Yjy9xGBDcr.exe

Status: finished

Submission Time: 2025-02-08 12:26:21 +01:00

Malicious

Ransomware

Phishing

Trojan

Spyware

Comments

Details

Analysis ID:
1610087
API (Web) ID:
1610087
Original Filename:
1c716742fa1712562e2d6275a68a8d2e73bd910bff417072259bb164f2628863.exe
Analysis Started:

2025-02-08 12:26:22 +01:00
Analysis Finished:

2025-02-08 12:38:25 +01:00
MD5:
d8889f10a8a0dda44817a2bfbd0ca237
SHA1:
8b7672496f45432a48b8d307e08855ca9e40da7b
SHA256:
1c716742fa1712562e2d6275a68a8d2e73bd910bff417072259bb164f2628863
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 68	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

Open Full Report

malicious

Score: 8/69

malicious

Score: 6/38

IPs

IP	Country	Detection
149.154.167.220	United Kingdom
162.159.135.233	United States

Domains

Name	IP	Detection
cdn.discordapp.com	162.159.135.233
api.telegram.org	149.154.167.220

URLs

Name	Detection
https://tidelift.com/subscription/pkg/pypi-setuptools?utm_source=pypi-setuptools&utm_medium=referral
http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
https://stackoverflow.com/questions/267399/how-do-you-match-only-valid-roman-numerals-with-a-regular
Click to see the 97 hidden entries
https://stackoverflow.com/questions/23836000/can-i-change-the-title-bar-in-tkinter/70724666#70724666
https://raw.githubusercontent.com/pypa/setuptools/main/docs/images/banner-640x320.svg
https://www.pcg-random.org/posts/random-invertible-mapping-statistics.html
http://crl.securetrust.com/STCA.crl0
https://yahoo.com/
https://docs.python.org/3/library/importlib.html#importlib.abc.ResourceLoader.get_data
https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword.
https://github.com/urllib3/urllib3/issues/2920
https://docs.python.org/3/library/importlib.html#importlib.abc.PathEntryFinder.find_spec
https://docs.python.org/3/library/re.html#re.sub
https://personal.math.ubc.ca/~cbm/aands/page_79.htm
http://www.firmaprofesional.com/cps0
https://github.com/pyca/cryptography/
https://docs.python.org/3/library/importlib.html#importlib.abc.InspectLoader.get_source
https://httpbin.org/post
https://cryptography.io/
https://github.com/pyca/cryptography
https://github.com/psf/black
http://crl.securetrust.com/SGCA.crl
https://mahler:8092/site-updates.py
http://google.com/
https://packaging.python.org/installing/
https://packaging.python.org/en/latest/specifications/declaring-project-metadata/
https://docs.python.org/3/library/pprint.html#pprint.pprint
https://twitter.com/
https://docs.python.org/3/library/importlib.html#importlib.abc.InspectLoader.is_package
https://personal.math.ubc.ca/~cbm/aands/page_83.htm
http://aggregate.ee.engr.uky.edu/MAGIC/#Population%20Count%20(Ones%20Count)
https://www.python.org/
http://crl3.digicer
http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf
https://img.shields.io/discord/803025117553754132
http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/
https://www.python.org
http://crl.xrampsecurity.com/XGCA.crl
https://github.com/urllib3/urllib3/issues/2513#issuecomment-1152559900.
https://gist.github.com/lyssdod/f51579ae8d93c8657a5564aefc2ffbca
http://repository.swisssign.com/
https://requests.readthedocs.io
http://tools.ietf.org/html/rfc4880
http://docs.python.org/library/itertools.html#recipes
https://mail.python.org/mailman/listinfo/cryptography-dev
https://github.com/pypa/setuptools/discussions
https://img.shields.io/badge/code%20style-black-000000.svg
https://github.com/pypa/setuptools/issues
https://www.rfc-editor.org/rfc/rfc8259#section-8.1
https://cryptography.io/en/latest/changelog/
https://graphics.stanford.edu/~seander/bithacks.html#CountBitsSetParallel
https://github.com/python/cpython/blob/3.9/Lib/importlib/_bootstrap_external.py#L679-L688
https://github.com/pypa/setuptools/actions?query=workflow%3A%22tests%22
https://docs.python.org/3/library/pprint.html
https://docs.python.org/3/library/importlib.html#importlib.abc.ExecutionLoader.get_filename
http://repository.swisssign.com/Z
http://json.org
https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md
https://personal.math.ubc.ca/~cbm/aands/page_67.htm
https://blog.jaraco.com/skeleton
https://github.com/pypa/setuptools/workflows/tests/badge.svg
https://pypi.org/project/setuptools
https://refspecs.linuxfoundation.org/elf/gabi4
https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility
https://github.com/pypa/setuptools
https://img.shields.io/codecov/c/github/pypa/setuptools/master.svg?logo=codecov&logoColor=white
https://pracrand.sourceforge.net/RNG_engines.txt
https://www.apache.org/licenses/LICENSE-2.0
https://tidelift.com/security
https://github.com/pyca/cryptography/actions?query=workflow%3ACI
https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#
http://docs.python.org/library/unittest.html
https://img.shields.io/pypi/v/setuptools.svg
https://img.shields.io/pypi/pyversions/setuptools.svg
https://img.shields.io/badge/skeleton-2022-informational
https://cryptography.io/en/latest/installation/
https://readthedocs.org/projects/cryptography/badge/?version=latest
http://bugs.python.org/issue23606)
https://github.com/pyca/cryptography/issues
https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/abc.py
https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keywordobje
https://github.com/jaraco/jaraco.functools/issues/5
https://google.com/mail
https://cryptography.io/en/latest/security/
https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword
http://crl.securetrust.com/STCA.crl
https://docs.python.org/3/library/re.html
https://github.com/Unidata/MetPy/blob/a3424de66a44bf3a92b0dcacf4dff82ad7b86712/src/metpy/plots/wx_sy
https://anzeljg.github.io/rin2/book2/2405/docs/tkinter/text.html
http://hg.python.org/cpython/file/603b4d593758/Lib/socket.py#l535
http://crl.securetrust.com/STCA.crlp
https://docs.python.org/3/library/importlib.html#importlib.abc.MetaPathFinder.invalidate_caches
https://docs.python.org/3/library/importlib.html#importlib.abc.Loader.exec_module
https://codecov.io/gh/pypa/setuptools
https://github.com/pyca/cryptography/workflows/CI/badge.svg?branch=main
https://httpbin.org/
https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/reader
https://docs.python.org/3/library/importlib.html#importlib.abc.InspectLoader.get_code
https://setuptools.pypa.io/en/latest/pkg_resources.html#basic-resource-access
https://httpbin.org/get

Dropped files

Name	File Type	Hashes
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME39.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME40.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME41.CSS.fxlocker	data	#
Click to see the 353 hidden entries
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME42.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME43.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME44.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME45.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME46.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME47.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME48.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME49.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME50.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME51.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME52.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME53.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME54.CSS.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\SCHEME55.CSS.fxlocker	COM executable for DOS	#
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\NOTICE.txt.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\AugLoop\bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\AugLoop\third-party-notices.txt.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\OfflineFiles\NOTICE_1fa04e21efa1dec0c0668cdd43d768b2.html.fxlocker	PGP Secret Sub-key -	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\OfflineFiles\polyfill_33e7694025b339fcaf6512a4a0b8ec4f.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\OfflineFiles\taskpane_a14b2bae4631878f5712b3504056ae2e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\OfflineFiles\vendor_addc71979c0ac9c9920c132702f47662.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\dist\en-us_web\NOTICE.html.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\dist\en-us_web\polyfill.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\dist\en-us_web\taskpane.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000050\dist\en-us_web\vendor.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\fabric.min_94d234d74ed3449a31fa3e9521910f6e.css.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\fabric_b8bbed0f7851ce92d04736802c50c576.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\font-awesome.min_cff276076075408b2a3fcb2054648bee.css.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\office_2e97d65336bd5d3533e966e9de09077e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\taskpane_b05ab7816bccdf9a3d9b542c17a6b4e8.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\vendor_8f7e04d1d2e2e58a693ee77c94a6c131.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\OfflineFiles\word_4ce4a05b791a68198d52edc311e474b9.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\dist\en-us_web\fabric.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\dist\en-us_web\office-online-strings\en-US\transcription-strings.min.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\dist\en-us_web\taskpane.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\dist\en-us_web\taskpanev2.js.fxlocker	DOS executable (COM)	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000051\dist\en-us_web\vendor.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\excel-win32-16.01.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\office.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\oteljs.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\oteljs_agave.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\taskpane.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000054\OfflineFiles\vendor.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\excel-win32-16.01.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\office.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\office_strings.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\onenote-win32-16.00.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\oteljs_agave.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\powerpoint-win32-16.01.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000055\OfflineFiles\word-win32-16.01.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000064\dist\excel_navigation.stats.html.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000064\dist\main.min.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000069\assets\assets\images\ExcelIllustration.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000069\assets\assets\images\PPTIllustration.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000069\assets\assets\images\WordIllustration.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\clipchamp.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\clipchamp@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\excel-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\excel-hero@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\harmony-create.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\harmony-create@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\onboarding-hero-dark.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\onboarding-hero-dark@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\onboarding-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\onboarding-hero@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\outlook-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\outlook-hero@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\password-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\password-hero@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\powerpoint-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\powerpoint-hero@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\premium-content.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\premium-content@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\sub-share-dark.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\sub-share-dark@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\sub-share.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\sub-share@2x.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\test-hero.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\welcome.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000070\assets\src\assets\images\welcome@2x.png.fxlocker	OpenPGP Secret Key	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\css\5689.0677cb3a.chunk.css.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\1657.398cd175.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\3711.1fec3cb2.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\3984.4673adcc.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\4012.92dfb9f9.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\4164.5985768e.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\5262.794b006a.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\6622.d0ba89e5.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\6732.8ccea83d.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\6906.0af829c7.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\697.d3aabccb.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\7008.5d087edb.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\8507.53a3f616.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\8633.798ac7e3.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\8663.4ec9401e.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\9005.b339fec5.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\FluidFramework-HashFallback.eeeb2baf.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\cardloopcomponent-adaptivecardview.19d32c5f.chunk.js.fxlocker	OpenPGP Secret Key	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\cardloopcomponent-chunk.30254a95.chunk.js.fxlocker	COM executable for DOS	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\cardloopmerenderer.fb60e38e.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\fluid-debugger.76cefa11.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings1.b371c0a2.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings14.569c7d97.chunk.js.fxlocker	OpenPGP Secret Key	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings2.db21f16f.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings21.3eeae8a3.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings29.75bc7df4.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings3.0abf668c.chunk.js.fxlocker	SysEx File -	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings30.582a5688.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings31.a42ea42c.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings34.42e74518.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings38.bacb8eb4.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings39.402774a5.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings40.55a28c3b.chunk.js.fxlocker	OpenPGP Secret Key	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings41.2ca083e1.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings42.ee1c8358.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings43.3ff84aa6.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings44.675feedb.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings46.7e916cc0.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings5.2149f504.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000084\fluidhost\static\js\hostUxStrings50.b796e0e0.chunk.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000109\OfflineFiles\taskpane_0ee3dc89376eef9effdf89eca763bb41.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000109\OfflineFiles\vendor_98ec68696bb43d815bb530996194c5a9.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\bootstrap.min_6dc23c90441eefdba419da30af29595c.css.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\card_4bff16073138e6edb6ef46439f6dd082.png.fxlocker	OpenPGP Public Key	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\excel-win32-16.01_09cc193fd22ac1d80c1688fb6e647114.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\excel_68ec0aa4d32d41d1333aa7055bffab5d.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\msflowsdk_778db73ba37cbce0d0678c0a94475797.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\office_bb798de0be696d51c249fa1360f329b6.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\office_strings_176f6558dbb440f26decec866f7cb844.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\oteljs_7539aac524b2065632a9ebdba388a484.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\oteljs_agave_67fbfe9c50681b505ae27d05df89013e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\oteljs_agave_cc8f80350be7f054cf0bd5d00eb24523.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\oteljs_f90942484fe888f39964aed114e56a28.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000113\OfflineFiles\powerpoint-win32-16.01_a83a7908cbb24395227f5ee17575477a.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\excel_68ec0aa4d32d41d1333aa7055bffab5d.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\grow-d-standard-384x384_4cc9b91511a301dc87e3e2ab710e0319.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\grow-l-standard-384x384_dd9d9400531736459ac517b3ca01f99b.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\messageBoxDialog_0e261b98ea3eab7b8dbc5872b41fbbe3.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\premiumHub_96998058b415d360ad60713c42307db7.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000117\OfflineFiles\vendors-shared_d2334c29343e231632260ebfc2a88e8e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000118\assets\assets\pairplot_272.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000118\logo.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\XandrVastPlayer_eb09440ee890ca44ea64f55cf70967e9.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\ast_5ec140904480cfe073d63909889476a2.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\dialog_5819043d25839a67da7c1deaa8304f4c.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\excel_68ec0aa4d32d41d1333aa7055bffab5d.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\inhousead_064f853b27221b00e7956907ed3e9147.png.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\main_7e4762622a79af90c9c7f5306a7058e6.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\office_2e97d65336bd5d3533e966e9de09077e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\offline-video_9ff1a430b8d1fb095a75666ce8bc22e0.mp4.fxlocker	very old 16-bit-int big-endian archive	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\pane_0ce61daab53d07fc913e3563db5359be.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\powerpoint_200394254d85b2ce6e3fce0c26c3085c.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\safeframe_57150c27a56bada51234f398e172b841.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000131\OfflineFiles\word_4ce4a05b791a68198d52edc311e474b9.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000132\OfflineFiles\excel_68ec0aa4d32d41d1333aa7055bffab5d.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000132\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000132\OfflineFiles\vendors-messageBoxDialog_7df91a461ca1beebb4296b1f03443782.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000135\privacy-sdx.win32.bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000137\OfflineFiles\main_034fd639556f38ae576ddb3a1f601e7e.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000138\OfflineFiles\meetingdetails_8a7c50dc6ec740704459d0171e2df459.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000138\OfflineFiles\office_bb798de0be696d51c249fa1360f329b6.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000138\OfflineFiles\office_strings_176f6558dbb440f26decec866f7cb844.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000138\OfflineFiles\onenote-win32-16.00_8102160f9f46e93681eec22b4a4cb98b.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000139\WordCopilot.win32.bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000139\WordCopilot.win32.bundle.tpn.txt.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000140\ExcelCopilot.win32.bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000141\PPTCopilot.win32.bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000142\OneNoteCopilot.win32.bundle.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\excel-win32-16.01_09cc193fd22ac1d80c1688fb6e647114.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\excel_68ec0aa4d32d41d1333aa7055bffab5d.js.fxlocker	COM executable for DOS	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\feedbackDialog_1289e8ddabc08c009e116a4709fc8dc3.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\office_bb798de0be696d51c249fa1360f329b6.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\office_strings_176f6558dbb440f26decec866f7cb844.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\oteljs_agave_cc8f80350be7f054cf0bd5d00eb24523.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\oteljs_f90942484fe888f39964aed114e56a28.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\powerpoint-win32-16.01_a83a7908cbb24395227f5ee17575477a.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\vendors-feedbackDialog_30e39fa7824dae1d5c490c645857507a.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000144\OfflineFiles\word-win32-16.01_e27f33a045d1f68178914c9754931b86.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\appentrypoint_1f4190837a7361caac306502ee3c9529.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\appentrypoint_edae21837b46ff41ac8f1113adcccb90.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\docgen_9530687ad1aa929587cbcd10319973b2.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\office_strings_247f8f78dd7820085808b5e8fec39119.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\snippetsmgmt_48f084eb06c88fcc280698fb6c6c02e0.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\templatization_97394b79b9be4e5433c1bcc0b889841f.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\templatization_d979afeb84d6e8631b3e082cd6e64bc5.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000145\OfflineFiles\word_4ce4a05b791a68198d52edc311e474b9.js.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\METCONV.TXT.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AFTRNOON\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ARCTIC\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AXIS\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLENDS\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUECALM\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUEPRNT\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BOLDSTRI\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BREEZE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CANYON\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CAPSULES\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CASCADE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\COMPASS\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CONCRETE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\DEEPBLUE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECHO\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECLIPSE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EDGE\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EVRGREEN\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EXPEDITN\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\INDUST\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LAYERS\THMBNAIL.PNG.fxlocker	data	#
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LEVEL\THMBNAIL.PNG.fxlocker	COM executable for DOS	#
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.66.0_0\eventpage_bin_prod.js.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_window.js.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log.fxlocker	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.log.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbtmp.log.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officec2rclient.exe.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officesetup.exe.db.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\ConvergedLogin_PCore_tSc0Su-bb7Jt0QVuF6v9Cg2[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\Converged_v22057_sKiljltKC1Ne_Y3fl1HuHQ2[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ConvergedLogin_PCore_AI1nyU_u3YQ_at1fSBm4Uw2[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\Converged_v22057_4HqSCTf5FFStBMz0_eIqyA2[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\ConvergedLoginPaginatedStrings.en-gb_RP-iR89BipE4i7ZOqiqEgQ2[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ConvergedLoginPaginatedStrings.en-gb_BxKM4IRLudkIao5qoVhSFA2[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\oneDs_f2e0f4a029670f10d892[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\DL2P1Z6X\pwa-vendor-bundle-1652fd8b358d589e6ec0[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\DL2P1Z6X\pwa-vendors~left-nav-rc.52c45571d19ede0a7005.chunk.v7[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\DL2P1Z6X\sharedscripts-939520eada[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\IINQQITY\pwa-bootstrap-5e7af218e953d095fabf[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\IINQQITY\pwa-left-nav-rc.6c288f9aff9797959103.chunk.v7[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\IINQQITY\staticstylesfabric-35c34b95e3[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\hero-image-desktop-f6720a4145[1].jpg.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\microsoft-365-logo-01d5ecd01a[1].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\pwa-async-styles.a903b7d0ab82e5bd2f8a.chunk.v7[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\otel-logger-104bffe9378b8041455c[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\pwa-bundle-0debb885be07c402c948[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\pwa-bundle-994d8943fc9264e2f8d3[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\pwa-mru.9ba2d4c9e339ba497e10.chunk.v7[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\ThirdPartyNotice.html.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\-U2ww19iycr3M_DiD25JdVUDdqk.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\584482RVjBIoEvVSe0RsuS1I4YQ.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\5_KhThI0onehz_-3sl58j0dOeLI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\70K_VXHc5sjoBPg97hL1pHJ7wo4.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\D_0mE1U1YmZvpLaz5wDHB6P-DAI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\DccpWCpoNzCwM4Qymi_Ji67Ilso.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\EJz06avERkAqfuwcXY6H5w8dtNc[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\F7QNLlcY2ODqtyZ0GIv9h7Cm5Yw.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\Fz9exwO1sXH1v6MZmMHhkkwLSN4.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\H3gIahXaXkGgvztu9ouLmJNXhQM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\JClcsxanpxBiLGzKZtauWAccdA0.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\KF9j9oJUfaaKiX-84yf0U337ge8.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\Kwh038ybdvX_puLwdopqHydJtVM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\MgSq5EEOyYvlI1qVlLOXfgRHmzM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\aABLNT_FV45QjYQfnRHrBCAk4GU[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\dYw9trBOUuy7sL9xTZGIliMEagg[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\gYsYMd3hJLlkm0pWl7CInhg245Y.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\k0oGmqG3Bk5KfPcZl898MPlQ1rI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\mb8fkd60iW7q4wvyDIlCm9OOn10.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\onra7PQl9o5bYT2lASI1BE4DDEs[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\pwoaMbzGzgAZN6Xp7f9HbnqMX2U.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\tIa_X3QDXj2Izj2HpQ_Mo9f1WiM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\uANxnX_BheDjd2-cdR8N9DEWlds[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\25\yNwdh0ra_6sDoSuCVMI8Wjl58UM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\-U2ww19iycr3M_DiD25JdVUDdqk.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\584482RVjBIoEvVSe0RsuS1I4YQ.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\5_KhThI0onehz_-3sl58j0dOeLI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\D_0mE1U1YmZvpLaz5wDHB6P-DAI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\DccpWCpoNzCwM4Qymi_Ji67Ilso.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\EJz06avERkAqfuwcXY6H5w8dtNc[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\H3gIahXaXkGgvztu9ouLmJNXhQM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\JClcsxanpxBiLGzKZtauWAccdA0.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\KF9j9oJUfaaKiX-84yf0U337ge8.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\Kwh038ybdvX_puLwdopqHydJtVM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\MgSq5EEOyYvlI1qVlLOXfgRHmzM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\WW0M_5fDR45SN9SlY4dEOUOMAp4.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\YfXD9vOw8__a60l-k1HNCxSbem4.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\aABLNT_FV45QjYQfnRHrBCAk4GU[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\dYw9trBOUuy7sL9xTZGIliMEagg[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\k0oGmqG3Bk5KfPcZl898MPlQ1rI.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\mb8fkd60iW7q4wvyDIlCm9OOn10.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\onra7PQl9o5bYT2lASI1BE4DDEs[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\pwoaMbzGzgAZN6Xp7f9HbnqMX2U.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\tIa_X3QDXj2Izj2HpQ_Mo9f1WiM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\uANxnX_BheDjd2-cdR8N9DEWlds[1].css.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\wokAADULDNIRJUcpGmEjmH9QAB0.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\BHVNCPHL\26\yNwdh0ra_6sDoSuCVMI8Wjl58UM.br[1].js.fxlocker	OpenPGP Public Key	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\GD6U2PFC\X4wIjRXDbKeGz0mzi-NAovdjKMM.br[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\GD6U2PFC\th[1].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\YS1WTI6U\6hU_LneafI_NFLeDvM367ebFaKQ[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\YS1WTI6U\th[1].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\YS1WTI6U\th[2].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\ZKZSJZ8L\N3OfT2wzpD1_lG-2MZjJBjlbL-U[1].js.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\ZKZSJZ8L\th[1].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\ZKZSJZ8L\th[2].png.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log.fxlocker	OpenPGP Secret Key	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2b020b15-b4c7-4410-96eb-31d44603349a}\0.0.filtertrie.intermediate.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\0.0.filtertrie.intermediate.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c55e0410-3cb1-4581-8329-71a8a3957a64}\0.0.filtertrie.intermediate.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsconversions.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsglobals.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appssynonyms.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945554864114.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133834876486635925.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\18e190413af045db88dfbd29609eb877.db.fxlocker	OpenPGP Public Key	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1258.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1258a.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1258b.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1258c.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1305.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231003-1309.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-0929a.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-0929b.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1000.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1051.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1051a.log.fxlocker	OpenPGP Secret Key	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1051b.log.fxlocker	DOS executable (COM, 0x8C-variant)	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1051c.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1055.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1152.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1152a.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1152b.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1153.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\DESKTOP-AGET0TR-20231004-1157.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696334775820156800_6EB929AF-656E-4F43-9731-EA7753E1F1BD.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696334923056622400_BD966DD2-7850-423A-B1D8-7882CE1A6D15.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696417072488237400_C12D9B44-3468-47BC-9418-BF0A674A2B2F.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696417101742322600_290EFEE9-C25A-4857-9F32-D7E6D51B7C09.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696417118050662300_8475A8C9-2447-4BC4-8E46-350AA0582B94.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App_1696413198165042300_AA3FCB9C-CF1A-4407-8A94-A7D6C220021F.log.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\_MEI73282\base_library.zip	Zip archive data, at least v2.0 to extract, compression method=store	#
C:\Users\user\AppData\Local\Temp\_MEI73282\base_library.zip.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt.fxlocker	data	#
C:\Users\user\AppData\Local\Temp\msedge_installer.log.fxlocker	data	#
C:\Users\user\Desktop\README.txt	Generic INItialization configuration [INSTRUCTIONS]	#

Deep Malware Analysis

Yjy9xGBDcr.exe

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

Deep Malware Analysis

Yjy9xGBDcr.exe Options

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

Search started

Yjy9xGBDcr.exe