IOC Report
n8XBpFdVFU.exe

loading gif

Files

File Path
Type
Category
Malicious
n8XBpFdVFU.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\$WinREAgent\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440002v9.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440007v3.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\setup32.exe_Rules.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db.session
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officec2rclient.exe.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officesetup.exe.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_114932_b84-2220.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199673019888[1].htm
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqln[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\script_300161259571223429446516194326035503227.rel.v2
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\shell\remote\script_96032244749497702726114603847611723578.rel.v2
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\input\en-GB\userdict_v1.0809.dat
data
dropped
 malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\webext.sc.lz4
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\0.0.filtertrie.intermediate.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.ft
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2e3f3162-b212-4a10-8918-a93180c42736}\0.0.filtertrie.intermediate.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2e3f3162-b212-4a10-8918-a93180c42736}\Apps.ft
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3562040e-6ba4-4dec-86d8-f95aa3865af5}\0.0.filtertrie.intermediate.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3562040e-6ba4-4dec-86d8-f95aa3865af5}\Apps.ft
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsglobals.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsglobals.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingssynonyms.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\0.0.filtertrie.intermediate.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\0.0.filtertrie.intermediate.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945532339763.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133584472286822851.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\VirtualStore\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl
data
dropped
 malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite
data
dropped
 malicious
C:\Users\user\Desktop\DTBZGIOOSO\KATAXZVCPS.mp3
data
dropped
 malicious
C:\Users\user\Local Settings\Adobe\Acrobat\DC\UserCache64.bin.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Google\Chrome\User Data\first_party_sets.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\16.0\setup32.exe_Rules.xml.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.session.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\OTele\officec2rclient.exe.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\OTele\officeclicktorun.exe.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Office\OTele\officesetup.exe.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.1.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Microsoft\input\en-GB\userdict_v1.0809.dat.bgjs (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\acrobat_sbx\acroNGLLog.txt.bgjs (copy)
data
dropped
 malicious
C:\Users\user\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\ProgramData\GHDBKJKJKKJDGDGDGIDGIIDAAK
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
dropped
C:\ProgramData\KECBKKEB
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4
dropped
C:\SystemID\PersonalID.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\.curlrc
data
dropped
C:\Users\user\.curlrc.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.bgjs (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old
data
modified
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.bgjs (copy)
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\3\ListAll.Json
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\27160079615.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\28315153308.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\29939506207.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\31169036496.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.chk
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbtmp.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-UserConfig.log
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\01_Music_auto_rated_at_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\02_Music_added_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\03_Music_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\04_Music_played_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\05_Pictures_taken_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\06_Pictures_rated_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\07_TV_recorded_in_the_last_week.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\08_Video_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\09_Music_played_the_most.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\10_All_Music.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\11_All_Pictures.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\12_All_Video.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{45F61A7D-A745-417E-BD88-2FFDE87A6DA8}mt16400656.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7B3AF8A2-A95D-4447-ACC9-7895C91C2D45}mt16400647.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7D2AAE1F-E21C-4042-8EAB-08D27101C10B}mt11414620.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{967E9DC2-54C6-4D72-9409-715F9A3F61E5}mt11829122.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{A4858C46-92BF-4775-ADF9-F93EB4C5F636}mt66963475.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{AA4547C7-FE83-48AB-9053-3A60F16A4C34}mt10000137.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{F5FB5847-D24A-455C-A647-40C253091672}mt67739505.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{FD5FD857-5A38-4C81-A322-3226BB279FAA}mt45299826.png
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170039v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170040v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170041v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170042v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170043v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170044v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170048v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320007v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320021v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320022v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320032v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320034v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322004v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322006v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324011v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324012v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324013v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324014v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370007v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370011v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370012v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490002v13.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490003v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490004v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490009v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490010v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490014v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490018v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490020v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490023v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490024v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490025v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490027v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490028v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490030v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500004v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500005v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500007v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500008v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500009v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500022v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500023v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500024v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510012v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510017v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510046v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510047v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510062v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510063v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63028v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63030v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63038v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63040v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63041v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63042v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63046v10.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63048v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63049v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63051v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63052v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63053v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63054v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63056v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63057v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63058v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63059v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63063v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63066v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63069v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63070v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63071v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63077v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63078v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65136v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65137v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65138v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65139v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68002v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68003v12.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68004v16.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68008v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68010v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68012v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68013v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68014v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68015v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68016v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68017v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68018v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68019v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68020v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68022v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68023v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68024v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68025v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68026v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68027v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68028v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68029v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68030v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68038v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68039v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68040v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule69600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70002v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70003v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70006v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70025v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70027v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70028v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70030v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70036v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70037v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700400v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700401v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule1000v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule1000v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11768v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11769v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11770v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11771v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11792v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11793v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11794v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11834v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11890v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11930v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11931v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11932v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11933v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11939v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11981v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11989v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120100v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120128v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120402v21.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120600v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120601v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120602v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120603v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120607v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120608v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120609v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120610v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120611v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120612v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120613v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120614v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120615v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120616v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120617v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120618v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120619v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120620v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120621v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120622v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120623v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120624v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120626v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120627v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120628v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120629v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120630v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120631v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120632v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120633v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120634v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120635v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120636v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120637v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120638v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120639v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120640v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120641v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120642v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120643v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120644v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120647v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120652v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120653v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120654v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120655v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-3FeatureCache.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.0953.5356.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.1052.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1149.2948.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_114938_158-b2c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_115005_9064-2616.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-04_093243_16a0-1d8c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_115005_4240-5892.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-04_093243_14f4-1074.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2023-10-04_084137_4224-6092.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine_2023-10-04_105957_c7c-3d4.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser_2023-10-04_105958_19ec-19e8.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall_2023-10-04_105950_1894-1898.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_114942_500-1efc.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115011_3184-4676.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115204_7008-7012.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115740_6260-6264.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121144_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121212_7980-7984.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_082907_5964-5996.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083412_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083652_5268-4940.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\2057\StructuredQuerySchema.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.3.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db
GeoSwath RDF
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[1].htm
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[2].htm
JSON data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\activity-stream.discovery_stream.json
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-child-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\startupCache.8.little
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache-current.bin
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache.bin
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.6dfb6b5d-10db-4868-b4ad-ef207a2dda1b.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\TokenBroker\Cache\e71e1300703d5395820e448840a760f0dd25ad50.tbres
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.index
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2e3f3162-b212-4a10-8918-a93180c42736}\Apps.index
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3562040e-6ba4-4dec-86d8-f95aa3865af5}\Apps.index
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.csg
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.schema
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsconversions.txt
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appssynonyms.txt
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.csg
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.schema
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsconversions.txt
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.ft
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.index
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.ft
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.index
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\ntkrnlmp.pdb
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\winload_prod.pdb
data
dropped
C:\Users\user\AppData\Local\bowsakkdestx.txt
data
dropped
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\CameraRoll.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\SavedPictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DRBXYKCKXO.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DTBZGIOOSO.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JQADJOBBUH.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LHEPQPGEWF.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PALRGUCVEH.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf
HIT archive data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZBEDCJPBEY.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZUYYDJDFVF.png
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMDocs.sav.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMGrpPrm.sav.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\CameraRoll.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Documents.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Music.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Pictures.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\SavedPictures.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Videos.library-ms.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DRBXYKCKXO.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DTBZGIOOSO.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JQADJOBBUH.png.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.pdf.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\LHEPQPGEWF.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.png.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.pdf.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\PALRGUCVEH.png.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.pdf.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf.bgjs (copy)
HIT archive data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.png.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.docx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.jpg.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.mp3.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZBEDCJPBEY.png.bgjs (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZUYYDJDFVF.png.bgjs (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO.docx
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO.docx.bgjs (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\DTBZGIOOSO.docx
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\DTBZGIOOSO.docx.bgjs (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\KATAXZVCPS.mp3.bgjs (copy)
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\VLZDGUKUTZ.jpg
data
dropped
C:\Users\user\Desktop\DTBZGIOOSO\VLZDGUKUTZ.jpg.bgjs (copy)
data
dropped
C:\Users\user\Desktop\KATAXZVCPS.pdf
data
dropped
C:\Users\user\Desktop\KATAXZVCPS.pdf.bgjs (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU.pdf
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU.pdf.bgjs (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\LTKMYBSEYZ.pdf
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\LTKMYBSEYZ.pdf.bgjs (copy)
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\YPSIACHYXW.jpg
data
dropped
C:\Users\user\Desktop\ONBQCLYSPU\YPSIACHYXW.jpg.bgjs (copy)
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\NWTVCDUMOB.png
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\NWTVCDUMOB.png.bgjs (copy)
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx.bgjs (copy)
data
dropped
C:\Users\user\Desktop\YPSIACHYXW.mp3
data
dropped
C:\Users\user\Desktop\YPSIACHYXW.mp3.bgjs (copy)
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\ONBQCLYSPU.pdf
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\ONBQCLYSPU.pdf.bgjs (copy)
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\VLZDGUKUTZ.jpg
data
dropped
C:\Users\user\Documents\DTBZGIOOSO\VLZDGUKUTZ.jpg.bgjs (copy)
data
dropped
C:\Users\user\Documents\KATAXZVCPS.mp3
data
dropped
C:\Users\user\Documents\KATAXZVCPS.mp3.bgjs (copy)
data
dropped
C:\Users\user\Documents\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\Documents\KATAXZVCPS.xlsx.bgjs (copy)
data
dropped
C:\Users\user\Documents\ONBQCLYSPU\ONBQCLYSPU.docx
data
dropped
C:\Users\user\Documents\ONBQCLYSPU\ONBQCLYSPU.docx.bgjs (copy)
data
dropped
C:\Users\user\Documents\UMMBDNEQBN.png
data
dropped
C:\Users\user\Documents\UMMBDNEQBN.png.bgjs (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Documents\XZXHAVGRAG.docx.bgjs (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png.bgjs (copy)
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\XZXHAVGRAG.docx
data
dropped
C:\Users\user\Documents\XZXHAVGRAG\XZXHAVGRAG.docx.bgjs (copy)
data
dropped
C:\Users\user\Downloads\DVWHKMNFNN.jpg
data
dropped
C:\Users\user\Downloads\DVWHKMNFNN.jpg.bgjs (copy)
data
dropped
C:\Users\user\Downloads\VLZDGUKUTZ.jpg
data
dropped
C:\Users\user\Downloads\VLZDGUKUTZ.jpg.bgjs (copy)
data
dropped
C:\Users\user\Favorites\Google.url
data
dropped
C:\Users\user\Favorites\Google.url.bgjs (copy)
data
dropped
C:\Users\user\Favorites\NYTimes.url
data
dropped
C:\Users\user\Favorites\NYTimes.url.bgjs (copy)
data
dropped
C:\Users\user\Favorites\Twitter.url
data
dropped
C:\Users\user\Favorites\Twitter.url.bgjs (copy)
data
dropped
C:\Users\user\Favorites\Youtube.url
data
dropped
C:\Users\user\Favorites\Youtube.url.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeCMapFnt23.lst.bgjs (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeSysFnt23.lst.bgjs (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\IconCacheAcro65536.dat.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Edge\User Data\CrashpadMetrics-active.pma.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\FontCache\3\ListAll.Json.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\FontCache\4\CatalogCacheMetaData.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.chk.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.log.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbtmp.log.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-UserConfig.log.bgjs (copy)
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170039v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170040v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170041v2.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170042v4.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170043v1.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170044v4.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170048v0.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\officesetup.exe_Rules.xml.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\Features\1-3FeatureCache.txt.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\Features\1-7FeatureCache.txt.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\PenWorkspace\DiscoverCacheData.dat.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\2057\StructuredQuerySchema.bin.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.3.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog.etl.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1280.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1920.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_2560.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_768.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_96.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_custom_stream.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_exif.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_sr.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_wide.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_1280.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_1920.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_2560.db.bgjs (copy)
GeoSwath RDF
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_32.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_768.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.bgjs (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_exif.db.bgjs (copy)
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms.bgjs (copy)
data
dropped
There are 1400 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\n8XBpFdVFU.exe
"C:\Users\user\Desktop\n8XBpFdVFU.exe"
 malicious
C:\Users\user\Desktop\n8XBpFdVFU.exe
"C:\Users\user\Desktop\n8XBpFdVFU.exe"
 malicious
C:\Users\user\Desktop\n8XBpFdVFU.exe
"C:\Users\user\Desktop\n8XBpFdVFU.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\Desktop\n8XBpFdVFU.exe
"C:\Users\user\Desktop\n8XBpFdVFU.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe --Task
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe --Task
 malicious
C:\Users\user\AppData\Local\66ea3557-6cb8-4b6a-8c65-832fd98152ba\build2.exe
"C:\Users\user\AppData\Local\66ea3557-6cb8-4b6a-8c65-832fd98152ba\build2.exe"
malicious
C:\Users\user\AppData\Local\66ea3557-6cb8-4b6a-8c65-832fd98152ba\build2.exe
"C:\Users\user\AppData\Local\66ea3557-6cb8-4b6a-8c65-832fd98152ba\build2.exe"
malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
"C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
"C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
"C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe
"C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771\n8XBpFdVFU.exe" --AutoStart
 malicious
C:\Windows\SysWOW64\icacls.exe
icacls "C:\Users\user\AppData\Local\d4e6879e-eed6-4d79-bc2f-348cb48e7771" /deny *S-1-1-0:(OI)(CI)(DE,DC)
There are 3 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637
211.119.84.111
 malicious
https://player.vimeo.com
unknown
http://cajgtus.com/files/1/build3.exe$run
unknown
https://assets.activity.windows.com/v1/assets
unknown
https://95.217.9.149HIEHI
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199673019888
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=EyWBqDQS-6jg&a
unknown
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=truecQc_
unknown
http://cajgtus.com/files/1/build3.exer
unknown
http://schemas.microsoft.c
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
https://www.gstatic.cn/recaptcha/
unknown
https://95.217.9.149/JKKJDGDGDGIDGIIDAAK
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=engl
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://www.youtube.com
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://www.google.com
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17rer.exe
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=en
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=1_BxDGVvfXwv&am
unknown
https://s.ytimg.com;
unknown
https://steamcommunity.com/profiles/76561199673019888P
unknown
http://www.reddit.com/
unknown
https://steam.tv/
unknown
https://95.217.9.1494/4/2024
unknown
https://95.217.9.149a
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=c4UneKQJ
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://store.steampowered.com/points/shop/
unknown
https://api.2ip.ua/geo.jsono
unknown
http://sdfjhuz.com/dl/build2.exe$run
unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
unknown
https://api.2ip.ua/geo.jsonj
unknown
https://sketchfab.com
unknown
https://steamcommunity.com/profiles/76561199673019888/badges
unknown
https://lv.queniujq.cn
unknown
https://www.youtube.com/
unknown
https://api.2ip.ua/%M
unknown
https://api.2ip.ua/geo.jsonf
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://api.2ip.ua/geo.jsonb
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=ZVlkBFZXqRp1&l=e
unknown
http://www.youtube.com/
unknown
https://wetransfer.com/downloads/54cdfd152fe98eedb628a1f4ddb7076420240421150208/403a27
unknown
https://www.google.com/recaptcha/
unknown
https://checkout.steampowered.com/
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
unknown
https://api.2ip.ua/geo.jsonO
unknown
https://95.217.9.14925ef84b733fnt-Disposition:
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
unknown
https://95.217.9.149/
95.217.9.149
https://api.2ip.ua/8
unknown
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://store.steampowered.com/;
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
https://t.me/irfailAt
unknown
https://95.217.9.149.exe
unknown
https://95.217.9.149
unknown
https://help.steampowered.com/en/
unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
https://community.akamai.steamstatic.com/
unknown
http://www.amazon.com/
unknown
https://api.2ip.ua/geo.jsonIW
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
unknown
http://www.twitter.com/
unknown
https://recaptcha.net/recaptcha/;
unknown
https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
unknown
http://www.openssl.org/support/faq.html
unknown
https://steamcommunity.com/discussions/
unknown
https://store.steampowered.com/stats/
unknown
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
unknown
https://95.217.9.149/bz(
unknown
https://95.217.9.149/y
unknown
https://medal.tv
unknown
https://broadcast.st.dl.eccdnx.com
unknown
https://95.217.9.149/x
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://store.steampowered.com/steam_refunds/
unknown
https://steamcommunity.com/E
unknown
https://95.217.9.149/n
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
sdfjhuz.com
175.119.10.231
 malicious
cajgtus.com
211.119.84.111
 malicious
steamcommunity.com
96.17.209.196
api.2ip.ua
172.67.139.220

IPs

IP
Domain
Country
Malicious
211.119.84.111
cajgtus.com
Korea Republic of
malicious
175.119.10.231
sdfjhuz.com
Korea Republic of
malicious
172.67.139.220
api.2ip.ua
United States
95.217.9.149
unknown
Germany
96.17.209.196
steamcommunity.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SysHelper
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
SysHelper

Memdumps

Base Address
Regiontype
Protect
Malicious
5E20000
direct allocation
page execute and read and write
 malicious
5DE0000
direct allocation
page execute and read and write
 malicious
1CE0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
5E20000
direct allocation
page execute and read and write
 malicious
5D90000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
5EA0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
7B7000
heap
page read and write
9AA7000
heap
page read and write
31B0000
direct allocation
page read and write
9C66000
heap
page read and write
318E000
heap
page read and write
74E000
stack
page read and write
20C30000
heap
page read and write
318C000
heap
page read and write
9B54000
heap
page read and write
64E000
stack
page read and write
319B000
heap
page read and write
9AE7000
heap
page read and write
4350000
heap
page read and write
9B1B000
heap
page read and write
3146000
heap
page read and write
8C6000
heap
page read and write
31B0000
direct allocation
page read and write
319B000
heap
page read and write
21F0000
heap
page read and write
97C0000
direct allocation
page read and write
2CAE000
stack
page read and write
9B6C000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
3100000
heap
page read and write
9B69000
heap
page read and write
314E000
heap
page read and write
31B0000
direct allocation
page read and write
3193000
heap
page read and write
2B6E000
stack
page read and write
9AC4000
heap
page read and write
9A9B000
heap
page read and write
41B000
unkown
page write copy
2A10000
heap
page read and write
1EA9E000
stack
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
9AD1000
heap
page read and write
33F8000
heap
page read and write
343C000
heap
page read and write
9C61000
heap
page read and write
40A1000
unkown
page readonly
3323000
heap
page read and write
9B49000
heap
page read and write
3327000
heap
page read and write
14EDE000
stack
page read and write
3129000
heap
page read and write
1B8E000
stack
page read and write
3145000
heap
page read and write
30CA000
heap
page read and write
32D2000
heap
page read and write
9B5E000
heap
page read and write
3146000
heap
page read and write
412000
unkown
page readonly
ADE000
stack
page read and write
3373000
heap
page read and write
29FF000
stack
page read and write
9C10000
heap
page read and write
1A02000
unkown
page read and write
2FB0000
remote allocation
page read and write
9BEF000
heap
page read and write
3373000
heap
page read and write
3421000
heap
page read and write
31B0000
direct allocation
page read and write
9C47000
heap
page read and write
2B6D000
stack
page read and write
412000
unkown
page readonly
84F000
heap
page read and write
3126000
heap
page read and write
267E000
stack
page read and write
9C0F000
heap
page read and write
97C0000
direct allocation
page read and write
9AB2000
heap
page read and write
52B000
remote allocation
page execute and read and write
31B0000
direct allocation
page read and write
3200000
heap
page read and write
287F000
stack
page read and write
33A0000
heap
page read and write
19C000
stack
page read and write
97C0000
direct allocation
page read and write
193000
stack
page read and write
9ABD000
heap
page read and write
B8AE000
stack
page read and write
31B0000
direct allocation
page read and write
9AED000
heap
page read and write
9B000
stack
page read and write
97C0000
direct allocation
page read and write
14E9D000
stack
page read and write
3160000
heap
page read and write
97C0000
direct allocation
page read and write
33C9000
heap
page read and write
9AC3000
heap
page read and write
401000
unkown
page execute read
3580000
direct allocation
page read and write
400000
unkown
page readonly
30C7000
heap
page read and write
193000
stack
page read and write
97C0000
direct allocation
page read and write
41B000
unkown
page read and write
8A8000
heap
page read and write
421000
unkown
page write copy
9B6C000
heap
page read and write
31B0000
direct allocation
page read and write
421000
unkown
page write copy
9C30000
heap
page read and write
31A6000
heap
page read and write
42EF000
stack
page read and write
5F0000
heap
page read and write
319E000
heap
page read and write
890000
heap
page read and write
3580000
direct allocation
page read and write
9C7D000
heap
page read and write
19A3E000
stack
page read and write
3198000
heap
page read and write
887000
heap
page read and write
31B0000
direct allocation
page read and write
9A90000
heap
page read and write
41CE000
stack
page read and write
650000
heap
page read and write
319B000
heap
page read and write
9AAC000
heap
page read and write
9ABF000
heap
page read and write
3322000
heap
page read and write
31B0000
direct allocation
page read and write
30F9000
heap
page read and write
9A96000
heap
page read and write
19B000
stack
page read and write
97C0000
direct allocation
page read and write
9A000
stack
page read and write
32EB000
heap
page read and write
43FF000
stack
page read and write
8E7000
heap
page read and write
94C000
heap
page read and write
7D7000
heap
page read and write
2FB1000
heap
page read and write
30EF000
heap
page read and write
31B0000
direct allocation
page read and write
3580000
direct allocation
page read and write
529000
remote allocation
page execute and read and write
418000
unkown
page write copy
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
413E000
stack
page read and write
421000
unkown
page write copy
332B000
heap
page read and write
3362000
heap
page read and write
400000
unkown
page readonly
3580000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
810000
heap
page read and write
344A000
heap
page read and write
9AA7000
heap
page read and write
400000
unkown
page readonly
97C0000
direct allocation
page read and write
3580000
direct allocation
page read and write
41DE000
stack
page read and write
31B0000
direct allocation
page read and write
2B60E000
stack
page read and write
9AC9000
heap
page read and write
41BE000
stack
page read and write
330A000
heap
page read and write
97C0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
30BE000
heap
page read and write
750000
heap
page read and write
316B000
heap
page read and write
3431000
heap
page read and write
3145000
heap
page read and write
9A91000
heap
page read and write
9ADD000
heap
page read and write
89C000
heap
page read and write
401000
unkown
page execute read
529000
remote allocation
page execute and read and write
271F000
stack
page read and write
4B3000
unkown
page read and write
313E000
heap
page read and write
3169000
heap
page read and write
97C0000
direct allocation
page read and write
9C000
stack
page read and write
81A000
heap
page read and write
3141000
heap
page read and write
3198000
heap
page read and write
97C0000
direct allocation
page read and write
19B000
stack
page read and write
9B5B000
heap
page read and write
40A1000
unkown
page readonly
9BF7000
heap
page read and write
1BC0000
direct allocation
page read and write
3157000
heap
page read and write
9B69000
heap
page read and write
97C0000
direct allocation
page read and write
325C000
heap
page read and write
30EF000
heap
page read and write
97C0000
direct allocation
page read and write
400000
unkown
page readonly
9B6C000
heap
page read and write
9C49000
heap
page read and write
97C0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
3155000
heap
page read and write
76E000
stack
page read and write
9C55000
heap
page read and write
32A7000
heap
page read and write
41E000
unkown
page write copy
1E5AE000
stack
page read and write
3155000
heap
page read and write
6B5000
heap
page read and write
412000
unkown
page readonly
887000
heap
page read and write
9B21000
heap
page read and write
319B000
heap
page read and write
33C5000
heap
page read and write
31B0000
direct allocation
page read and write
2E5E000
stack
page read and write
46C0000
heap
page read and write
3373000
heap
page read and write
3174000
heap
page read and write
99A000
heap
page read and write
193000
stack
page read and write
650000
heap
page read and write
9AAC000
heap
page read and write
9C36000
heap
page read and write
313E000
heap
page read and write
3146000
heap
page read and write
961000
heap
page read and write
316F000
heap
page read and write
9B54000
heap
page read and write
31A6000
heap
page read and write
2DED000
stack
page read and write
401000
unkown
page execute read
97C0000
direct allocation
page read and write
3373000
heap
page read and write
32EA000
heap
page read and write
1E932000
direct allocation
page read and write
31B0000
direct allocation
page read and write
9ADE000
heap
page read and write
97C0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
1E93D000
direct allocation
page readonly
A57000
heap
page read and write
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
31A1000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
9C40000
heap
page read and write
9C4A000
heap
page read and write
30FF000
heap
page read and write
97C0000
direct allocation
page read and write
3179000
heap
page read and write
9B6C000
heap
page read and write
333A000
heap
page read and write
7F8000
heap
page read and write
3373000
heap
page read and write
1CDF000
stack
page read and write
3176000
heap
page read and write
9AAC000
heap
page read and write
349C000
stack
page read and write
261A000
heap
page read and write
333D000
heap
page read and write
2BAE000
stack
page read and write
8D3000
heap
page read and write
31B0000
direct allocation
page read and write
40A1000
unkown
page readonly
9ACA000
heap
page read and write
1F0000
heap
page read and write
409F000
unkown
page read and write
831000
heap
page read and write
9C6D000
heap
page read and write
758000
heap
page read and write
40A1000
unkown
page readonly
9AB3000
heap
page read and write
9AC9000
heap
page read and write
B50000
heap
page read and write
401000
unkown
page execute read
30C4000
heap
page read and write
97C0000
direct allocation
page read and write
400000
unkown
page readonly
409F000
unkown
page read and write
31B0000
direct allocation
page read and write
7A0000
heap
page read and write
945000
heap
page read and write
1E5F1000
heap
page read and write
1BF90000
heap
page read and write
281F000
stack
page read and write
991000
heap
page read and write
9AC9000
heap
page read and write
9ABC000
heap
page read and write
31AB000
heap
page read and write
1F0000
heap
page read and write
31B0000
direct allocation
page read and write
9B6C000
heap
page read and write
6BE000
stack
page read and write
9BEF000
heap
page read and write
31B0000
direct allocation
page read and write
1E6F0000
direct allocation
page execute and read and write
9B40000
heap
page read and write
948000
heap
page read and write
33DE000
heap
page read and write
9B32000
heap
page read and write
9BD6000
heap
page read and write
51A000
remote allocation
page execute and read and write
421000
unkown
page write copy
35B0000
trusted library allocation
page read and write
8D3000
heap
page read and write
28FE000
stack
page read and write
998C000
stack
page read and write
32A3000
heap
page read and write
3176000
heap
page read and write
9C33000
heap
page read and write
932000
heap
page read and write
97C0000
direct allocation
page read and write
94B000
heap
page read and write
4180000
heap
page read and write
401000
unkown
page execute read
341D000
heap
page read and write
3580000
direct allocation
page read and write
94F000
stack
page read and write
3580000
direct allocation
page read and write
9AC4000
heap
page read and write
31A8000
heap
page read and write
341E000
heap
page read and write
2E60000
remote allocation
page read and write
421000
unkown
page write copy
213D000
stack
page read and write
64E000
stack
page read and write
31B0000
direct allocation
page read and write
2E9E000
stack
page read and write
2FB1000
heap
page read and write
9B5C000
heap
page read and write
1DDC000
heap
page read and write
9B000
stack
page read and write
28FE000
stack
page read and write
421000
unkown
page write copy
1DA0000
heap
page read and write
B9F000
stack
page read and write
315C000
heap
page read and write
97C0000
direct allocation
page read and write
9C61000
heap
page read and write
330A000
heap
page read and write
30D2000
heap
page read and write
1E95D000
heap
page read and write
3580000
direct allocation
page read and write
317A000
heap
page read and write
9AF9000
heap
page read and write
421000
unkown
page write copy
400000
unkown
page readonly
9C79000
heap
page read and write
314E000
heap
page read and write
2CFE000
stack
page read and write
31B0000
direct allocation
page read and write
41B000
unkown
page write copy
9A9E000
heap
page read and write
319A000
heap
page read and write
340D000
heap
page read and write
30C4000
heap
page read and write
44F0000
direct allocation
page read and write
38F0000
heap
page read and write
9BD3000
heap
page read and write
3429000
heap
page read and write
1E8FD000
direct allocation
page execute read
31B0000
direct allocation
page read and write
6FE000
stack
page read and write
3143000
heap
page read and write
31AB000
heap
page read and write
31B0000
direct allocation
page read and write
333D000
heap
page read and write
313E000
heap
page read and write
31B0000
direct allocation
page read and write
93E000
heap
page read and write
3179000
heap
page read and write
19B000
stack
page read and write
31B0000
direct allocation
page read and write
3580000
direct allocation
page read and write
30DA000
heap
page read and write
9B60000
heap
page read and write
2F9F000
stack
page read and write
30C2000
heap
page read and write
1290F000
stack
page read and write
33C5000
heap
page read and write
2B6D000
stack
page read and write
319B000
heap
page read and write
9C37000
heap
page read and write
400000
unkown
page readonly
7E7000
heap
page read and write
DE2E000
stack
page read and write
7D7000
heap
page read and write
319E000
heap
page read and write
313E000
heap
page read and write
989000
heap
page read and write
421000
unkown
page write copy
737000
heap
page read and write
1E6F1000
direct allocation
page execute read
97C0000
direct allocation
page read and write
2FB1000
heap
page read and write
4190000
heap
page read and write
9C30000
heap
page read and write
3146000
heap
page read and write
3250000
heap
page read and write
9B2E000
heap
page read and write
40A1000
unkown
page readonly
9B6C000
heap
page read and write
41C000
unkown
page write copy
7B1000
heap
page read and write
3132000
heap
page read and write
3920000
heap
page read and write
317F000
heap
page read and write
401000
unkown
page execute read
3157000
heap
page read and write
313E000
heap
page read and write
96F000
heap
page read and write
3132000
heap
page read and write
30EC000
heap
page read and write
9A96000
heap
page read and write
419000
unkown
page write copy
9A93000
heap
page read and write
9BDE000
heap
page read and write
948000
heap
page read and write
30DC000
heap
page read and write
8CD000
heap
page read and write
32A3000
heap
page read and write
421000
unkown
page write copy
3189000
heap
page read and write
340D000
heap
page read and write
2DED000
stack
page read and write
9B6C000
heap
page read and write
3401000
heap
page read and write
31B0000
direct allocation
page read and write
2490000
heap
page read and write
313E000
heap
page read and write
3193000
heap
page read and write
1F9F000
stack
page read and write
2B6E000
stack
page read and write
2FB1000
heap
page read and write
3240000
heap
page read and write
3580000
direct allocation
page read and write
20D95000
heap
page read and write
86C000
heap
page read and write
1A04000
unkown
page readonly
330B000
heap
page read and write
41BE000
heap
page read and write
9AAC000
heap
page read and write
31B0000
direct allocation
page read and write
32BB000
heap
page read and write
809000
heap
page read and write
32EB000
heap
page read and write
9BFF000
heap
page read and write
9B5C000
heap
page read and write
31B0000
direct allocation
page read and write
313E000
heap
page read and write
31B0000
direct allocation
page read and write
197000
stack
page read and write
195000
stack
page read and write
97C0000
direct allocation
page read and write
317F000
heap
page read and write
30CA000
heap
page read and write
88A000
heap
page read and write
3302000
heap
page read and write
2A1F000
stack
page read and write
9BBB000
heap
page read and write
529000
remote allocation
page execute and read and write
A50000
heap
page read and write
193000
stack
page read and write
1A04000
unkown
page readonly
9A9B000
heap
page read and write
317F000
heap
page read and write
8D3000
heap
page read and write
9ADF000
heap
page read and write
32BB000
heap
page read and write
447F000
stack
page read and write
9B21000
heap
page read and write
31B0000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
1F0000
heap
page read and write
3362000
heap
page read and write
30B9000
heap
page read and write
31B0000
direct allocation
page read and write
7A0000
heap
page read and write
9C61000
heap
page read and write
3312000
heap
page read and write
915000
heap
page read and write
19B000
stack
page read and write
9AA2000
heap
page read and write
103CE000
stack
page read and write
9B38000
heap
page read and write
87E000
heap
page read and write
30EE000
heap
page read and write
291F000
stack
page read and write
30C4000
heap
page read and write
41B000
unkown
page write copy
319E000
heap
page read and write
3155000
heap
page read and write
9BEC000
heap
page read and write
401000
unkown
page execute read
9A9C000
heap
page read and write
30CB000
heap
page read and write
97C0000
direct allocation
page read and write
9BD7000
heap
page read and write
A4F000
stack
page read and write
97C0000
direct allocation
page read and write
9AB5000
heap
page read and write
9AF0000
heap
page read and write
3342000
heap
page read and write
9B64000
heap
page read and write
9B38000
heap
page read and write
31B0000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
421000
unkown
page write copy
41B000
unkown
page write copy
3155000
heap
page read and write
319B000
heap
page read and write
41B000
unkown
page read and write
890000
heap
page read and write
30FC000
heap
page read and write
31B0000
direct allocation
page read and write
316D000
heap
page read and write
63F000
remote allocation
page execute and read and write
2DFE000
stack
page read and write
9AAF000
heap
page read and write
9C52000
heap
page read and write
32D2000
heap
page read and write
70E000
stack
page read and write
33A0000
heap
page read and write
9AB5000
heap
page read and write
400000
unkown
page readonly
40A1000
unkown
page readonly
3580000
direct allocation
page read and write
319E000
heap
page read and write
343C000
heap
page read and write
4358000
heap
page read and write
20FD000
stack
page read and write
9AC9000
heap
page read and write
83F000
heap
page read and write
97C2000
direct allocation
page read and write
40A1000
unkown
page readonly
80A000
heap
page read and write
9A9B000
heap
page read and write
97C0000
direct allocation
page read and write
580000
heap
page read and write
97C0000
direct allocation
page read and write
84B000
heap
page read and write
30BA000
heap
page read and write
344A000
heap
page read and write
31B0000
direct allocation
page read and write
940000
heap
page read and write
30F9000
heap
page read and write
31B0000
direct allocation
page read and write
32DA000
heap
page read and write
8CD000
heap
page read and write
45EF000
stack
page read and write
30EF000
heap
page read and write
9B5D000
heap
page read and write
32DA000
heap
page read and write
412000
unkown
page readonly
315A000
heap
page read and write
8A6000
heap
page read and write
409F000
unkown
page read and write
3126000
heap
page read and write
3197000
heap
page read and write
9B64000
heap
page read and write
3327000
heap
page read and write
8CD000
heap
page read and write
981000
heap
page read and write
94B000
heap
page read and write
314E000
heap
page read and write
30B0000
heap
page read and write
31E0000
heap
page read and write
31B0000
direct allocation
page read and write
96D000
heap
page read and write
3580000
direct allocation
page read and write
30B0000
heap
page read and write
31B0000
direct allocation
page read and write
316F000
heap
page read and write
31E0000
heap
page read and write
529000
remote allocation
page execute and read and write
9C3D000
heap
page read and write
DDEF000
stack
page read and write
32A3000
heap
page read and write
9AC9000
heap
page read and write
3429000
heap
page read and write
9B42000
heap
page read and write
33CD000
heap
page read and write
31B0000
direct allocation
page read and write
81A000
heap
page read and write
1F0000
heap
page read and write
30F2000
heap
page read and write
2A10000
heap
page read and write
3152000
heap
page read and write
400000
unkown
page readonly
4398000
heap
page read and write
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
33F8000
heap
page read and write
318E000
heap
page read and write
9BFF000
heap
page read and write
31B0000
direct allocation
page read and write
3129000
heap
page read and write
31B0000
direct allocation
page read and write
41BA000
heap
page read and write
40A1000
unkown
page readonly
3264000
heap
page read and write
3198000
heap
page read and write
9C06000
heap
page read and write
341D000
heap
page read and write
30F8000
heap
page read and write
316A000
heap
page read and write
3160000
heap
page read and write
9C82000
heap
page read and write
332C000
heap
page read and write
40A1000
unkown
page readonly
316F000
heap
page read and write
9C61000
heap
page read and write
97C0000
direct allocation
page read and write
9C06000
heap
page read and write
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
9C6E000
heap
page read and write
9C85000
heap
page read and write
32B2000
heap
page read and write
8A0000
heap
page read and write
9B5B000
heap
page read and write
9C52000
heap
page read and write
9AB1000
heap
page read and write
267F000
stack
page read and write
9B5E000
heap
page read and write
3303000
heap
page read and write
41B0000
heap
page read and write
9AD2000
heap
page read and write
8DE000
stack
page read and write
30F2000
heap
page read and write
677000
heap
page read and write
3580000
direct allocation
page read and write
8C6000
heap
page read and write
316B000
heap
page read and write
332A000
stack
page read and write
511000
remote allocation
page execute and read and write
8D3000
heap
page read and write
319E000
heap
page read and write
319E000
heap
page read and write
2A10000
heap
page read and write
90E000
stack
page read and write
97C0000
direct allocation
page read and write
86B000
heap
page read and write
1BFEC000
stack
page read and write
9B32000
heap
page read and write
6AE000
stack
page read and write
412000
unkown
page readonly
52B000
remote allocation
page execute and read and write
97C0000
direct allocation
page read and write
3386000
heap
page read and write
30E7000
heap
page read and write
3465000
heap
page read and write
277F000
stack
page read and write
19D000
stack
page read and write
9C3D000
heap
page read and write
5A5000
heap
page read and write
9BF7000
heap
page read and write
97C0000
direct allocation
page read and write
3580000
direct allocation
page read and write
31AB000
heap
page read and write
9AD2000
heap
page read and write
410000
unkown
page readonly
31B0000
direct allocation
page read and write
333A000
heap
page read and write
400000
unkown
page readonly
31B0000
direct allocation
page read and write
9B64000
heap
page read and write
8D3000
heap
page read and write
1036F000
stack
page read and write
2E60000
remote allocation
page read and write
87F000
heap
page read and write
2BAE000
stack
page read and write
7D6000
heap
page read and write
9C6D000
heap
page read and write
40A1000
unkown
page readonly
3160000
heap
page read and write
3174000
heap
page read and write
9BDF000
heap
page read and write
94E000
stack
page read and write
7D0000
heap
page read and write
9AA9000
heap
page read and write
97C0000
direct allocation
page read and write
9C08000
heap
page read and write
9AF0000
heap
page read and write
9C6E000
heap
page read and write
32B3000
heap
page read and write
9C27000
heap
page read and write
1E5F0000
heap
page read and write
43B000
unkown
page read and write
97C0000
direct allocation
page read and write
335B000
heap
page read and write
9AED000
heap
page read and write
9B32000
heap
page read and write
9C0F000
heap
page read and write
33FE000
heap
page read and write
400000
unkown
page readonly
30DA000
heap
page read and write
9C40000
heap
page read and write
9B000
stack
page read and write
278F000
stack
page read and write
3155000
heap
page read and write
41B000
unkown
page read and write
B30000
heap
page read and write
2FB0000
remote allocation
page read and write
97C0000
direct allocation
page read and write
40C0000
heap
page read and write
20C37000
heap
page read and write
31B0000
direct allocation
page read and write
30F9000
heap
page read and write
340D000
heap
page read and write
98E000
stack
page read and write
31B0000
direct allocation
page read and write
401000
unkown
page execute read
3386000
heap
page read and write
9AAF000
heap
page read and write
93E000
heap
page read and write
33C5000
heap
page read and write
97C0000
direct allocation
page read and write
44CE000
stack
page read and write
1E5E0000
heap
page read and write
9C0B000
heap
page read and write
9C41000
heap
page read and write
31B0000
direct allocation
page read and write
30F0000
heap
page read and write
3362000
heap
page read and write
9C26000
heap
page read and write
97C0000
direct allocation
page read and write
3198000
heap
page read and write
97C0000
direct allocation
page read and write
36DF000
stack
page read and write
2CBE000
stack
page read and write
7F5000
heap
page read and write
9BFF000
heap
page read and write
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
9BEF000
heap
page read and write
770000
heap
page read and write
4B3000
unkown
page read and write
319E000
heap
page read and write
9ABA000
heap
page read and write
3198000
heap
page read and write
9B2E000
heap
page read and write
3186000
heap
page read and write
31B0000
direct allocation
page read and write
3176000
heap
page read and write
9C16000
heap
page read and write
32D3000
heap
page read and write
31B0000
direct allocation
page read and write
3157000
heap
page read and write
9B30000
heap
page read and write
277F000
stack
page read and write
4340000
heap
page read and write
1A04000
unkown
page readonly
854000
heap
page read and write
40B0000
heap
page read and write
9AE5000
heap
page read and write
97C0000
direct allocation
page read and write
9BE7000
heap
page read and write
32AB000
heap
page read and write
1295E000
stack
page read and write
9B64000
heap
page read and write
B1E000
stack
page read and write
8D3000
heap
page read and write
3155000
heap
page read and write
31B0000
direct allocation
page read and write
2F5F000
stack
page read and write
3362000
heap
page read and write
31B0000
direct allocation
page read and write
3465000
heap
page read and write
780F000
stack
page read and write
558000
remote allocation
page execute and read and write
31B0000
direct allocation
page read and write
421000
unkown
page write copy
9AAC000
heap
page read and write
986000
heap
page read and write
9A91000
heap
page read and write
319B000
heap
page read and write
7FE000
stack
page read and write
3145000
heap
page read and write
197000
stack
page read and write
3146000
heap
page read and write
9BBB000
heap
page read and write
421000
unkown
page write copy
735000
heap
page read and write
80F000
heap
page read and write
401000
unkown
page execute read
9A93000
heap
page read and write
400000
unkown
page readonly
9C33000
heap
page read and write
30DA000
heap
page read and write
3186000
heap
page read and write
315A000
heap
page read and write
3155000
heap
page read and write
3178000
heap
page read and write
32AA000
heap
page read and write
401000
unkown
page execute read
3190000
heap
page read and write
4570000
heap
page read and write
86B000
heap
page read and write
9AE6000
heap
page read and write
32D2000
heap
page read and write
9AA2000
heap
page read and write
B37000
heap
page read and write
94A000
heap
page read and write
42FE000
stack
page read and write
9B35000
heap
page read and write
400000
unkown
page readonly
9C6E000
heap
page read and write
9C81000
heap
page read and write
70E000
stack
page read and write
9AC9000
heap
page read and write
9C7E000
heap
page read and write
3441000
heap
page read and write
84C000
heap
page read and write
737000
heap
page read and write
9AA7000
heap
page read and write
318C000
heap
page read and write
313E000
heap
page read and write
33A0000
heap
page read and write
7A8000
heap
page read and write
3152000
heap
page read and write
319B000
heap
page read and write
5FE0000
heap
page read and write
2FB0000
remote allocation
page read and write
9ABF000
heap
page read and write
334B000
heap
page read and write
2CAF000
stack
page read and write
341D000
heap
page read and write
3327000
heap
page read and write
9AE9000
heap
page read and write
412000
unkown
page readonly
335B000
heap
page read and write
9AAC000
heap
page read and write
9C61000
heap
page read and write
30F4000
heap
page read and write
852000
heap
page read and write
30B1000
heap
page read and write
263F000
stack
page read and write
3292000
heap
page read and write
988000
heap
page read and write
30F4000
heap
page read and write
2DFD000
stack
page read and write
9B6C000
heap
page read and write
418000
unkown
page read and write
97C0000
direct allocation
page read and write
5F50000
heap
page read and write
30FD000
heap
page read and write
933000
heap
page read and write
3178000
heap
page read and write
854000
heap
page read and write
9B000
stack
page read and write
9C81000
heap
page read and write
1E0000
heap
page read and write
30EF000
heap
page read and write
316B000
heap
page read and write
93C000
heap
page read and write
1B00000
heap
page read and write
9B41000
heap
page read and write
31B0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
9C06000
heap
page read and write
2BBE000
stack
page read and write
2600000
heap
page read and write
3462000
heap
page read and write
3429000
heap
page read and write
2FB0000
remote allocation
page read and write
31B0000
direct allocation
page read and write
333A000
heap
page read and write
915000
heap
page read and write
30FD000
heap
page read and write
9AE7000
heap
page read and write
9A91000
heap
page read and write
51A000
remote allocation
page execute and read and write
3395000
heap
page read and write
9C0F000
heap
page read and write
820000
heap
page read and write
87E000
heap
page read and write
52CF000
stack
page read and write
2FB0000
heap
page read and write
86B000
heap
page read and write
3363000
heap
page read and write
30D2000
heap
page read and write
97C0000
direct allocation
page read and write
19A00000
remote allocation
page read and write
32C2000
heap
page read and write
3186000
heap
page read and write
3143000
heap
page read and write
412000
unkown
page readonly
52B000
remote allocation
page execute and read and write
97C0000
direct allocation
page read and write
4160000
heap
page read and write
9B6C000
heap
page read and write
197000
stack
page read and write
31AB000
heap
page read and write
1BF7F000
stack
page read and write
3129000
heap
page read and write
3580000
direct allocation
page read and write
44DE000
stack
page read and write
443E000
stack
page read and write
9AE9000
heap
page read and write
412000
unkown
page readonly
401000
unkown
page execute read
97C0000
direct allocation
page read and write
926000
heap
page read and write
943000
heap
page read and write
457F000
stack
page read and write
2FB1000
heap
page read and write
273F000
stack
page read and write
315A000
heap
page read and write
1DAE000
heap
page read and write
9C0B000
heap
page read and write
3186000
heap
page read and write
3146000
heap
page read and write
9C56000
heap
page read and write
7C0000
heap
page read and write
3141000
heap
page read and write
1E52D000
stack
page read and write
7D0000
heap
page read and write
9BDE000
heap
page read and write
3580000
direct allocation
page read and write
19A00000
remote allocation
page read and write
8D3000
heap
page read and write
31B0000
direct allocation
page read and write
9C36000
heap
page read and write
97C0000
direct allocation
page read and write
859000
heap
page read and write
97C0000
direct allocation
page read and write
9AAF000
heap
page read and write
9B23000
heap
page read and write
97C0000
direct allocation
page read and write
401000
unkown
page execute read
3162000
heap
page read and write
31B0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
41E000
unkown
page write copy
31B0000
direct allocation
page read and write
7C2000
heap
page read and write
41B000
unkown
page write copy
32AA000
heap
page read and write
97F0000
trusted library allocation
page read and write
97C0000
direct allocation
page read and write
313E000
heap
page read and write
3312000
heap
page read and write
2A10000
heap
page read and write
3146000
heap
page read and write
93C000
heap
page read and write
1741E000
stack
page read and write
3169000
heap
page read and write
948000
heap
page read and write
319B000
heap
page read and write
9AAD000
heap
page read and write
2FB0000
heap
page read and write
5FD0000
heap
page read and write
31B0000
direct allocation
page read and write
9AB3000
heap
page read and write
3353000
heap
page read and write
9ABE000
heap
page read and write
3141000
heap
page read and write
88A000
heap
page read and write
31B0000
direct allocation
page read and write
41E0000
heap
page read and write
9B30000
heap
page read and write
1A20000
heap
page read and write
30B9000
heap
page read and write
31B0000
direct allocation
page read and write
319A000
heap
page read and write
57E000
stack
page read and write
28FE000
stack
page read and write
9C2F000
heap
page read and write
2CEE000
stack
page read and write
8F2000
heap
page read and write
9DF000
stack
page read and write
40CE000
heap
page read and write
9B40000
heap
page read and write
31B0000
direct allocation
page read and write
334B000
heap
page read and write
1B4E000
stack
page read and write
9AED000
heap
page read and write
9B6C000
heap
page read and write
97C0000
direct allocation
page read and write
312F000
heap
page read and write
3190000
heap
page read and write
1F0000
heap
page read and write
1F0000
heap
page read and write
332C000
heap
page read and write
8F0000
heap
page read and write
315E000
heap
page read and write
3171000
heap
page read and write
31B0000
direct allocation
page read and write
7E6000
heap
page read and write
319B000
heap
page read and write
9A93000
heap
page read and write
3173000
heap
page read and write
932E000
stack
page read and write
890000
heap
page read and write
41C000
unkown
page write copy
97C0000
direct allocation
page read and write
9C66000
heap
page read and write
9B64000
heap
page read and write
3580000
direct allocation
page read and write
4B3000
unkown
page read and write
467F000
stack
page read and write
88A000
heap
page read and write
94C000
heap
page read and write
9B21000
heap
page read and write
31B0000
direct allocation
page read and write
9C61000
heap
page read and write
31A8000
heap
page read and write
316A000
heap
page read and write
3302000
heap
page read and write
9B64000
heap
page read and write
97C0000
direct allocation
page read and write
331B000
heap
page read and write
9C56000
heap
page read and write
2FB0000
remote allocation
page read and write
97C0000
direct allocation
page read and write
9AE6000
heap
page read and write
5F5000
heap
page read and write
9AF0000
heap
page read and write
690000
heap
page read and write
8D3000
heap
page read and write
45D0000
heap
page read and write
341D000
heap
page read and write
8D0000
heap
page read and write
2FB1000
heap
page read and write
3342000
heap
page read and write
32C3000
heap
page read and write
9B54000
heap
page read and write
3401000
heap
page read and write
30F5000
heap
page read and write
51A000
remote allocation
page execute and read and write
3155000
heap
page read and write
3194000
heap
page read and write
3327000
heap
page read and write
33DE000
heap
page read and write
97C0000
direct allocation
page read and write
30DE000
heap
page read and write
3155000
heap
page read and write
9BDE000
heap
page read and write
42DF000
stack
page read and write
9C000
stack
page read and write
3580000
direct allocation
page read and write
2FB0000
heap
page read and write
9B30000
heap
page read and write
57E000
stack
page read and write
3100000
heap
page read and write
9C17000
heap
page read and write
9BF7000
heap
page read and write
290CD000
stack
page read and write
30FD000
heap
page read and write
9B50000
heap
page read and write
29FF000
stack
page read and write
3431000
heap
page read and write
30B0000
heap
page read and write
97C0000
direct allocation
page read and write
315A000
heap
page read and write
449F000
stack
page read and write
9C5E000
heap
page read and write
3441000
heap
page read and write
3155000
heap
page read and write
B4F000
stack
page read and write
401000
unkown
page execute read
3327000
heap
page read and write
28BF000
stack
page read and write
3160000
heap
page read and write
344A000
heap
page read and write
30FB000
heap
page read and write
30D3000
heap
page read and write
30CF000
heap
page read and write
9B64000
heap
page read and write
9C34000
heap
page read and write
33ED000
heap
page read and write
24A0000
heap
page read and write
9AE5000
heap
page read and write
97C0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
9AE8000
heap
page read and write
20D77000
heap
page read and write
996000
heap
page read and write
675000
heap
page read and write
9BD7000
heap
page read and write
421000
unkown
page write copy
9B5D000
heap
page read and write
9C61000
heap
page read and write
1E8FF000
direct allocation
page readonly
9B3C000
heap
page read and write
412000
unkown
page readonly
42A0000
heap
page read and write
41E0000
heap
page read and write
3303000
heap
page read and write
3174000
heap
page read and write
322C000
stack
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
30BE000
heap
page read and write
19E000
stack
page read and write
97C0000
direct allocation
page read and write
843000
heap
page read and write
3190000
heap
page read and write
33A0000
heap
page read and write
9BF7000
heap
page read and write
2608000
heap
page read and write
97C0000
direct allocation
page read and write
40A1000
unkown
page readonly
9ABD000
heap
page read and write
313E000
heap
page read and write
9BE7000
heap
page read and write
31A6000
heap
page read and write
3580000
direct allocation
page read and write
287F000
stack
page read and write
97C0000
direct allocation
page read and write
514000
remote allocation
page execute and read and write
313E000
heap
page read and write
197000
stack
page read and write
2BAE000
stack
page read and write
9B38000
heap
page read and write
866000
heap
page read and write
3155000
heap
page read and write
97C0000
direct allocation
page read and write
2F5F000
stack
page read and write
314B000
heap
page read and write
9ABB000
heap
page read and write
529000
remote allocation
page execute and read and write
412000
unkown
page readonly
5A7000
heap
page read and write
650000
heap
page read and write
2BAE000
stack
page read and write
3160000
heap
page read and write
27BE000
stack
page read and write
9BF7000
heap
page read and write
9BDE000
heap
page read and write
9B54000
heap
page read and write
3172000
heap
page read and write
9B21000
heap
page read and write
9C28000
heap
page read and write
30B1000
heap
page read and write
97C0000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
97C0000
direct allocation
page read and write
30B0000
heap
page read and write
3155000
heap
page read and write
3186000
heap
page read and write
40CA000
heap
page read and write
866000
heap
page read and write
400000
unkown
page readonly
4458000
heap
page execute and read and write
31B0000
direct allocation
page read and write
1E550000
trusted library allocation
page read and write
3155000
heap
page read and write
2CFE000
stack
page read and write
313E000
heap
page read and write
9C76000
heap
page read and write
2FB0000
remote allocation
page read and write
3155000
heap
page read and write
5EC0000
direct allocation
page read and write
9ADE000
heap
page read and write
9AC6000
heap
page read and write
77F000
stack
page read and write
97C0000
direct allocation
page read and write
8CB000
heap
page read and write
3177000
heap
page read and write
9AAC000
heap
page read and write
41B000
unkown
page write copy
2F5F000
stack
page read and write
319E000
heap
page read and write
9C7D000
heap
page read and write
41C000
unkown
page write copy
9AA2000
heap
page read and write
9B6C000
heap
page read and write
31B0000
direct allocation
page read and write
848000
heap
page read and write
2A6E000
stack
page read and write
2A6E000
stack
page read and write
9C48000
heap
page read and write
818000
heap
page read and write
3162000
heap
page read and write
41B000
unkown
page write copy
9C10000
heap
page read and write
9C33000
heap
page read and write
5A0000
heap
page read and write
8B9000
heap
page read and write
9BD3000
heap
page read and write
9A8D000
stack
page read and write
9BBB000
heap
page read and write
32FA000
heap
page read and write
3190000
heap
page read and write
2A7E000
stack
page read and write
9B5C000
heap
page read and write
52B000
remote allocation
page execute and read and write
97C0000
direct allocation
page read and write
9B33000
heap
page read and write
3155000
heap
page read and write
850000
heap
page read and write
19E000
stack
page read and write
33C9000
heap
page read and write
9C00000
heap
page read and write
9B000
stack
page read and write
97C0000
direct allocation
page read and write
9C61000
heap
page read and write
3174000
heap
page read and write
97C0000
direct allocation
page read and write
21EE000
stack
page read and write
5BE000
stack
page read and write
84B000
heap
page read and write
31B0000
direct allocation
page read and write
9C61000
heap
page read and write
943000
heap
page read and write
31A6000
heap
page read and write
9AB0000
heap
page read and write
2CAF000
stack
page read and write
32FA000
heap
page read and write
2E5E000
stack
page read and write
1DBF000
heap
page execute and read and write
2CEE000
stack
page read and write
418000
unkown
page write copy
344A000
heap
page read and write
2B7E000
stack
page read and write
970000
heap
page read and write
31B0000
direct allocation
page read and write
319B000
heap
page read and write
914000
heap
page read and write
330A000
heap
page read and write
85F000
heap
page read and write
31B0000
direct allocation
page read and write
2FB0000
heap
page read and write
990000
heap
page read and write
32EB000
heap
page read and write
334B000
heap
page read and write
6120000
heap
page read and write
31B0000
direct allocation
page read and write
3146000
heap
page read and write
9C41000
heap
page read and write
3155000
heap
page read and write
97C0000
direct allocation
page read and write
9AF0000
heap
page read and write
3175000
heap
page read and write
9AD4000
heap
page read and write
401000
unkown
page execute read
2E5E000
stack
page read and write
2DFD000
stack
page read and write
9C76000
heap
page read and write
30B3000
heap
page read and write
97C0000
direct allocation
page read and write
3175000
heap
page read and write
32D2000
heap
page read and write
31B0000
direct allocation
page read and write
41B000
unkown
page read and write
359D000
stack
page read and write
9BE4000
heap
page read and write
9C41000
heap
page read and write
21A0000
heap
page read and write
3375000
heap
page read and write
31B0000
direct allocation
page read and write
30F9000
heap
page read and write
9ABA000
heap
page read and write
3373000
heap
page read and write
85F000
heap
page read and write
30C8000
heap
page read and write
1DAA000
heap
page read and write
3580000
direct allocation
page read and write
333A000
heap
page read and write
9B54000
heap
page read and write
3155000
heap
page read and write
9AB2000
heap
page read and write
9A9B000
heap
page read and write
7A7000
heap
page read and write
400000
unkown
page readonly
9C3E000
heap
page read and write
1BD0000
heap
page read and write
2FB0000
remote allocation
page read and write
3166000
heap
page read and write
9C55000
heap
page read and write
409F000
unkown
page read and write
30D2000
heap
page read and write
7E6000
heap
page read and write
3580000
direct allocation
page read and write
30DA000
heap
page read and write
30F9000
heap
page read and write
330B000
heap
page read and write
9B38000
heap
page read and write
799000
heap
page read and write
3580000
direct allocation
page read and write
3293000
heap
page read and write
277E000
stack
page read and write
858000
heap
page read and write
9B5E000
heap
page read and write
9B6C000
heap
page read and write
3580000
direct allocation
page read and write
9B42000
heap
page read and write
3386000
heap
page read and write
9AE8000
heap
page read and write
9B25000
heap
page read and write
2E60000
remote allocation
page read and write
7E6000
heap
page read and write
9AB5000
heap
page read and write
421000
unkown
page write copy
97A000
heap
page read and write
32EA000
heap
page read and write
343C000
heap
page read and write
9AAB000
heap
page read and write
3141000
heap
page read and write
9ADE000
heap
page read and write
97C0000
direct allocation
page read and write
5C0000
heap
page read and write
31B0000
direct allocation
page read and write
434000
remote allocation
page execute and read and write
41B000
unkown
page write copy
9C5E000
heap
page read and write
3157000
heap
page read and write
B86F000
stack
page read and write
2CAF000
stack
page read and write
9A91000
heap
page read and write
45E2000
heap
page execute and read and write
9B000
stack
page read and write
330B000
heap
page read and write
9B21000
heap
page read and write
6B7000
heap
page read and write
401000
unkown
page execute read
463F000
stack
page read and write
9B4E000
heap
page read and write
9B54000
heap
page read and write
9BD3000
heap
page read and write
31B0000
direct allocation
page read and write
41C000
unkown
page write copy
9BEF000
heap
page read and write
31B0000
direct allocation
page read and write
33CD000
heap
page read and write
409F000
unkown
page read and write
313E000
heap
page read and write
30FD000
heap
page read and write
30B0000
heap
page read and write
31B0000
direct allocation
page read and write
343C000
heap
page read and write
33A0000
heap
page read and write
3362000
heap
page read and write
19A00000
remote allocation
page read and write
9AE0000
heap
page read and write
30F6000
heap
page read and write
670000
heap
page read and write
9AD2000
heap
page read and write
33B6000
heap
page read and write
1E908000
direct allocation
page readonly
9AAF000
heap
page read and write
316B000
heap
page read and write
1F0000
heap
page read and write
9B49000
heap
page read and write
319A000
heap
page read and write
9BDE000
heap
page read and write
40A1000
unkown
page readonly
5F1000
remote allocation
page execute and read and write
421000
unkown
page write copy
97C0000
direct allocation
page read and write
90A000
heap
page read and write
3230000
heap
page read and write
3362000
heap
page read and write
316B000
heap
page read and write
3420000
heap
page read and write
74E000
stack
page read and write
9AAC000
heap
page read and write
315A000
heap
page read and write
46F0000
heap
page read and write
8CD000
heap
page read and write
32AA000
heap
page read and write
41D0000
heap
page read and write
3177000
heap
page read and write
412000
unkown
page readonly
2FB1000
heap
page read and write
80E000
heap
page read and write
952000
heap
page read and write
223F000
stack
page read and write
9C8E000
heap
page read and write
7D8000
heap
page read and write
3172000
heap
page read and write
9A9B000
heap
page read and write
3580000
direct allocation
page read and write
9AF9000
heap
page read and write
31B0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
9AA3000
heap
page read and write
2A6E000
stack
page read and write
41C0000
heap
page read and write
915000
heap
page read and write
9C06000
heap
page read and write
40B0000
heap
page read and write
316B000
heap
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
453F000
stack
page read and write
32EA000
heap
page read and write
197000
stack
page read and write
3155000
heap
page read and write
9C76000
heap
page read and write
3157000
heap
page read and write
97F000
heap
page read and write
5F7000
heap
page read and write
9B2E000
heap
page read and write
9B46000
heap
page read and write
199AD000
stack
page read and write
97C0000
direct allocation
page read and write
9ADE000
heap
page read and write
333F000
heap
page read and write
30FB000
heap
page read and write
412000
unkown
page readonly
9C000
stack
page read and write
30F7000
heap
page read and write
410000
unkown
page readonly
1746E000
stack
page read and write
243F000
stack
page read and write
31B0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
30F2000
heap
page read and write
9AC9000
heap
page read and write
31B0000
direct allocation
page read and write
94C000
heap
page read and write
40A1000
unkown
page readonly
85F000
heap
page read and write
9AF0000
heap
page read and write
97C0000
direct allocation
page read and write
3100000
heap
page read and write
315A000
heap
page read and write
1E93A000
direct allocation
page readonly
5A7000
heap
page read and write
887000
heap
page read and write
7C8000
heap
page read and write
9C8E000
heap
page read and write
3580000
direct allocation
page read and write
30F2000
heap
page read and write
41E8000
heap
page execute and read and write
3580000
direct allocation
page read and write
316C000
heap
page read and write
31B0000
direct allocation
page read and write
9B000
stack
page read and write
97C0000
direct allocation
page read and write
247E000
stack
page read and write
42A8000
heap
page read and write
401000
unkown
page execute read
9B69000
heap
page read and write
7E6000
heap
page read and write
97C0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
400000
unkown
page readonly
97C0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
87E000
stack
page read and write
31B0000
direct allocation
page read and write
29FF000
stack
page read and write
31B0000
direct allocation
page read and write
31B0000
direct allocation
page read and write
94B000
heap
page read and write
30DF000
heap
page read and write
3166000
heap
page read and write
31AB000
heap
page read and write
1E93F000
direct allocation
page readonly
A1E000
stack
page read and write
3580000
direct allocation
page read and write
730000
heap
page read and write
31B0000
direct allocation
page read and write
3186000
heap
page read and write
9AAB000
heap
page read and write
97C0000
direct allocation
page read and write
316D000
heap
page read and write
42FB000
heap
page execute and read and write
41B000
unkown
page write copy
9C56000
heap
page read and write
2E5E000
stack
page read and write
41E000
unkown
page write copy
3141000
heap
page read and write
31B0000
direct allocation
page read and write
9BFF000
heap
page read and write
9B50000
heap
page read and write
319B000
heap
page read and write
401000
unkown
page execute read
3401000
heap
page read and write
2CFD000
stack
page read and write
9AAC000
heap
page read and write
2FB0000
remote allocation
page read and write
40A1000
unkown
page readonly
9BBB000
heap
page read and write
78E000
stack
page read and write
8D3000
heap
page read and write
9AC7000
heap
page read and write
329B000
heap
page read and write
31B0000
direct allocation
page read and write
3373000
heap
page read and write
9C55000
heap
page read and write
454F000
heap
page execute and read and write
3580000
direct allocation
page read and write
BA0000
heap
page read and write
9AF9000
heap
page read and write
8D3000
heap
page read and write
40B0000
heap
page read and write
29FF000
stack
page read and write
7A8000
heap
page read and write
315A000
heap
page read and write
940000
heap
page read and write
25BF000
stack
page read and write
31A6000
heap
page read and write
400000
unkown
page readonly
333F000
heap
page read and write
3580000
direct allocation
page read and write
3429000
heap
page read and write
30FD000
heap
page read and write
99F000
stack
page read and write
35DE000
stack
page read and write
4390000
heap
page read and write
84B000
heap
page read and write
401000
unkown
page execute read
9C33000
heap
page read and write
313E000
heap
page read and write
3580000
direct allocation
page read and write
847000
heap
page read and write
314E000
heap
page read and write
7D6000
heap
page read and write
1E6F8000
direct allocation
page execute read
28FE000
stack
page read and write
32EB000
heap
page read and write
6B0000
heap
page read and write
412000
unkown
page readonly
9B3C000
heap
page read and write
868000
heap
page read and write
31B0000
direct allocation
page read and write
52B000
remote allocation
page execute and read and write
32EA000
heap
page read and write
410000
unkown
page readonly
3580000
direct allocation
page read and write
33C5000
heap
page read and write
9C6D000
heap
page read and write
2F5F000
stack
page read and write
7B0000
heap
page read and write
30D2000
heap
page read and write
9BDE000
heap
page read and write
31B0000
direct allocation
page read and write
3152000
heap
page read and write
9B6C000
heap
page read and write
97C0000
direct allocation
page read and write
7B5000
heap
page read and write
1E856000
direct allocation
page execute read
9AA2000
heap
page read and write
3155000
heap
page read and write
9B44000
heap
page read and write
9C55000
heap
page read and write
288F000
stack
page read and write
9AC5000
heap
page read and write
A9F000
stack
page read and write
3580000
direct allocation
page read and write
317F000
heap
page read and write
31B0000
direct allocation
page read and write
3580000
direct allocation
page read and write
9AD5000
heap
page read and write
4600000
direct allocation
page read and write
316A000
heap
page read and write
20E3C000
heap
page read and write
4530000
heap
page read and write
9B000
stack
page read and write
97C0000
direct allocation
page read and write
1EAA0000
heap
page read and write
2A20000
heap
page read and write
41C000
unkown
page write copy
3580000
direct allocation
page read and write
344A000
heap
page read and write
97C0000
direct allocation
page read and write
97C8000
direct allocation
page read and write
789000
heap
page read and write
7BF000
stack
page read and write
86C000
heap
page read and write
842000
heap
page read and write
400000
unkown
page readonly
3580000
direct allocation
page read and write
30FD000
heap
page read and write
844000
heap
page read and write
B57000
heap
page read and write
431E000
stack
page read and write
31B0000
direct allocation
page read and write
32D2000
heap
page read and write
3580000
direct allocation
page read and write
8CD000
heap
page read and write
3176000
heap
page read and write
333B000
heap
page read and write
97C0000
direct allocation
page read and write
9B21000
heap
page read and write
98A000
heap
page read and write
9BD7000
heap
page read and write
31B0000
direct allocation
page read and write
97C0000
direct allocation
page read and write
412000
unkown
page readonly
19B000
stack
page read and write
97C0000
direct allocation
page read and write
412000
unkown
page readonly
859000
heap
page read and write
30FF000
heap
page read and write
3442000
heap
page read and write
41B000
unkown
page write copy
3395000
heap
page read and write
9C1C000
heap
page read and write
9C7D000
heap
page read and write
9AED000
heap
page read and write
2A6E000
stack
page read and write
4B3000
unkown
page read and write
1F0000
heap
page read and write
193000
stack
page read and write
31B0000
direct allocation
page read and write
41B000
unkown
page read and write
97C0000
direct allocation
page read and write
33CD000
heap
page read and write
97C0000
direct allocation
page read and write
4B3000
unkown
page read and write
31AA000
heap
page read and write
31B0000
direct allocation
page read and write
316B000
heap
page read and write
2FB0000
heap
page read and write
20E3E000
heap
page read and write
9C0F000
heap
page read and write
3327000
heap
page read and write
32D2000
heap
page read and write
9BBE000
heap
page read and write
319B000
heap
page read and write
30F3000
heap
page read and write
1F0000
heap
page read and write
33C5000
heap
page read and write
97C0000
direct allocation
page read and write
9AA7000
heap
page read and write
7EA000
heap
page read and write
40FE000
stack
page read and write
98C000
heap
page read and write
9A92000
heap
page read and write
40A1000
unkown
page readonly
There are 1628 hidden memdumps, click here to show them.