UXNob1Dp32.exe
"C:\Users\user\Desktop\UXNob1Dp32.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe --Task
 malicious
C:\Users\user\Desktop\UXNob1Dp32.exe
"C:\Users\user\Desktop\UXNob1Dp32.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe --Task
 malicious
C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build2.exe
"C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build2.exe"
malicious
C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build2.exe
"C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build2.exe"
malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
"C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build3.exe
"C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build3.exe"
malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
"C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build3.exe
"C:\Users\user\AppData\Local\24c79069-10a0-4140-9323-7c1741b1b662\build3.exe"
malicious
C:\Windows\SysWOW64\schtasks.exe
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Windows\SysWOW64\schtasks.exe
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
 malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
"C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe
"C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831\UXNob1Dp32.exe" --AutoStart
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Windows\SysWOW64\icacls.exe
icacls "C:\Users\user\AppData\Local\e099b2f4-df3e-483e-96de-f9e556584831" /deny *S-1-1-0:(OI)(CI)(DE,DC)
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 17 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=true
189.245.19.217
 malicious
http://cajgtus.com/test2/get.php
malicious
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637
189.245.19.217
 malicious
http://sdfjhuz.com/dl/build2.exe
186.13.17.220
 malicious
https://player.vimeo.com
unknown
http://cajgtus.com/files/1/build3.exe$run
unknown
https://assets.activity.windows.com/v1/assets
unknown
http://cajgtus.com/test2/get.phpA
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199673019888
unknown
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=trueD
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=EyWBqDQS-6jg&a
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
https://www.gstatic.cn/recaptcha/
unknown
http://cajgtus.com/files/1/build3.exerun80I
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=engl
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://www.youtube.com
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://www.google.com
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
http://cajgtus.com/files/1/build3.exe?
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=en
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=1_BxDGVvfXwv&am
unknown
https://s.ytimg.com;
unknown
https://steamcommunity.com/profiles/76561199673019888A
unknown
http://www.reddit.com/
unknown
https://steam.tv/
unknown
https://95.217.9.149a
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=c4UneKQJ
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://store.steampowered.com/points/shop/
unknown
http://sdfjhuz.com/dl/build2.exe/
unknown
http://sdfjhuz.com/dl/build2.exe$run
unknown
https://cdn.aka
unknown
http://sdfjhuz.com/dl/build2.exerun35g
unknown
https://sketchfab.com
unknown
https://steamcommunity.com/profiles/76561199673019888/badges
unknown
https://lv.queniujq.cn
unknown
https://www.youtube.com/
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=ZVlkBFZXqRp1&l=e
unknown
http://www.youtube.com/
unknown
https://wetransfer.com/downloads/54cdfd152fe98eedb628a1f4ddb7076420240421150208/403a27
unknown
https://www.google.com/recaptcha/
unknown
https://checkout.steampowered.com/
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
unknown
https://95.217.9.149/pet
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
unknown
https://95.217.9.149/
95.217.9.149
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://store.steampowered.com/;
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
https://t.me/irfailAt
unknown
https://95.217.9.149.exe
unknown
https://95.217.9.149
unknown
https://help.steampowered.com/en/
unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
https://community.akamai.steamstatic.com/
unknown
https://95.217.9.149/nd-point:
unknown
http://cajgtus.com/files/1/build3.exe$runinstall020921_delay721_sec.exe0D32.exe
unknown
http://www.amazon.com/
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
http://www.twitter.com/
unknown
https://recaptcha.net/recaptcha/;
unknown
https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
unknown
http://www.openssl.org/support/faq.html
unknown
https://steamcommunity.com/discussions/
unknown
https://95.217.9.149/~
unknown
https://store.steampowered.com/stats/
unknown
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
unknown
https://medal.tv
unknown
https://broadcast.st.dl.eccdnx.com
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://store.steampowered.com/steam_refunds/
unknown
https://95.217.9.149/n
unknown
https://steamcommunity.com/workshop/
unknown
https://login.steampowered.com/
unknown
https://t.me/irfail
unknown
https://store.steampowered.com/legal/
unknown
https://95.217.9.149/s
unknown
https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e
unknown
http://www.sqlite.org/copyright.html.
unknown
https://steamcommunity.com/9
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
sdfjhuz.com
186.13.17.220
 malicious
cajgtus.com
189.245.19.217
 malicious
steamcommunity.com
23.59.200.146
api.2ip.ua
104.21.65.24

IPs

IP
Domain
Country
Malicious
186.13.17.220
sdfjhuz.com
Argentina
malicious
189.245.19.217
cajgtus.com
Mexico
malicious
95.217.9.149
unknown
Germany
104.21.65.24
api.2ip.ua
United States
23.59.200.146
steamcommunity.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SysHelper
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
SysHelper

Memdumps

Base Address
Regiontype
Protect
Malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
930000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
5DE0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
5DB0000
direct allocation
page execute and read and write
 malicious
5E50000
direct allocation
page execute and read and write
 malicious
2310000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
35A0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
970000
direct allocation
page execute and read and write
 malicious
5E30000
direct allocation
page execute and read and write
 malicious
970000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
810000
direct allocation
page execute and read and write
 malicious
5DC0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
339B000
heap
page read and write
3366000
heap
page read and write
19D000
stack
page read and write
2630000
heap
page read and write
31A8000
heap
page read and write
3170000
heap
page read and write
376D000
heap
page read and write
41E000
unkown
page write copy
31B0000
direct allocation
page read and write
1AC0000
heap
page read and write
97F0000
direct allocation
page read and write
445F000
stack
page read and write
99D000
heap
page read and write
31B0000
direct allocation
page read and write
1E8EA000
direct allocation
page readonly
3488000
heap
page read and write
667000
heap
page read and write
97F0000
direct allocation
page read and write
4240000
heap
page read and write
401000
unkown
page execute read
341F000
heap
page read and write
29FF000
stack
page read and write
32EB000
heap
page read and write
97F0000
direct allocation
page read and write
34D4000
heap
page read and write
3112000
heap
page read and write
197000
stack
page read and write
198000
stack
page read and write
372C000
heap
page read and write
9D4000
heap
page read and write
420000
unkown
page write copy
401000
unkown
page execute read
3570000
direct allocation
page read and write
19D000
stack
page read and write
2DFE000
stack
page read and write
3417000
heap
page read and write
372C000
heap
page read and write
261F000
stack
page read and write
97F0000
direct allocation
page read and write
3151000
heap
page read and write
920000
heap
page read and write
31B0000
direct allocation
page read and write
86F000
stack
page read and write
36BB000
heap
page read and write
2A6E000
stack
page read and write
3314000
heap
page read and write
387B000
heap
page read and write
341F000
heap
page read and write
372F000
heap
page read and write
5F6000
heap
page read and write
3570000
direct allocation
page read and write
3420000
heap
page read and write
764000
heap
page read and write
372C000
heap
page read and write
420000
unkown
page write copy
97F0000
direct allocation
page read and write
55E000
stack
page read and write
37A7000
heap
page read and write
3170000
heap
page read and write
2090000
heap
page read and write
51A000
remote allocation
page execute and read and write
97F0000
direct allocation
page read and write
463F000
stack
page read and write
3312000
heap
page read and write
3316000
heap
page read and write
31AD000
heap
page read and write
3371000
heap
page read and write
30B0000
heap
page read and write
3164000
heap
page read and write
2FB1000
heap
page read and write
8D0000
heap
page read and write
7E9000
unkown
page readonly
3570000
direct allocation
page read and write
401000
unkown
page execute read
2A6E000
stack
page read and write
372C000
heap
page read and write
28FE000
stack
page read and write
31B0000
direct allocation
page read and write
343F000
heap
page read and write
19D000
stack
page read and write
2A10000
heap
page read and write
3C0000
heap
page read and write
3186000
heap
page read and write
9C000
stack
page read and write
97F0000
direct allocation
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
1ADE000
heap
page execute and read and write
37EA000
heap
page read and write
40A0000
unkown
page readonly
3313000
heap
page read and write
20DF9000
heap
page read and write
3166000
heap
page read and write
3570000
direct allocation
page read and write
6F9000
heap
page read and write
798000
heap
page read and write
3112000
heap
page read and write
97F0000
direct allocation
page read and write
289F000
stack
page read and write
30EE000
heap
page read and write
3570000
direct allocation
page read and write
2FA0000
heap
page read and write
453E000
stack
page read and write
31B0000
direct allocation
page read and write
3440000
heap
page read and write
3323000
heap
page read and write
700000
heap
page read and write
97F0000
direct allocation
page read and write
401000
unkown
page execute read
3570000
direct allocation
page read and write
37EA000
heap
page read and write
529000
remote allocation
page execute and read and write
1E0000
heap
page read and write
36F3000
heap
page read and write
52B000
remote allocation
page execute and read and write
1E7000
heap
page read and write
3160000
heap
page read and write
446E000
stack
page read and write
314F000
heap
page read and write
7FA000
heap
page read and write
97F0000
direct allocation
page read and write
529000
remote allocation
page execute and read and write
1F0000
heap
page read and write
97F0000
direct allocation
page read and write
319D000
heap
page read and write
2FB1000
heap
page read and write
1A04000
unkown
page readonly
420000
unkown
page write copy
4300000
heap
page read and write
74B000
heap
page read and write
33B2000
heap
page read and write
99B000
heap
page read and write
3435000
heap
page read and write
3570000
direct allocation
page read and write
30FB000
heap
page read and write
54F0000
heap
page read and write
1F0000
heap
page read and write
41FE000
stack
page read and write
3446000
heap
page read and write
2E60000
remote allocation
page read and write
97F0000
direct allocation
page read and write
3305000
heap
page read and write
318E000
heap
page read and write
25B0000
heap
page read and write
32F9000
heap
page read and write
6E8000
heap
page read and write
372C000
heap
page read and write
3804000
heap
page read and write
97F0000
direct allocation
page read and write
41B000
unkown
page write copy
3178000
heap
page read and write
34D4000
heap
page read and write
3399000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
3419000
heap
page read and write
8AF000
stack
page read and write
4190000
heap
page read and write
3570000
direct allocation
page read and write
32EC000
heap
page read and write
34DE000
heap
page read and write
542E000
stack
page read and write
3457000
heap
page read and write
318E000
heap
page read and write
435000
unkown
page execute read
3491000
heap
page read and write
998000
heap
page read and write
31AE000
heap
page read and write
2FB1000
heap
page read and write
31A3000
heap
page read and write
31B0000
direct allocation
page read and write
420000
unkown
page write copy
34DD000
heap
page read and write
20D50000
heap
page read and write
BEF000
stack
page read and write
3775000
heap
page read and write
539F000
stack
page read and write
7E6000
unkown
page read and write
2560000
heap
page read and write
33B2000
heap
page read and write
7A7000
heap
page read and write
40A0000
unkown
page readonly
595000
heap
page read and write
3814000
heap
page read and write
547E000
stack
page read and write
36AA000
heap
page read and write
30E9000
heap
page read and write
31AD000
heap
page read and write
30B0000
heap
page read and write
31B0000
heap
page read and write
33AF000
heap
page read and write
1F0000
heap
page read and write
438000
unkown
page write copy
346E000
heap
page read and write
349C000
stack
page read and write
3187000
heap
page read and write
2F5F000
stack
page read and write
529000
remote allocation
page execute and read and write
3182000
heap
page read and write
568000
heap
page read and write
560000
heap
page read and write
32FE000
heap
page read and write
3428000
heap
page read and write
76A000
heap
page read and write
34DE000
heap
page read and write
27A0000
heap
page read and write
31B0000
direct allocation
page read and write
6C3000
heap
page read and write
A5A000
heap
page read and write
9E2000
heap
page read and write
790000
heap
page read and write
3112000
heap
page read and write
5E0000
heap
page read and write
438000
unkown
page write copy
31B0000
direct allocation
page read and write
4B2000
unkown
page read and write
1D0000
heap
page read and write
3702000
heap
page read and write
31B0000
direct allocation
page read and write
35DE000
stack
page read and write
6D6000
heap
page read and write
3560000
heap
page read and write
36E2000
heap
page read and write
7E9000
unkown
page readonly
3196000
heap
page read and write
6A7000
heap
page read and write
810000
heap
page read and write
387B000
heap
page read and write
19B000
stack
page read and write
3440000
heap
page read and write
400000
unkown
page readonly
411000
unkown
page readonly
331D000
heap
page read and write
3196000
heap
page read and write
665000
heap
page read and write
3738000
heap
page read and write
3570000
direct allocation
page read and write
401000
unkown
page execute read
31B0000
direct allocation
page read and write
31A8000
heap
page read and write
41A000
unkown
page read and write
411000
unkown
page readonly
3170000
heap
page read and write
31B0000
direct allocation
page read and write
400000
unkown
page readonly
438000
unkown
page write copy
3364000
heap
page read and write
32F1000
heap
page read and write
4110000
heap
page read and write
993000
heap
page read and write
3775000
heap
page read and write
37EC000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
19B000
stack
page read and write
435000
unkown
page execute read
76D000
heap
page read and write
372F000
heap
page read and write
3336000
heap
page read and write
3738000
heap
page read and write
4100000
heap
page read and write
770000
heap
page read and write
97F0000
direct allocation
page read and write
2310000
heap
page read and write
3156000
heap
page read and write
1BF90000
heap
page read and write
420000
unkown
page write copy
7E8000
heap
page read and write
97F0000
direct allocation
page read and write
3440000
heap
page read and write
19D000
stack
page read and write
4610000
heap
page read and write
6AE000
stack
page read and write
24FE000
stack
page read and write
3795000
heap
page read and write
401000
unkown
page execute read
2A6E000
stack
page read and write
37D5000
heap
page read and write
400000
unkown
page readonly
3570000
direct allocation
page read and write
76F000
stack
page read and write
52B000
remote allocation
page execute and read and write
3440000
heap
page read and write
1E590000
heap
page read and write
3488000
heap
page read and write
31B0000
direct allocation
page read and write
41A000
unkown
page write copy
7E6000
unkown
page read and write
3570000
direct allocation
page read and write
3457000
heap
page read and write
401000
unkown
page execute read
32FA000
heap
page read and write
400000
unkown
page readonly
37EC000
heap
page read and write
21B0000
heap
page read and write
31B0000
direct allocation
page read and write
435000
unkown
page execute read
3570000
direct allocation
page read and write
34AE000
heap
page read and write
3394000
heap
page read and write
6F1000
heap
page read and write
8EE000
stack
page read and write
1BF7F000
stack
page read and write
3303000
heap
page read and write
330B000
heap
page read and write
400000
unkown
page readonly
314D000
heap
page read and write
24E0000
heap
page read and write
76B000
heap
page read and write
387B000
heap
page read and write
438000
unkown
page write copy
3418000
heap
page read and write
31B0000
direct allocation
page read and write
A0A000
heap
page read and write
BC0000
heap
page read and write
3364000
heap
page read and write
97F0000
direct allocation
page read and write
810000
heap
page read and write
4280000
heap
page read and write
627000
heap
page read and write
372F000
heap
page read and write
31A8000
heap
page read and write
330F000
heap
page read and write
3305000
heap
page read and write
2CFE000
stack
page read and write
3151000
heap
page read and write
1F0000
heap
page read and write
2FB0000
heap
page read and write
3570000
direct allocation
page read and write
7E9000
unkown
page readonly
97F0000
direct allocation
page read and write
30E3000
heap
page read and write
401000
unkown
page execute read
3154000
heap
page read and write
3147000
heap
page read and write
3418000
heap
page read and write
97F0000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
3102000
heap
page read and write
199DD000
stack
page read and write
5DE000
stack
page read and write
74E000
stack
page read and write
438000
unkown
page write copy
3418000
heap
page read and write
400000
unkown
page readonly
A00000
heap
page execute and read and write
A0E000
stack
page read and write
2E60000
remote allocation
page read and write
29FF000
stack
page read and write
3703000
heap
page read and write
25FF000
stack
page read and write
3570000
direct allocation
page read and write
36D2000
heap
page read and write
99D000
heap
page read and write
798000
heap
page read and write
3570000
direct allocation
page read and write
37ED000
heap
page read and write
31A8000
heap
page read and write
36FB000
heap
page read and write
1E90B000
heap
page read and write
30EF000
heap
page read and write
3147000
heap
page read and write
409E000
unkown
page read and write
30F1000
heap
page read and write
580000
heap
page read and write
3156000
heap
page read and write
6BA000
heap
page read and write
34D3000
heap
page read and write
3874000
heap
page read and write
1F0000
heap
page read and write
36AA000
heap
page read and write
31B0000
direct allocation
page read and write
400000
unkown
page readonly
313B000
heap
page read and write
760000
heap
page read and write
3488000
heap
page read and write
2DED000
stack
page read and write
3378000
heap
page read and write
97F0000
direct allocation
page read and write
372C000
heap
page read and write
9C000
stack
page read and write
32E1000
heap
page read and write
55E000
stack
page read and write
3440000
heap
page read and write
41A000
unkown
page write copy
4B2000
unkown
page read and write
4118000
heap
page read and write
41B000
unkown
page write copy
409E000
unkown
page read and write
400000
unkown
page readonly
2FB0000
remote allocation
page read and write
36CC000
heap
page read and write
2A6E000
stack
page read and write
36D3000
heap
page read and write
36FB000
heap
page read and write
30BB000
heap
page read and write
3164000
heap
page read and write
A00000
heap
page read and write
3692000
heap
page read and write
3153000
heap
page read and write
339C000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
8C0000
heap
page read and write
97F0000
direct allocation
page read and write
332C000
heap
page read and write
45FF000
stack
page read and write
3765000
heap
page read and write
1DBF000
stack
page read and write
3481000
heap
page read and write
438000
unkown
page write copy
338F000
heap
page read and write
3158000
heap
page read and write
372C000
heap
page read and write
31B0000
direct allocation
page read and write
3307000
heap
page read and write
31A3000
heap
page read and write
540000
heap
page read and write
8CF000
stack
page read and write
97F0000
direct allocation
page read and write
401000
unkown
page execute read
C7F000
stack
page read and write
315D000
heap
page read and write
372F000
heap
page read and write
400000
unkown
page readonly
97F0000
direct allocation
page read and write
1E8ED000
direct allocation
page readonly
3187000
heap
page read and write
418000
unkown
page write copy
34B5000
heap
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
372F000
heap
page read and write
31B0000
direct allocation
page read and write
3112000
heap
page read and write
31B0000
direct allocation
page read and write
34B3000
heap
page read and write
193000
stack
page read and write
30BD000
heap
page read and write
4240000
direct allocation
page read and write
367B000
heap
page read and write
97F0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
344E000
heap
page read and write
7AE000
stack
page read and write
2F5F000
stack
page read and write
3570000
direct allocation
page read and write
A1C000
heap
page execute and read and write
91DF000
stack
page read and write
36B2000
heap
page read and write
313B000
heap
page read and write
3112000
heap
page read and write
400000
unkown
page readonly
B7F000
stack
page read and write
928000
heap
page read and write
332D000
heap
page read and write
2420000
heap
page read and write
870000
heap
page read and write
3112000
heap
page read and write
318E000
heap
page read and write
32E1000
heap
page read and write
B1F000
stack
page read and write
97F0000
direct allocation
page read and write
340F000
heap
page read and write
3384000
heap
page read and write
3371000
heap
page read and write
28FE000
stack
page read and write
41A000
unkown
page write copy
82E000
stack
page read and write
30B0000
heap
page read and write
41A000
unkown
page read and write
420000
unkown
page write copy
2A10000
heap
page read and write
3167000
heap
page read and write
31B0000
direct allocation
page read and write
35A0000
trusted library allocation
page read and write
667000
heap
page read and write
86E000
stack
page read and write
36F6000
heap
page read and write
400000
unkown
page readonly
36AB000
heap
page read and write
37AC000
heap
page read and write
3662000
heap
page read and write
30DD000
heap
page read and write
1F0000
heap
page read and write
343D000
heap
page read and write
273F000
stack
page read and write
411000
unkown
page readonly
400000
unkown
page readonly
793000
heap
page read and write
3112000
heap
page read and write
37B4000
heap
page read and write
3441000
heap
page read and write
54FA000
heap
page read and write
3174000
heap
page read and write
3320000
heap
page read and write
77F000
heap
page read and write
420000
unkown
page write copy
3570000
direct allocation
page read and write
6DC000
heap
page read and write
31B0000
direct allocation
page read and write
51E000
stack
page read and write
6AC000
heap
page read and write
269F000
stack
page read and write
3196000
heap
page read and write
3328000
heap
page read and write
372C000
heap
page read and write
3738000
heap
page read and write
19A00000
remote allocation
page read and write
9E0000
heap
page read and write
560000
heap
page read and write
9B000
stack
page read and write
372F000
heap
page read and write
558000
remote allocation
page execute and read and write
400000
unkown
page readonly
60B000
heap
page read and write
4210000
heap
page read and write
348D000
heap
page read and write
590000
heap
page read and write
97F0000
direct allocation
page read and write
252F000
stack
page read and write
9B000
stack
page read and write
3147000
heap
page read and write
4B2000
unkown
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
36CA000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
3378000
heap
page read and write
69E000
heap
page read and write
31B0000
direct allocation
page read and write
A0F000
heap
page read and write
1F0000
heap
page read and write
37DA000
heap
page read and write
420000
unkown
page write copy
3570000
direct allocation
page read and write
600000
heap
page read and write
401000
unkown
page execute read
3151000
heap
page read and write
3128000
heap
page read and write
7A5000
heap
page read and write
36AA000
heap
page read and write
1F0000
heap
page read and write
198000
stack
page read and write
3367000
heap
page read and write
40A0000
unkown
page readonly
968000
heap
page read and write
753000
heap
page read and write
3397000
heap
page read and write
34C4000
heap
page read and write
1A7E000
stack
page read and write
760000
heap
page read and write
2BAE000
stack
page read and write
3128000
heap
page read and write
1E8AD000
direct allocation
page execute read
36CA000
heap
page read and write
27CE000
stack
page read and write
372F000
heap
page read and write
3738000
heap
page read and write
36CA000
heap
page read and write
3154000
heap
page read and write
23B0000
heap
page read and write
688000
heap
page read and write
434000
remote allocation
page execute and read and write
3342000
heap
page read and write
3147000
heap
page read and write
3303000
heap
page read and write
7E9000
unkown
page readonly
230E000
stack
page read and write
32E0000
heap
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
31A8000
heap
page read and write
3861000
heap
page read and write
9C000
stack
page read and write
2A0F000
stack
page read and write
5F1000
remote allocation
page execute and read and write
400000
unkown
page readonly
3112000
heap
page read and write
37B4000
heap
page read and write
401000
unkown
page execute read
34A5000
heap
page read and write
40A0000
unkown
page readonly
60B000
heap
page read and write
2908D000
stack
page read and write
344F000
heap
page read and write
6A0000
heap
page read and write
263E000
stack
page read and write
372F000
heap
page read and write
6F1000
heap
page read and write
9DE000
heap
page read and write
40A0000
unkown
page readonly
1F0000
heap
page read and write
91E000
stack
page read and write
420000
unkown
page write copy
401000
unkown
page execute read
19B000
stack
page read and write
3418000
heap
page read and write
420000
unkown
page write copy
31B0000
direct allocation
page read and write
3693000
heap
page read and write
3196000
heap
page read and write
41B000
unkown
page write copy
3383000
heap
page read and write
446D000
heap
page execute and read and write
3190000
heap
page read and write
51A000
remote allocation
page execute and read and write
5A7000
heap
page read and write
400000
unkown
page readonly
19C000
stack
page read and write
41A000
unkown
page write copy
3184000
heap
page read and write
3570000
direct allocation
page read and write
31B0000
direct allocation
page read and write
31A3000
heap
page read and write
40F8000
heap
page read and write
3158000
heap
page read and write
7E9000
unkown
page readonly
41A000
unkown
page write copy
197000
stack
page read and write
3143000
heap
page read and write
9F5000
heap
page read and write
442F000
stack
page read and write
32F6000
heap
page read and write
31B0000
direct allocation
page read and write
3440000
heap
page read and write
1E550000
trusted library allocation
page read and write
A67000
heap
page read and write
7E9000
unkown
page readonly
26B0000
heap
page read and write
3824000
heap
page read and write
19C000
stack
page read and write
758000
heap
page read and write
3141000
heap
page read and write
28FE000
stack
page read and write
4E0000
heap
page read and write
3196000
heap
page read and write
3702000
heap
page read and write
2620000
heap
page read and write
1749E000
stack
page read and write
19E000
stack
page read and write
33B2000
heap
page read and write
315D000
heap
page read and write
54E000
stack
page read and write
24D0000
heap
page read and write
435000
unkown
page execute read
6F1000
heap
page read and write
36FB000
heap
page read and write
3745000
heap
page read and write
387B000
heap
page read and write
40C0000
heap
page read and write
97F2000
direct allocation
page read and write
3315000
heap
page read and write
3129000
heap
page read and write
9EF000
stack
page read and write
910000
heap
page read and write
410E000
stack
page read and write
998000
heap
page read and write
97F0000
direct allocation
page read and write
419000
unkown
page write copy
1F0000
heap
page read and write
32D0000
heap
page read and write
378D000
heap
page read and write
2E5E000
stack
page read and write
75E000
heap
page read and write
438000
unkown
page write copy
3663000
heap
page read and write
6DC000
heap
page read and write
314F000
heap
page read and write
57E000
stack
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
418000
unkown
page read and write
7A7000
heap
page read and write
9F7000
heap
page read and write
435000
unkown
page execute read
34A5000
heap
page read and write
7FA000
heap
page read and write
3141000
heap
page read and write
53DE000
stack
page read and write
76D000
heap
page read and write
32F1000
heap
page read and write
279F000
stack
page read and write
3170000
heap
page read and write
32FD000
heap
page read and write
430A000
heap
page read and write
3170000
heap
page read and write
3399000
heap
page read and write
3745000
heap
page read and write
315D000
heap
page read and write
798000
heap
page read and write
387B000
heap
page read and write
30E5000
heap
page read and write
3418000
heap
page read and write
36E5000
heap
page read and write
411000
unkown
page readonly
660000
heap
page read and write
6DC000
heap
page read and write
7E9000
unkown
page readonly
30EE000
heap
page read and write
41B000
unkown
page write copy
2DFE000
stack
page read and write
97F0000
direct allocation
page read and write
33B2000
heap
page read and write
401000
unkown
page execute read
8AE000
stack
page read and write
A60000
heap
page read and write
A4A000
heap
page read and write
76D000
heap
page read and write
30CB000
heap
page read and write
34CC000
heap
page read and write
2A10000
heap
page read and write
97F0000
direct allocation
page read and write
40A0000
unkown
page readonly
98F000
stack
page read and write
372C000
heap
page read and write
372F000
heap
page read and write
40A0000
unkown
page readonly
3321000
heap
page read and write
41A000
unkown
page read and write
37CF000
heap
page read and write
2620000
heap
page read and write
198000
stack
page read and write
76E000
stack
page read and write
6AF000
stack
page read and write
9B000
stack
page read and write
6B7000
heap
page read and write
7A4000
heap
page read and write
3570000
direct allocation
page read and write
64E000
stack
page read and write
2F9F000
stack
page read and write
1E5A0000
heap
page read and write
3765000
heap
page read and write
B9E000
stack
page read and write
BDF000
stack
page read and write
650000
heap
page read and write
7F0000
heap
page read and write
367B000
heap
page read and write
31B0000
direct allocation
page read and write
2DED000
stack
page read and write
940000
heap
page read and write
37EA000
heap
page read and write
74A000
heap
page read and write
30E5000
heap
page read and write
37EA000
heap
page read and write
1F0000
heap
page read and write
37EA000
heap
page read and write
805000
heap
page read and write
30E9000
heap
page read and write
37E5000
heap
page read and write
3440000
heap
page read and write
3738000
heap
page read and write
332D000
heap
page read and write
401000
unkown
page execute read
345F000
heap
page read and write
31A8000
heap
page read and write
3366000
heap
page read and write
36A3000
heap
page read and write
36F5000
heap
page read and write
1E6A1000
direct allocation
page execute read
32EC000
heap
page read and write
400000
unkown
page readonly
36A6000
heap
page read and write
3390000
heap
page read and write
336E000
heap
page read and write
3775000
heap
page read and write
7E9000
unkown
page readonly
19D000
stack
page read and write
31AD000
heap
page read and write
738000
heap
page read and write
51E000
stack
page read and write
6D8000
heap
page read and write
820000
heap
page execute and read and write
3418000
heap
page read and write
31B0000
direct allocation
page read and write
3378000
heap
page read and write
32FF000
heap
page read and write
31B0000
direct allocation
page read and write
401000
unkown
page execute read
36E5000
heap
page read and write
CEF000
stack
page read and write
44FF000
stack
page read and write
31A8000
heap
page read and write
B7E000
stack
page read and write
610000
heap
page read and write
400000
unkown
page readonly
97F0000
direct allocation
page read and write
3112000
heap
page read and write
400000
unkown
page readonly
97F0000
direct allocation
page read and write
32FA000
heap
page read and write
30B0000
heap
page read and write
2FB0000
remote allocation
page read and write
40C0000
heap
page read and write
409E000
unkown
page read and write
34DE000
heap
page read and write
31B0000
direct allocation
page read and write
3182000
heap
page read and write
31A8000
heap
page read and write
2FB0000
remote allocation
page read and write
2CEE000
stack
page read and write
60F0000
heap
page read and write
511000
remote allocation
page execute and read and write
6AF000
heap
page read and write
9F2000
heap
page read and write
331D000
heap
page read and write
650000
heap
page read and write
348C000
heap
page read and write
1E6A0000
direct allocation
page execute and read and write
3154000
heap
page read and write
3147000
heap
page read and write
372F000
heap
page read and write
339B000
heap
page read and write
418000
unkown
page write copy
41A000
unkown
page write copy
37EA000
heap
page read and write
2FB1000
heap
page read and write
3154000
heap
page read and write
435000
unkown
page execute read
3570000
direct allocation
page read and write
1A04000
unkown
page readonly
696000
heap
page read and write
411000
unkown
page readonly
3861000
heap
page read and write
438000
unkown
page write copy
275F000
stack
page read and write
34DE000
heap
page read and write
4240000
direct allocation
page read and write
3570000
direct allocation
page read and write
777000
heap
page read and write
401000
unkown
page execute read
3481000
heap
page read and write
947000
heap
page read and write
4B2000
unkown
page read and write
317C000
heap
page read and write
447000
unkown
page read and write
9BE000
heap
page read and write
12A1F000
stack
page read and write
37E5000
heap
page read and write
36CC000
heap
page read and write
3367000
heap
page read and write
342A000
heap
page read and write
338F000
heap
page read and write
1ACA000
heap
page read and write
3314000
heap
page read and write
318E000
heap
page read and write
268E000
stack
page read and write
2FB0000
heap
page read and write
500000
heap
page read and write
41A000
unkown
page write copy
4210000
heap
page read and write
8EF000
stack
page read and write
3824000
heap
page read and write
410000
unkown
page readonly
3305000
heap
page read and write
30F9000
heap
page read and write
36CB000
heap
page read and write
9AF000
stack
page read and write
19C000
stack
page read and write
20BF2000
heap
page read and write
2E5E000
stack
page read and write
A5C000
heap
page read and write
31B0000
direct allocation
page read and write
2A10000
heap
page read and write
401000
unkown
page execute read
447000
unkown
page read and write
35D000
stack
page read and write
32E3000
heap
page read and write
3745000
heap
page read and write
30D4000
heap
page read and write
41B000
unkown
page write copy
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
420000
unkown
page write copy
31B0000
direct allocation
page read and write
1AFB000
heap
page read and write
65E000
stack
page read and write
7E9000
unkown
page readonly
97F0000
direct allocation
page read and write
32EE000
heap
page read and write
447000
unkown
page read and write
44EE000
stack
page read and write
37EC000
heap
page read and write
B3F000
stack
page read and write
3844000
heap
page read and write
249F000
stack
page read and write
9E7000
heap
page read and write
560000
heap
page read and write
4250000
heap
page read and write
314D000
heap
page read and write
790000
heap
page read and write
3570000
direct allocation
page read and write
879000
heap
page read and write
3336000
heap
page read and write
197000
stack
page read and write
378F000
stack
page read and write
34C2000
heap
page read and write
400000
unkown
page readonly
8D0000
heap
page read and write
97F0000
direct allocation
page read and write
800000
heap
page read and write
3874000
heap
page read and write
3628000
heap
page read and write
A34000
heap
page read and write
A6C000
heap
page read and write
2FB0000
heap
page read and write
2B6D000
stack
page read and write
3156000
heap
page read and write
51A000
remote allocation
page execute and read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
753000
heap
page read and write
2CAF000
stack
page read and write
34DE000
heap
page read and write
9B000
stack
page read and write
31B0000
direct allocation
page read and write
193000
stack
page read and write
33AF000
heap
page read and write
A50000
heap
page read and write
1EA4E000
stack
page read and write
97F0000
direct allocation
page read and write
791000
heap
page read and write
412A000
heap
page read and write
2F5F000
stack
page read and write
3174000
heap
page read and write
830000
heap
page read and write
3128000
heap
page read and write
97F0000
direct allocation
page read and write
3321000
heap
page read and write
36E3000
heap
page read and write
368B000
heap
page read and write
31B0000
direct allocation
page read and write
80F000
heap
page read and write
1BE0000
heap
page read and write
68A000
heap
page read and write
19B000
stack
page read and write
9B0000
heap
page read and write
29FF000
stack
page read and write
411000
unkown
page readonly
52B000
remote allocation
page execute and read and write
31B0000
direct allocation
page read and write
4218000
heap
page read and write
31B0000
direct allocation
page read and write
3738000
heap
page read and write
97F0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
817000
heap
page read and write
2B6D000
stack
page read and write
31B0000
direct allocation
page read and write
2CAF000
stack
page read and write
7E6000
unkown
page read and write
456F000
stack
page read and write
387B000
heap
page read and write
28FE000
stack
page read and write
3364000
heap
page read and write
3620000
heap
page read and write
32FE000
heap
page read and write
3418000
heap
page read and write
3570000
direct allocation
page read and write
3738000
heap
page read and write
36CA000
heap
page read and write
4680000
heap
page read and write
8C0000
heap
page read and write
97F0000
direct allocation
page read and write
338F000
heap
page read and write
41A000
unkown
page read and write
9B000
stack
page read and write
401000
unkown
page execute read
30B0000
heap
page read and write
3570000
direct allocation
page read and write
667000
heap
page read and write
336E000
heap
page read and write
3367000
heap
page read and write
1E806000
direct allocation
page execute read
277E000
stack
page read and write
85D000
heap
page read and write
401000
unkown
page execute read
3702000
heap
page read and write
36A3000
heap
page read and write
3570000
direct allocation
page read and write
3854000
heap
page read and write
37CF000
heap
page read and write
34DE000
heap
page read and write
3570000
direct allocation
page read and write
30C2000
heap
page read and write
51E000
stack
page read and write
990000
heap
page read and write
3570000
direct allocation
page read and write
372F000
heap
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
36F5000
heap
page read and write
40A0000
unkown
page readonly
514000
remote allocation
page execute and read and write
3683000
heap
page read and write
97F0000
direct allocation
page read and write
3364000
heap
page read and write
197000
stack
page read and write
BFF000
stack
page read and write
660000
heap
page read and write
3341000
heap
page read and write
760000
heap
page read and write
2370000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
319A000
heap
page read and write
32F9000
heap
page read and write
31A3000
heap
page read and write
34AD000
heap
page read and write
31A3000
heap
page read and write
34DE000
heap
page read and write
32EC000
heap
page read and write
450E000
stack
page read and write
77E000
stack
page read and write
2E9E000
stack
page read and write
348D000
heap
page read and write
34DE000
heap
page read and write
40F0000
heap
page read and write
3198000
heap
page read and write
3570000
direct allocation
page read and write
411000
unkown
page readonly
7E9000
unkown
page readonly
401000
unkown
page execute read
2B6E000
stack
page read and write
348D000
heap
page read and write
31B0000
direct allocation
page read and write
3112000
heap
page read and write
97F0000
direct allocation
page read and write
32EB000
heap
page read and write
193000
stack
page read and write
435000
unkown
page execute read
6F8000
heap
page read and write
31B0000
direct allocation
page read and write
3738000
heap
page read and write
3418000
heap
page read and write
31B0000
direct allocation
page read and write
1F0000
heap
page read and write
4250000
heap
page read and write
3112000
heap
page read and write
31B0000
direct allocation
page read and write
438000
unkown
page write copy
30EE000
heap
page read and write
3143000
heap
page read and write
411000
unkown
page readonly
6040000
heap
page read and write
30CB000
heap
page read and write
3738000
heap
page read and write
3112000
heap
page read and write
32E3000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
30D1000
heap
page read and write
6EF000
stack
page read and write
3570000
direct allocation
page read and write
3367000
heap
page read and write
1A02000
unkown
page read and write
54CD000
stack
page read and write
30D4000
heap
page read and write
3112000
heap
page read and write
438000
unkown
page write copy
401000
unkown
page execute read
97F0000
direct allocation
page read and write
3702000
heap
page read and write
36DB000
heap
page read and write
438000
unkown
page write copy
3804000
heap
page read and write
438000
unkown
page write copy
3429000
heap
page read and write
31B0000
direct allocation
page read and write
32EE000
heap
page read and write
37AC000
heap
page read and write
3693000
heap
page read and write
807000
heap
page read and write
32F1000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
318E000
heap
page read and write
63F000
remote allocation
page execute and read and write
372C000
heap
page read and write
31B0000
direct allocation
page read and write
630000
heap
page read and write
37AC000
heap
page read and write
9AF000
stack
page read and write
359D000
stack
page read and write
3112000
heap
page read and write
2E5E000
stack
page read and write
990000
heap
page read and write
32FD000
heap
page read and write
19A00000
remote allocation
page read and write
6C3000
heap
page read and write
20DF7000
heap
page read and write
31B0000
direct allocation
page read and write
9B000
stack
page read and write
1A04000
unkown
page readonly
333A000
heap
page read and write
34DE000
heap
page read and write
30B1000
heap
page read and write
7A7000
heap
page read and write
401000
unkown
page execute read
97F0000
direct allocation
page read and write
3693000
heap
page read and write
83E000
heap
page read and write
330F000
heap
page read and write
3570000
direct allocation
page read and write
578000
heap
page read and write
3418000
heap
page read and write
800000
heap
page read and write
9B000
stack
page read and write
BC7000
heap
page read and write
960000
heap
page read and write
3154000
heap
page read and write
9D4000
heap
page read and write
97F0000
direct allocation
page read and write
43B000
unkown
page read and write
3418000
heap
page read and write
411000
unkown
page readonly
3191000
heap
page read and write
A0E000
heap
page read and write
3323000
heap
page read and write
36D2000
heap
page read and write
3570000
direct allocation
page read and write
31B0000
direct allocation
page read and write
33B2000
heap
page read and write
37EC000
heap
page read and write
400000
unkown
page readonly
40A0000
unkown
page readonly
7E9000
unkown
page readonly
1E5000
heap
page read and write
9C000
stack
page read and write
31B0000
direct allocation
page read and write
7E0000
heap
page read and write
400000
unkown
page readonly
76A000
heap
page read and write
34D4000
heap
page read and write
3306000
heap
page read and write
86E000
stack
page read and write
435000
unkown
page execute read
401000
unkown
page execute read
30C3000
heap
page read and write
31B0000
direct allocation
page read and write
368B000
heap
page read and write
317A000
heap
page read and write
32E5000
heap
page read and write
333A000
heap
page read and write
3824000
heap
page read and write
A11000
heap
page read and write
313E000
heap
page read and write
30B0000
remote allocation
page read and write
3390000
heap
page read and write
31B0000
direct allocation
page read and write
608000
heap
page read and write
3112000
heap
page read and write
32F7000
heap
page read and write
31B0000
direct allocation
page read and write
3874000
heap
page read and write
331D000
heap
page read and write
767000
heap
page read and write
34D4000
heap
page read and write
9C000
stack
page read and write
97F0000
direct allocation
page read and write
3166000
heap
page read and write
315E000
heap
page read and write
31A8000
heap
page read and write
289F000
stack
page read and write
34DD000
heap
page read and write
372C000
heap
page read and write
8BE000
stack
page read and write
30F9000
heap
page read and write
97F0000
direct allocation
page read and write
193000
stack
page read and write
31A3000
heap
page read and write
3570000
direct allocation
page read and write
9C000
stack
page read and write
3481000
heap
page read and write
97F0000
direct allocation
page read and write
3498000
heap
page read and write
97F0000
direct allocation
page read and write
447000
unkown
page read and write
30C5000
heap
page read and write
3112000
heap
page read and write
9B000
stack
page read and write
3307000
heap
page read and write
3824000
heap
page read and write
3440000
heap
page read and write
625000
heap
page read and write
31B0000
direct allocation
page read and write
3481000
heap
page read and write
32FF000
heap
page read and write
3861000
heap
page read and write
3112000
heap
page read and write
401000
unkown
page execute read
343D000
heap
page read and write
3390000
heap
page read and write
2CED000
stack
page read and write
3176000
heap
page read and write
33AA000
heap
page read and write
410000
unkown
page readonly
31B0000
direct allocation
page read and write
41A000
unkown
page write copy
372F000
heap
page read and write
A7E000
stack
page read and write
343D000
heap
page read and write
30FB000
heap
page read and write
32B0000
heap
page read and write
30B1000
heap
page read and write
3388000
heap
page read and write
A57000
heap
page read and write
31B0000
direct allocation
page read and write
315D000
heap
page read and write
76D000
heap
page read and write
401000
unkown
page execute read
97F0000
direct allocation
page read and write
A2E000
stack
page read and write
97F0000
direct allocation
page read and write
46AF000
stack
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
34D5000
heap
page read and write
343D000
heap
page read and write
372C000
heap
page read and write
32E9000
heap
page read and write
31B0000
direct allocation
page read and write
A10000
heap
page read and write
998000
heap
page read and write
33B2000
heap
page read and write
400000
unkown
page readonly
679000
heap
page read and write
3196000
heap
page read and write
3744000
heap
page read and write
372C000
heap
page read and write
337C000
heap
page read and write
41A000
unkown
page read and write
6DB000
heap
page read and write
400000
unkown
page readonly
1E8EF000
direct allocation
page readonly
3499000
heap
page read and write
36CC000
heap
page read and write
755000
heap
page read and write
3397000
heap
page read and write
605000
heap
page read and write
4250000
heap
page read and write
6A1000
heap
page read and write
33B2000
heap
page read and write
313B000
heap
page read and write
36FF000
heap
page read and write
32FD000
heap
page read and write
3364000
heap
page read and write
401000
unkown
page execute read
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
3313000
heap
page read and write
31B0000
direct allocation
page read and write
3187000
heap
page read and write
14F5D000
stack
page read and write
97F0000
direct allocation
page read and write
438000
unkown
page write copy
287F000
stack
page read and write
570000
heap
page read and write
97F0000
direct allocation
page read and write
4120000
heap
page read and write
34BD000
heap
page read and write
3434000
heap
page read and write
33B2000
heap
page read and write
1A20000
heap
page read and write
7E9000
unkown
page readonly
3488000
heap
page read and write
3738000
heap
page read and write
660000
heap
page read and write
A56000
heap
page read and write
45A0000
heap
page read and write
1F0000
heap
page read and write
315B000
heap
page read and write
278F000
stack
page read and write
19A3E000
stack
page read and write
333A000
heap
page read and write
401000
unkown
page execute read
30F7000
heap
page read and write
7A7000
heap
page read and write
2FB0000
remote allocation
page read and write
317D000
heap
page read and write
3141000
heap
page read and write
3804000
heap
page read and write
31B0000
direct allocation
page read and write
3440000
heap
page read and write
401000
unkown
page execute read
A60000
heap
page read and write
31B0000
direct allocation
page read and write
3170000
heap
page read and write
409E000
unkown
page read and write
2E5E000
stack
page read and write
198000
stack
page read and write
3182000
heap
page read and write
317A000
heap
page read and write
3738000
heap
page read and write
435000
unkown
page execute read
9C000
stack
page read and write
999000
heap
page read and write
3570000
direct allocation
page read and write
2FB0000
heap
page read and write
3128000
heap
page read and write
442F000
stack
page read and write
31AE000
heap
page read and write
31EC000
stack
page read and write
411000
unkown
page readonly
5FD0000
direct allocation
page read and write
32E6000
heap
page read and write
7CE000
stack
page read and write
31B0000
direct allocation
page read and write
7DE000
stack
page read and write
34D5000
heap
page read and write
7E9000
unkown
page readonly
420000
unkown
page write copy
36E5000
heap
page read and write
36F2000
heap
page read and write
31B0000
direct allocation
page read and write
30F7000
heap
page read and write
97F0000
direct allocation
page read and write
3570000
direct allocation
page read and write
97F0000
direct allocation
page read and write
940000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
1A30000
heap
page read and write
3314000
heap
page read and write
40A0000
unkown
page readonly
3793000
heap
page read and write
97F0000
direct allocation
page read and write
1E6A8000
direct allocation
page execute read
41E000
unkown
page write copy
3682000
heap
page read and write
31A8000
heap
page read and write
3162000
heap
page read and write
753000
heap
page read and write
409E000
unkown
page read and write
3170000
heap
page read and write
340F000
heap
page read and write
30E9000
heap
page read and write
339B000
heap
page read and write
A1E000
stack
page read and write
3467000
heap
page read and write
1F0000
heap
page read and write
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
401000
unkown
page execute read
372F000
heap
page read and write
1F0000
heap
page read and write
343D000
heap
page read and write
441E000
heap
page execute and read and write
400000
unkown
page readonly
3431000
heap
page read and write
33A3000
heap
page read and write
369B000
heap
page read and write
19D000
stack
page read and write
339F000
heap
page read and write
379C000
heap
page read and write
217F000
stack
page read and write
3160000
heap
page read and write
41A000
unkown
page write copy
400000
unkown
page readonly
30F9000
heap
page read and write
3884000
heap
page read and write
401000
unkown
page execute read
410E000
stack
page read and write
98F000
stack
page read and write
34DD000
heap
page read and write
435000
unkown
page execute read
3570000
direct allocation
page read and write
37AC000
heap
page read and write
20BEB000
heap
page read and write
3112000
heap
page read and write
A45000
heap
page read and write
3738000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
40A0000
unkown
page readonly
3418000
heap
page read and write
97F0000
direct allocation
page read and write
DF9F000
stack
page read and write
19B000
stack
page read and write
97F0000
direct allocation
page read and write
3663000
heap
page read and write
31B0000
direct allocation
page read and write
400000
unkown
page readonly
1E52D000
stack
page read and write
A5A000
heap
page read and write
40A0000
unkown
page readonly
3488000
heap
page read and write
3130000
heap
page read and write
7A7000
heap
page read and write
7E6000
unkown
page read and write
97F0000
direct allocation
page read and write
3370000
heap
page read and write
33A4000
heap
page read and write
1BC0000
direct allocation
page read and write
3489000
heap
page read and write
5A0000
heap
page read and write
372C000
heap
page read and write
34C3000
heap
page read and write
31B0000
direct allocation
page read and write
341F000
heap
page read and write
316F000
heap
page read and write
40A0000
unkown
page readonly
9CF000
stack
page read and write
3325000
heap
page read and write
330A000
heap
page read and write
336E000
heap
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
3738000
heap
page read and write
2BBE000
stack
page read and write
3419000
heap
page read and write
31B0000
direct allocation
page read and write
369B000
heap
page read and write
31B0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
33B2000
heap
page read and write
31A3000
heap
page read and write
3570000
direct allocation
page read and write
3156000
heap
page read and write
52B000
remote allocation
page execute and read and write
2B5CE000
stack
page read and write
40A0000
unkown
page readonly
9C000
stack
page read and write
401000
unkown
page execute read
3156000
heap
page read and write
A4E000
stack
page read and write
9F0000
heap
page read and write
3343000
heap
page read and write
290E000
stack
page read and write
29FF000
stack
page read and write
2FB0000
remote allocation
page read and write
6EF000
stack
page read and write
3570000
direct allocation
page read and write
3570000
direct allocation
page read and write
420000
unkown
page write copy
3128000
heap
page read and write
30B0000
remote allocation
page read and write
235E000
stack
page read and write
57E000
stack
page read and write
317A000
heap
page read and write
41A000
unkown
page write copy
32F1000
heap
page read and write
31B0000
direct allocation
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
9B000
stack
page read and write
372F000
heap
page read and write
2BBE000
stack
page read and write
1F0000
heap
page read and write
314F000
heap
page read and write
30E9000
heap
page read and write
438000
unkown
page write copy
4264000
heap
page execute and read and write
4180000
heap
page read and write
69E000
stack
page read and write
3380000
heap
page read and write
3174000
heap
page read and write
1A90000
heap
page read and write
99D000
heap
page read and write
330A000
stack
page read and write
3388000
heap
page read and write
665000
heap
page read and write
6A5000
heap
page read and write
31B0000
direct allocation
page read and write
33B2000
heap
page read and write
195000
stack
page read and write
97F0000
direct allocation
page read and write
313D000
heap
page read and write
4B2000
unkown
page read and write
2FB0000
remote allocation
page read and write
400000
unkown
page readonly
31A3000
heap
page read and write
97F0000
direct allocation
page read and write
367B000
heap
page read and write
32E1000
heap
page read and write
3440000
heap
page read and write
34D5000
heap
page read and write
1E8E2000
direct allocation
page read and write
401000
unkown
page execute read
34DE000
heap
page read and write
3570000
direct allocation
page read and write
2CBF000
stack
page read and write
620000
heap
page read and write
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
3343000
heap
page read and write
37B4000
heap
page read and write
87F000
stack
page read and write
37CC000
heap
page read and write
31B0000
direct allocation
page read and write
744000
heap
page read and write
411000
unkown
page readonly
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
2B6D000
stack
page read and write
3143000
heap
page read and write
998000
heap
page read and write
24BF000
stack
page read and write
104DF000
stack
page read and write
3182000
heap
page read and write
331D000
heap
page read and write
1E8B8000
direct allocation
page readonly
36B2000
heap
page read and write
31B0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
3419000
heap
page read and write
3570000
direct allocation
page read and write
33B2000
heap
page read and write
3570000
direct allocation
page read and write
369B000
heap
page read and write
31B0000
direct allocation
page read and write
9B000
stack
page read and write
20D32000
heap
page read and write
540000
heap
page read and write
31B0000
direct allocation
page read and write
52B000
remote allocation
page execute and read and write
31B0000
direct allocation
page read and write
3314000
heap
page read and write
97F0000
direct allocation
page read and write
34D4000
heap
page read and write
60A0000
heap
page read and write
3176000
heap
page read and write
97F0000
direct allocation
page read and write
420000
unkown
page write copy
960000
heap
page read and write
435000
unkown
page execute read
3112000
heap
page read and write
76D000
heap
page read and write
3692000
heap
page read and write
4E0000
heap
page read and write
3442000
heap
page read and write
2CBF000
stack
page read and write
647000
heap
page read and write
3151000
heap
page read and write
6AF000
heap
page read and write
435000
unkown
page execute read
3446000
heap
page read and write
339C000
heap
page read and write
31B0000
direct allocation
page read and write
3196000
heap
page read and write
3427000
heap
page read and write
97F0000
direct allocation
page read and write
78F000
stack
page read and write
447000
unkown
page read and write
3141000
heap
page read and write
40C0000
heap
page read and write
3335000
heap
page read and write
333A000
heap
page read and write
1BFEC000
stack
page read and write
3570000
direct allocation
page read and write
860000
heap
page read and write
422E000
stack
page read and write
97F0000
direct allocation
page read and write
265E000
stack
page read and write
31B0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
A56000
heap
page read and write
30FB000
heap
page read and write
A2C000
heap
page read and write
7F0000
heap
page read and write
31A3000
heap
page read and write
40FE000
stack
page read and write
30B0000
remote allocation
page read and write
30E9000
heap
page read and write
37A7000
heap
page read and write
36C3000
heap
page read and write
1ACE000
heap
page read and write
3367000
heap
page read and write
411000
unkown
page readonly
3692000
heap
page read and write
41E000
unkown
page write copy
2A10000
heap
page read and write
990000
heap
page read and write
435000
unkown
page execute read
667000
heap
page read and write
3186000
heap
page read and write
435000
unkown
page execute read
30FB000
heap
page read and write
3170000
heap
page read and write
34B2000
heap
page read and write
19D000
stack
page read and write
372F000
heap
page read and write
3692000
heap
page read and write
3154000
heap
page read and write
197000
stack
page read and write
3835000
heap
page read and write
3398000
heap
page read and write
9A000
stack
page read and write
34C2000
heap
page read and write
6F0000
heap
page read and write
3398000
heap
page read and write
460F000
stack
page read and write
3390000
heap
page read and write
3466000
heap
page read and write
3702000
heap
page read and write
3785000
heap
page read and write
3112000
heap
page read and write
3488000
heap
page read and write
97F8000
direct allocation
page read and write
30EE000
heap
page read and write
387B000
heap
page read and write
520000
heap
page read and write
438000
unkown
page write copy
344F000
heap
page read and write
7E9000
unkown
page readonly
400000
unkown
page readonly
97F0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
1F0000
heap
page read and write
8AE000
stack
page read and write
4577000
heap
page execute and read and write
529000
remote allocation
page execute and read and write
28CF000
stack
page read and write
342A000
heap
page read and write
36DF000
stack
page read and write
985000
heap
page read and write
3112000
heap
page read and write
2FB0000
remote allocation
page read and write
3738000
heap
page read and write
33B2000
heap
page read and write
3364000
heap
page read and write
3418000
heap
page read and write
3570000
direct allocation
page read and write
7E6000
unkown
page read and write
19D000
stack
page read and write
2FB1000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
998000
heap
page read and write
30B1000
heap
page read and write
31B0000
direct allocation
page read and write
BA5F000
stack
page read and write
31B0000
direct allocation
page read and write
9B000
stack
page read and write
332D000
heap
page read and write
3570000
direct allocation
page read and write
3875000
heap
page read and write
97F0000
direct allocation
page read and write
3440000
heap
page read and write
24F0000
heap
page read and write
9B000
stack
page read and write
3702000
heap
page read and write
4B2000
unkown
page read and write
40A0000
unkown
page readonly
313B000
heap
page read and write
950000
heap
page execute and read and write
3680000
heap
page read and write
3570000
direct allocation
page read and write
A02000
heap
page read and write
410000
unkown
page readonly
7E9000
unkown
page readonly
3186000
heap
page read and write
760000
heap
page read and write
3570000
direct allocation
page read and write
31A8000
heap
page read and write
9B000
stack
page read and write
770000
heap
page read and write
1EA90000
heap
page read and write
3570000
direct allocation
page read and write
315A000
heap
page read and write
19D000
stack
page read and write
3161000
heap
page read and write
31B0000
direct allocation
page read and write
198000
stack
page read and write
2BAE000
stack
page read and write
31A8000
heap
page read and write
315D000
heap
page read and write
32E4000
heap
page read and write
3854000
heap
page read and write
3128000
heap
page read and write
2E60000
remote allocation
page read and write
3367000
heap
page read and write
372C000
heap
page read and write
868000
heap
page read and write
2CFE000
stack
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
638000
heap
page read and write
3200000
heap
page read and write
348C000
heap
page read and write
3367000
heap
page read and write
411000
unkown
page readonly
96E000
stack
page read and write
319D000
heap
page read and write
3570000
direct allocation
page read and write
3738000
heap
page read and write
3702000
heap
page read and write
A0E000
heap
page read and write
41B0000
heap
page read and write
34C4000
heap
page read and write
A4A000
heap
page read and write
3570000
direct allocation
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
1E5A1000
heap
page read and write
32F1000
heap
page read and write
279E000
stack
page read and write
97F0000
direct allocation
page read and write
36F3000
heap
page read and write
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
1EA8E000
stack
page read and write
90E000
stack
page read and write
420000
unkown
page write copy
830000
heap
page read and write
3154000
heap
page read and write
264F000
stack
page read and write
1E8AF000
direct allocation
page readonly
30BC000
heap
page read and write
3158000
heap
page read and write
6AA000
heap
page read and write
366B000
heap
page read and write
2680000
heap
page read and write
372F000
heap
page read and write
412E000
heap
page read and write
411000
unkown
page readonly
3738000
heap
page read and write
5E0000
heap
page read and write
372F000
heap
page read and write
97F0000
direct allocation
page read and write
9820000
trusted library allocation
page read and write
359E000
stack
page read and write
3412000
heap
page read and write
37DA000
heap
page read and write
77D000
heap
page read and write
3301000
heap
page read and write
31D000
stack
page read and write
3467000
heap
page read and write
414E000
stack
page read and write
3397000
heap
page read and write
31B0000
direct allocation
page read and write
33B2000
heap
page read and write
372C000
heap
page read and write
31B0000
direct allocation
page read and write
76E000
stack
page read and write
31B0000
direct allocation
page read and write
193000
stack
page read and write
19A00000
remote allocation
page read and write
97F0000
direct allocation
page read and write
6050000
heap
page read and write
6D6000
heap
page read and write
529000
remote allocation
page execute and read and write
60F000
heap
page read and write
80F000
stack
page read and write
97F0000
direct allocation
page read and write
34DE000
heap
page read and write
AB0000
heap
page read and write
3112000
heap
page read and write
411000
unkown
page readonly
3738000
heap
page read and write
435000
unkown
page execute read
97F0000
direct allocation
page read and write
3745000
heap
page read and write
339C000
heap
page read and write
3692000
heap
page read and write
314F000
heap
page read and write
3D0000
heap
page read and write
3174000
heap
page read and write
430E000
heap
page read and write
99B000
heap
page read and write
30D5000
heap
page read and write
6B0000
heap
page read and write
99D000
heap
page read and write
608000
heap
page read and write
A8E000
stack
page read and write
950000
heap
page read and write
31B0000
direct allocation
page read and write
3570000
direct allocation
page read and write
330B000
heap
page read and write
84D000
heap
page execute and read and write
3481000
heap
page read and write
8AF000
stack
page read and write
97F0000
direct allocation
page read and write
97F0000
direct allocation
page read and write
440F000
stack
page read and write
401000
unkown
page execute read
510000
heap
page read and write
372C000
heap
page read and write
97F0000
direct allocation
page read and write
314D000
heap
page read and write
1F0000
heap
page read and write
4434000
heap
page execute and read and write
83A000
heap
page read and write
19E000
stack
page read and write
3378000
heap
page read and write
3335000
heap
page read and write
2F5F000
stack
page read and write
346E000
heap
page read and write
3150000
heap
page read and write
There are 1808 hidden memdumps, click here to show them.