Windows Analysis Report
ZOj46Y8Mb1.exe

Compliance

Source: ZOj46Y8Mb1.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\NLog.config			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\NLog.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\Newtonsoft.Json.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgent.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe.config			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentFileBased.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentNLog.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentSystem.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PqForceComm.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\Quartz.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\SMallBase.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\favicon.ico			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\manifest.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\polymer.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\Changelog.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\main.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist\js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist\js\axs_testing.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\Makefile			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\component.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\karma.conf.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps\nodeunit.css			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps\nodeunit.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.min.map			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\lib			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\lib\async.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\compose.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\forever.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\support			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\support\is_browser.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\benchmark.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\memory.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\suites.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\support			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\support\sync-package-managers.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\CODE_OF_CONDUCT.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\History.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\ReleaseNotes.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\chai.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\karma.conf.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\karma.sauce.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\sauce.browsers.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.gitignore			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.travis.yml			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\hero.svg			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-ajax.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-ajax.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-request.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-request.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github\CODEOWNERS			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github\ISSUE_TEMPLATE.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\demo			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\demo\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\iron-ajax.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\iron-request.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.gitignore			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.travis.yml			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\iron-resizable-behavior.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\iron-resizable-behavior.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\wct.conf.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github\CODEOWNERS			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github\ISSUE_TEMPLATE.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\src			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\src\x-app.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\basic.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\imports.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\iron-resizable-behavior.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\test-elements.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\x-resizable.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\x-resizer-parent.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\lodash.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\lodash.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\mocha.css			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\mocha.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\moment.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\af.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-dz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-kw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-ly.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-ma.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-sa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-tn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\az.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\da.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de-at.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\dv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\el.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-SG.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-au.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-gb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-ie.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-il.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-nz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\eo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es-do.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es-us.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\et.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\eu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ga.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gom-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\he.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hy-am.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\id.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\is.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\it-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\it.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ja.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\jv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ka.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\kk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\km.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\kn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ko.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ku.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ky.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\me.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ml.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ms-my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ms.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ne.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nl-be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pa-in.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pt-br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ro.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ru.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\se.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\si.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sq.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sr-cyrl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ss.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ta.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\te.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tet.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\th.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tl-ph.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tlh.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzm-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ug-cn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ur.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uz-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\vi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\x-pseudo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\yo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-cn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-hk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-tw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\locales.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment-with-locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment-with-locales.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\check-overflow.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\date-from-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-anything.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-object.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string-and-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string-and-format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\local.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\parsing-flags.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\utc.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\abs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\add-subtract.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\as.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\bubble.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\clone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\create.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\duration.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\get.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\humanize.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\iso-string.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\format			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\format\format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\base-config.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\calendar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\en.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\formats.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\invalid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\lists.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\locale.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\ordinal.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\pre-post-format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\relative.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\set.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\add-subtract.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\calendar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\clone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\compare.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\creation-data.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\diff.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\from.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\get-set.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\locale.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\min-max.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\now.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\start-end-of.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\to-type.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\to.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse\regex.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse\token.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\aliases.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\constants.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-month.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-week.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\hour.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\millisecond.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\minute.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\month.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\offset.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\priorities.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\quarter.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\second.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\timestamp.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\timezone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\units.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week-calendar-utils.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week-year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-ceil.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-floor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-round.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\compare-arrays.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\defaults.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\deprecate.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\extend.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\has-own-prop.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\hooks.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\index-of.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-date.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-function.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-number.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-object-empty.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-object.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-undefined.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\keys.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\map.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\mod.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\some.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\to-int.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\zero-fill.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\af.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-dz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-kw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-ly.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-ma.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-sa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-tn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\az.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\da.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de-at.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\dv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\el.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-SG.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-au.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-gb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-ie.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-il.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-nz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\eo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es-do.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es-us.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\et.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\eu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ga.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gom-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\he.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hy-am.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\id.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\is.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\it-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\it.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ja.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\jv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ka.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\kk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\km.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\kn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ko.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ku.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ky.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\me.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ml.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ms-my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ms.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ne.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nl-be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pa-in.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pt-br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ro.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ru.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\se.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\si.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sq.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sr-cyrl.js			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\polymer\LICENSE.txt			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\sinon-chai\LICENSE.txt			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\webcomponentsjs\license-header.txt			Jump to behavior

Source: ZOj46Y8Mb1.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\BuildAgent\work\d2b36b72e57e3b8c\SMallBase\Source\obj\Release\net48\SMallBase.pdb source: PQForceAgentService.exe, 00000008.00000002.2408300583.0000017E33422000.00000002.00000001.01000000.0000000C.sdmp, SMallBase.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentService\obj\Release\net48\PQForceAgentService.pdbSHA256 source: PQForceAgentService.exe, 00000008.00000000.2398065870.0000017E33072000.00000002.00000001.01000000.0000000A.sdmp, PQForceAgentService.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentFileBased\obj\Release\net48\PQForceAgentFileBased.pdb source: PQForceAgentFileBased.dll.0.dr
Source:	Binary string: C:\projects\nlog\src\NLog\obj\Release\net45\NLog.pdbSHA256 source: NLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\d2b36b72e57e3b8c\SMallBase\Source\obj\Release\net48\SMallBase.pdbSHA256 source: PQForceAgentService.exe, 00000008.00000002.2408300583.0000017E33422000.00000002.00000001.01000000.0000000C.sdmp, SMallBase.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentConsole\obj\Release\net48\PQForceAgentConsole.pdbSHA256 source: PQForceAgentConsole.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\142daa471bc393a\PQForceComm\PQForceComm\obj\Release\net48\PqForceComm.pdb source: PqForceComm.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentFileBased\obj\Release\net48\PQForceAgentFileBased.pdbSHA256 source: PQForceAgentFileBased.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentConsole\obj\Release\net48\PQForceAgentConsole.pdb source: PQForceAgentConsole.exe.0.dr
Source:	Binary string: C:\projects\nlog\src\NLog\obj\Release\net45\NLog.pdb source: NLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\142daa471bc393a\PQForceComm\PQForceComm\obj\Release\net48\PqForceComm.pdbSHA256@ source: PqForceComm.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentService\obj\Release\net48\PQForceAgentService.pdb source: PQForceAgentService.exe, 00000008.00000000.2398065870.0000017E33072000.00000002.00000001.01000000.0000000A.sdmp, PQForceAgentService.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentNLog\obj\Release\net48\PQForceAgentNLog.pdbSHA2561 source: PQForceAgentNLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentNLog\obj\Release\net48\PQForceAgentNLog.pdb source: PQForceAgentNLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgent\obj\Release\net48\PQForceAgent.pdb source: PQForceAgent.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgent\obj\Release\net48\PQForceAgent.pdbSHA256 source: PQForceAgent.dll.0.dr

Spreading

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_004026FE FindFirstFileA,		0_2_004026FE
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_004062A3 FindFirstFileA,FindClose,		0_2_004062A3
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_00405768 GetTempPathA,DeleteFileA,lstrcatA,lstrcatA,lstrlenA,FindFirstFileA,FindNextFileA,FindClose,		0_2_00405768

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\custom-style-interface.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\custom-style-interface.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.min.js.map			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\.travis.yml			Jump to behavior

Networking

Source: README.md11.0.dr

String found in binary or memory: url="https://www.googleapis.com/youtube/v3/search" equals www.youtube.com (Youtube)

Source: README.md9.0.dr	String found in binary or memory: http://2014.jsconf.eu/speakers/philip-roberts-what-the-heck-is-the-event-loop-anyway.html)
Source: async.js.0.dr, async.js0.0.dr	String found in binary or memory: http://ariya.ofilabs.com/2013/03/es6-and-rest-parameter.html)
Source: mocha.js.0.dr	String found in binary or memory: http://bestiejs.github.io/json3
Source: README.md9.0.dr	String found in binary or memory: http://blog.carbonfive.com/2013/10/27/the-javascript-event-loop-explained/)
Source: README.md9.0.dr	String found in binary or memory: http://blog.izs.me/post/59142742143/designing-apis-for-asynchrony)
Source: README.md9.0.dr	String found in binary or memory: http://bower.io/):
Source: mocha.js.0.dr	String found in binary or memory: http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.4.6927
Source: CONTRIBUTING.md0.0.dr	String found in binary or memory: http://code.google.com/legal/corporate-cla-v1.0.html)
Source: CONTRIBUTING.md0.0.dr	String found in binary or memory: http://code.google.com/legal/individual-cla-v1.0.html).
Source: mocha.js.0.dr	String found in binary or memory: http://code.google.com/p/google-diff-match-patch/wiki/API
Source: create.js.0.dr, moment.js1.0.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://dojofoundation.org/
Source: lodash.js.0.dr	String found in binary or memory: http://drupalmotion.com/article/debounce-and-throttle-visual-explanation)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-ecmascript-function-objects-call-thisargument-argume
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-escaperegexppattern).
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-number.isfinite).
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-number.max_safe_integer)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-object.assign).
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-object.keys)
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-patterns)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-properties-of-the-map-prototype-object)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-samevaluezero)
Source: lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-template-literal-lexical-components).
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-tolength).
Source: mocha.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: mocha.js.0.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: lodash.js.0.dr	String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/)
Source: mocha.js.0.dr	String found in binary or memory: http://feross.org
Source: mocha.js.0.dr	String found in binary or memory: http://html5sec.org/#102
Source: mocha.js.0.dr	String found in binary or memory: http://html5sec.org/#108
Source: mocha.js.0.dr	String found in binary or memory: http://html5sec.org/#133.
Source: id.js.0.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: README.md7.0.dr	String found in binary or memory: http://img.shields.io/badge/license-MIT-blue.svg?style=flat
Source: README.md7.0.dr	String found in binary or memory: http://img.shields.io/npm/dm/moment.svg?style=flat
Source: README.md9.0.dr	String found in binary or memory: http://img.shields.io/npm/v/async.svg)
Source: README.md7.0.dr	String found in binary or memory: http://img.shields.io/npm/v/moment.svg?style=flat
Source: README.md7.0.dr	String found in binary or memory: http://img.shields.io/travis/moment/moment/develop.svg?style=flat
Source: README.md9.0.dr	String found in binary or memory: http://jamjs.org/):
Source: CONTRIBUTING.md0.0.dr	String found in binary or memory: http://jsbin.com/birajez/edit?html
Source: mocha.js.0.dr	String found in binary or memory: http://kit.mit-license.org
Source: CHANGELOG.md1.0.dr	String found in binary or memory: http://lodash.com/docs#transform)
Source: moment-duration-format.js.0.dr	String found in binary or memory: http://momentjs.com/
Source: README.md7.0.dr	String found in binary or memory: http://momentjs.com/docs/)
Source: moment.js1.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: moment.js1.0.dr, locales.js0.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: prototype.js1.0.dr, moment.js1.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: moment.js1.0.dr, from-string.js.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: min-max.js.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: prototype.js1.0.dr, moment.js1.0.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/dummynamespace/
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/3
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/5
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/ILogReceiverOneWayServer/ProcessLogMessages
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesResponsep
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesT
Source: NLog.dll.0.dr	String found in binary or memory: http://nlog-project.org/ws/T
Source: README.md9.0.dr, README.md10.0.dr	String found in binary or memory: http://nodejs.org)
Source: README.md8.0.dr, README.md5.0.dr	String found in binary or memory: http://nodejs.org/)
Source: ZOj46Y8Mb1.exe, Uninstall.exe.0.dr	String found in binary or memory: http://nsis.sf.net/NSIS_Error
Source: ZOj46Y8Mb1.exe, Uninstall.exe.0.dr	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: lodash.js.0.dr	String found in binary or memory: http://peter.michaux.ca/articles/lazy-function-definition-pattern)
Source: README.md8.0.dr	String found in binary or memory: http://phantomjs.org/download.html)
Source: webcomponents-ce.js.0.dr, x-resizer-parent.html.0.dr, webcomponents-hi-ce.js.0.dr, scoping.html.0.dr, ce-upgrade-order.html.0.dr, template-stamp.html.0.dr, custom-elements-es5-adapter.js.0.dr, custom-style.html1.0.dr, webcomponents-lite.js.0.dr, index.html2.0.dr, basic.html.0.dr, custom-style.html2.0.dr, index.html7.0.dr, x-app.html.0.dr, style-properties.js0.0.dr, polymer-internal-types.html.0.dr, element-import.html.0.dr, common-regex.js.0.dr, closure-output.txt.0.dr, boot.html.0.dr, style-settings.js.0.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: .bower.json5.0.dr, bower.json3.0.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt)
Source: webcomponents-ce.js.0.dr, x-resizer-parent.html.0.dr, webcomponents-hi-ce.js.0.dr, scoping.html.0.dr, ce-upgrade-order.html.0.dr, template-stamp.html.0.dr, custom-elements-es5-adapter.js.0.dr, custom-style.html1.0.dr, webcomponents-lite.js.0.dr, index.html2.0.dr, basic.html.0.dr, custom-style.html2.0.dr, index.html7.0.dr, x-app.html.0.dr, style-properties.js0.0.dr, polymer-internal-types.html.0.dr, element-import.html.0.dr, common-regex.js.0.dr, closure-output.txt.0.dr, boot.html.0.dr, style-settings.js.0.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: webcomponents-ce.js.0.dr, x-resizer-parent.html.0.dr, webcomponents-hi-ce.js.0.dr, scoping.html.0.dr, ce-upgrade-order.html.0.dr, template-stamp.html.0.dr, custom-elements-es5-adapter.js.0.dr, custom-style.html1.0.dr, .bower.json14.0.dr, webcomponents-lite.js.0.dr, index.html2.0.dr, basic.html.0.dr, custom-style.html2.0.dr, index.html7.0.dr, x-app.html.0.dr, style-properties.js0.0.dr, polymer-internal-types.html.0.dr, element-import.html.0.dr, common-regex.js.0.dr, closure-output.txt.0.dr, boot.html.0.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: webcomponents-ce.js.0.dr, x-resizer-parent.html.0.dr, webcomponents-hi-ce.js.0.dr, scoping.html.0.dr, ce-upgrade-order.html.0.dr, template-stamp.html.0.dr, custom-elements-es5-adapter.js.0.dr, custom-style.html1.0.dr, webcomponents-lite.js.0.dr, index.html2.0.dr, basic.html.0.dr, custom-style.html2.0.dr, index.html7.0.dr, x-app.html.0.dr, style-properties.js0.0.dr, polymer-internal-types.html.0.dr, element-import.html.0.dr, common-regex.js.0.dr, closure-output.txt.0.dr, boot.html.0.dr, style-settings.js.0.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: lodash.js.0.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#mismatch
Source: NLog.dll.0.dr	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: README.md9.0.dr	String found in binary or memory: http://spmjs.io/):
Source: mocha.js.0.dr	String found in binary or memory: http://stackoverflow.com/a/22747272/680742
Source: moment.js1.0.dr, regex.js.0.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: README.md9.0.dr	String found in binary or memory: http://stackoverflow.com/questions/tagged/async.js)
Source: README.md7.0.dr	String found in binary or memory: http://travis-ci.org/moment/moment
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: bower.json5.0.dr, .bower.json7.0.dr	String found in binary or memory: http://webcomponents.org
Source: lodash.js.0.dr	String found in binary or memory: http://wonko.com/post/html-escaping)
Source: README.md8.0.dr, axs_testing.js.0.dr, LICENSE4.0.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: README.md8.0.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: README.md9.0.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-8.6)
Source: mocha.js.0.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: lodash.js.0.dr	String found in binary or memory: http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
Source: README.md8.0.dr	String found in binary or memory: http://www.oracle.com/technetwork/java/javase/downloads/index.html)
Source: README.md7.0.dr	String found in binary or memory: https://api.dependabot.com/badges/compatibility_score?dependency-name=moment&package-manager=npm_and
Source: README.md7.0.dr	String found in binary or memory: https://app.fossa.io/api/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmoment%2Fmoment.svg?type=large)
Source: README.md7.0.dr	String found in binary or memory: https://app.fossa.io/api/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmoment%2Fmoment.svg?type=shield)
Source: README.md7.0.dr	String found in binary or memory: https://app.fossa.io/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmoment%2Fmoment?ref=badge_large)
Source: README.md7.0.dr	String found in binary or memory: https://app.fossa.io/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmoment%2Fmoment?ref=badge_shield)
Source: README.md7.0.dr, README.md9.0.dr, README.md10.0.dr, README.md6.0.dr	String found in binary or memory: https://badges.gitter.im/Join%20Chat.svg)
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=142792)
Source: mocha.js.0.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=695438.
Source: README.md9.0.dr	String found in binary or memory: https://camo.githubusercontent.com/6bbd36f4cf5b35a0f11a96dcd2e97711ffc2fb37/68747470733a2f2f662e636c
Source: README.md9.0.dr	String found in binary or memory: https://camo.githubusercontent.com/f4810e00e1c5f5f8addbe3e9f49064fd5d102699/68747470733a2f2f662e636c
Source: README.md8.0.dr	String found in binary or memory: https://code.google.com/p/selenium/wiki/DesiredCapabilities
Source: lodash.js.0.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=2070)
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=2291
Source: lodash.js.0.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=3109
Source: lodash.js.0.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=90
Source: parsing.js.0.dr, browser.js.0.dr	String found in binary or memory: https://code.google.com/p/v8/wiki/JavaScriptStackTraceApi
Source: README.md9.0.dr	String found in binary or memory: https://coveralls.io/r/caolan/async?branch=master)
Source: README.md7.0.dr	String found in binary or memory: https://coveralls.io/r/moment/moment?branch=develop)
Source: README.md9.0.dr	String found in binary or memory: https://coveralls.io/repos/caolan/async/badge.svg?branch=master)
Source: README.md7.0.dr	String found in binary or memory: https://coveralls.io/repos/moment/moment/badge.svg?branch=develop)
Source: README.md7.0.dr	String found in binary or memory: https://dependabot.com/compatibility-score.html?dependency-name=moment&package-manager=npm_and_yarn&
Source: lodash.js.0.dr	String found in binary or memory: https://developer.chrome.com/extensions/sandboxingEval).
Source: lodash.js.0.dr	String found in binary or memory: https://developer.mozilla.org/Web/JavaScript/Reference/Functions/rest_parameters).
Source: lodash.js.0.dr	String found in binary or memory: https://developer.mozilla.org/Web/JavaScript/Reference/Operators/Spread_operator).
Source: README.md2.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Localization/Localization_and_Plurals)).
Source: mocha.js.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Date/toISOString
Source: parsing.js.0.dr, browser.js.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error/Stack
Source: README.md2.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/toLocaleStri
Source: README.md2.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/NumberFormat/format
Source: mocha.js.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/toString
Source: package.json0.0.dr	String found in binary or memory: https://domenic.me/)
Source: README.md11.0.dr	String found in binary or memory: https://elements.polymer-project.org/elements/iron-ajax)_
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#E)
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#JO.
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x11.1.5
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x13.2.2
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x15.1.2.4)
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x15.10.6.4
Source: lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x15.3.4.3).
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: https://es5.github.io/#x8)
Source: README.md8.0.dr	String found in binary or memory: https://gist.github.com/isaacs/579814
Source: README.md8.0.dr	String found in binary or memory: https://gist.github.com/isaacs/579814)
Source: README.md7.0.dr	String found in binary or memory: https://gist.github.com/timrwood/e72f2eef320ed9e37c51#backwards-incompatible-changes)
Source: .bower.json11.0.dr	String found in binary or memory: https://github.com/GoogleChrome/accessibility-developer-tools
Source: README.md8.0.dr	String found in binary or memory: https://github.com/GoogleChrome/accessibility-developer-tools.git
Source: README.md8.0.dr	String found in binary or memory: https://github.com/GoogleChrome/accessibility-developer-tools/wiki/Audit-Rules
Source: de-at.js.0.dr	String found in binary or memory: https://github.com/MadMG
Source: de.js.0.dr, de-at.js.0.dr, uk.js.0.dr	String found in binary or memory: https://github.com/Oire
Source: .bower.json5.0.dr, package.json3.0.dr	String found in binary or memory: https://github.com/Polymer/polymer
Source: .bower.json5.0.dr, bower.json3.0.dr, package.json3.0.dr	String found in binary or memory: https://github.com/Polymer/polymer.git
Source: test-fixture.html.0.dr	String found in binary or memory: https://github.com/Polymer/polymer/blob/0.8-preview/src/features/mini/template.html#L52
Source: property-effects.html.0.dr, property-effects.d.ts.0.dr	String found in binary or memory: https://github.com/Polymer/polymer/issues/4227
Source: properties-changed.d.ts.0.dr, style-gather.d.ts.0.dr, polymer.dom.d.ts.0.dr, array-splice.d.ts.0.dr, array-selector.d.ts.0.dr, templatize.d.ts.0.dr, legacy-data-mixin.d.ts.0.dr, dom-bind.d.ts.0.dr, gesture-event-listeners.d.ts.0.dr, dom-if.d.ts.0.dr, settings.d.ts.0.dr, gestures.d.ts.0.dr, property-accessors.d.ts.0.dr, strict-binding-parser.d.ts.0.dr, render-status.d.ts.0.dr, debounce.d.ts.0.dr, dom-module.d.ts.0.dr, template-stamp.d.ts.0.dr, import-href.d.ts.0.dr, dir-mixin.d.ts.0.dr, properties-mixin.d.ts.0.dr	String found in binary or memory: https://github.com/Polymer/tools/tree/master/packages/gen-typescript-declarations
Source: CONTRIBUTING.md3.0.dr, CONTRIBUTING.md.0.dr, CONTRIBUTING.md2.0.dr	String found in binary or memory: https://github.com/PolymerElements/ContributionGuide/blob/master/CONTRIBUTING.md
Source: bower.json13.0.dr, .bower.json14.0.dr	String found in binary or memory: https://github.com/PolymerElements/iron-ajax
Source: README.md3.0.dr, README.md11.0.dr	String found in binary or memory: https://github.com/PolymerLabs/tedium/issues
Source: it.js.0.dr	String found in binary or memory: https://github.com/aliem
Source: tlh.js.0.dr	String found in binary or memory: https://github.com/amaranthrose
Source: vi.js.0.dr	String found in binary or memory: https://github.com/bangnk
Source: zh-tw.js.0.dr	String found in binary or memory: https://github.com/ben-lin
Source: ug-cn.js.0.dr	String found in binary or memory: https://github.com/boyaq
Source: async.js.0.dr, async.js0.0.dr	String found in binary or memory: https://github.com/caolan/async
Source: README.md9.0.dr	String found in binary or memory: https://github.com/caolan/async/blob/master/lib/async.js).
Source: CHANGELOG.md1.0.dr	String found in binary or memory: https://github.com/caolan/async/compare/v1.3.0...v1.4.0))
Source: README.md9.0.dr	String found in binary or memory: https://github.com/caolan/async/raw/master/lib/async.js)
Source: en-ie.js.0.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: README.md1.0.dr	String found in binary or memory: https://github.com/cjohansen/Sinon.JS
Source: eo.js.0.dr	String found in binary or memory: https://github.com/colindean
Source: README.md9.0.dr	String found in binary or memory: https://github.com/component/component):
Source: moment.js1.0.dr, iso-string.js.0.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: eu.js.0.dr	String found in binary or memory: https://github.com/eillarra
Source: mocha.js.0.dr	String found in binary or memory: https://github.com/feross/buffer/pull/97
Source: README.md8.0.dr	String found in binary or memory: https://github.com/google/closure-compiler)
Source: zh-tw.js.0.dr	String found in binary or memory: https://github.com/hehachris
Source: is.js.0.dr	String found in binary or memory: https://github.com/hinrik
Source: README.md7.0.dr	String found in binary or memory: https://github.com/ichernev).
Source: lodash.js.0.dr	String found in binary or memory: https://github.com/jashkenas/underscore/issues/1621
Source: lodash.js.0.dr	String found in binary or memory: https://github.com/jashkenas/underscore/pull/1247
Source: async.js.0.dr, async.js0.0.dr	String found in binary or memory: https://github.com/jashkenas/underscore/pull/2140).
Source: dv.js.0.dr	String found in binary or memory: https://github.com/jawish
Source: fr.js.0.dr	String found in binary or memory: https://github.com/jfroffice
Source: af.js0.0.dr, locales.js.0.dr, af.js.0.dr	String found in binary or memory: https://github.com/jjupiter
Source: en-ca.js.0.dr, fr-ca.js.0.dr	String found in binary or memory: https://github.com/jonbca
Source: moment-duration-format.js.0.dr, .bower.json4.0.dr, bower.json1.0.dr	String found in binary or memory: https://github.com/jsmreese/moment-duration-format
Source: README.md2.0.dr	String found in binary or memory: https://github.com/jsmreese/moment-duration-format/milestone/6).
Source: gl.js.0.dr	String found in binary or memory: https://github.com/juanghurtado
Source: sk.js.0.dr	String found in binary or memory: https://github.com/k2s
Source: se.js.0.dr	String found in binary or memory: https://github.com/karamell
Source: bg.js.0.dr	String found in binary or memory: https://github.com/kraz
Source: jv.js.0.dr	String found in binary or memory: https://github.com/lantip
Source: de.js.0.dr, de-at.js.0.dr	String found in binary or memory: https://github.com/lluchs
Source: en-nz.js.0.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: et.js.0.dr	String found in binary or memory: https://github.com/madhenry
Source: eo.js.0.dr	String found in binary or memory: https://github.com/miestasmia
Source: de.js.0.dr, de-at.js.0.dr	String found in binary or memory: https://github.com/mik01aj
Source: mocha.js.0.dr	String found in binary or memory: https://github.com/mochajs/mocha/issues/237
Source: mocha.js.0.dr	String found in binary or memory: https://github.com/mochajs/mocha/pull/1035
Source: mocha.js.0.dr	String found in binary or memory: https://github.com/mochajs/mocha/pull/916
Source: README.md7.0.dr	String found in binary or memory: https://github.com/moment/moment/blob/develop/CHANGELOG.md)
Source: README.md7.0.dr	String found in binary or memory: https://github.com/moment/moment/blob/develop/CONTRIBUTING.md)
Source: README.md7.0.dr	String found in binary or memory: https://github.com/moment/moment/blob/develop/LICENSE).
Source: moment.js1.0.dr, from-anything.js.0.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: moment.js1.0.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: moment.js1.0.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: fr.js.0.dr, fr.js0.0.dr, locales.js.0.dr	String found in binary or memory: https://github.com/moment/moment/issues/3375
Source: moment.js1.0.dr, offset.js.0.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: da.js.0.dr	String found in binary or memory: https://github.com/mrbase
Source: sd.js.0.dr	String found in binary or memory: https://github.com/narainsagar
Source: it.js.0.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: ar-dz.js.0.dr	String found in binary or memory: https://github.com/noureddineme
Source: ar-kw.js.0.dr	String found in binary or memory: https://github.com/nusretparlak
Source: lodash.js.0.dr	String found in binary or memory: https://github.com/olado/doT).
Source: sk.js.0.dr	String found in binary or memory: https://github.com/petrbela
Source: fo.js.0.dr	String found in binary or memory: https://github.com/ragnar123
Source: et.js.0.dr	String found in binary or memory: https://github.com/ragulka
Source: tzl.js.0.dr, fy.js.0.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: lo.js.0.dr	String found in binary or memory: https://github.com/ryanhart2
Source: fo.js.0.dr	String found in binary or memory: https://github.com/sakarisson
Source: de-ch.js.0.dr	String found in binary or memory: https://github.com/sschueller
Source: zh-cn.js.0.dr	String found in binary or memory: https://github.com/suupic
Source: az.js.0.dr	String found in binary or memory: https://github.com/topchiyev
Source: id.js.0.dr	String found in binary or memory: https://github.com/tyok
Source: .bower.json7.0.dr	String found in binary or memory: https://github.com/webcomponents/webcomponentsjs.git
Source: zh-cn.js.0.dr	String found in binary or memory: https://github.com/zenozeng
Source: README.md9.0.dr	String found in binary or memory: https://gitter.im/caolan/async
Source: README.md9.0.dr	String found in binary or memory: https://gitter.im/caolan/async?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=b
Source: README.md7.0.dr	String found in binary or memory: https://gitter.im/moment/moment
Source: README.md7.0.dr	String found in binary or memory: https://gitter.im/moment/moment?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=
Source: index.html4.0.dr	String found in binary or memory: https://goo.gl/OOhYW5
Source: mocha.js.0.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#table-charref-overrides
Source: mocha.js.0.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#table-charref-overrides.
Source: lodash.js.0.dr	String found in binary or memory: https://html5sec.org/#102)
Source: lodash.js.0.dr	String found in binary or memory: https://html5sec.org/#108)
Source: lodash.js.0.dr	String found in binary or memory: https://html5sec.org/#133)
Source: lodash.js.0.dr	String found in binary or memory: https://html5sec.org/#59)
Source: lodash.js.0.dr	String found in binary or memory: https://html5sec.org/)
Source: README.md8.0.dr	String found in binary or memory: https://img.shields.io/npm/dm/accessibility-developer-tools.svg)
Source: README.md8.0.dr	String found in binary or memory: https://img.shields.io/npm/v/accessibility-developer-tools.svg)
Source: mocha.js.0.dr	String found in binary or memory: https://jquery.org/
Source: CONTRIBUTING.md.0.dr, ISSUE_TEMPLATE.md0.0.dr, ISSUE_TEMPLATE.md.0.dr	String found in binary or memory: https://jsbin.com/cagaye/edit?html
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: https://lodash.com/
Source: lodash.js.0.dr	String found in binary or memory: https://lodash.com/)
Source: lodash.js.0.dr	String found in binary or memory: https://lodash.com/custom-builds).
Source: mocha.js.0.dr, lodash.js.0.dr	String found in binary or memory: https://lodash.com/license
Source: lodash.js.0.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: mocha.js.0.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands:
Source: mocha.js.0.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding#surrogate-formulae
Source: README.md2.0.dr	String found in binary or memory: https://momentjs.com/docs/#/i18n/)
Source: mocha.js.0.dr	String found in binary or memory: https://mths.be/he
Source: lodash.js.0.dr	String found in binary or memory: https://mths.be/he).
Source: mocha.js.0.dr	String found in binary or memory: https://mths.be/notes/ambiguous-ampersands
Source: mocha.js.0.dr	String found in binary or memory: https://mths.be/punycode.
Source: NLog.dll.0.dr	String found in binary or memory: https://nlog-project.org/
Source: moment.js1.0.dr, format.js0.0.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: README.md7.0.dr	String found in binary or memory: https://npmcharts.com/compare/moment?minimal=true
Source: mocha.js.0.dr	String found in binary or memory: https://npmjs.org/package/mocha-teamcity-reporter).
Source: README.md7.0.dr	String found in binary or memory: https://npmjs.org/package/moment
Source: README.md2.0.dr	String found in binary or memory: https://p3.zdusercontent.com/attachment/1015988/Y0ZmOS3862TDx3JYOUTMIixSG?token=eyJhbGciOiJkaXIiLCJl
Source: mocha.js.0.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-number.max_safe_integer)
Source: mocha.js.0.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength).
Source: README.md8.0.dr	String found in binary or memory: https://raw.github.com/GoogleChrome/accessibility-developer-tools/stable/dist/js/axs_testing.js
Source: README.md8.0.dr	String found in binary or memory: https://raw.githubusercontent.com/GoogleChrome/
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/abbrev/-/abbrev-1.0.9.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/acorn/-/acorn-5.0.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-1.5.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz
Source: package-lock.json3.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/argv-tools/-/argv-tools-0.1.1.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz
Source: package-lock.json3.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/array-back/-/array-back-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.2.tgz
Source: package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz
Source: package-lock.json3.0.dr	String found in binary or memory: https://registry.npmjs.org/async/-/async-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/async/-/async-1.5.2.tgz
Source: package-lock.json3.0.dr	String found in binary or memory: https://registry.npmjs.org/atob/-/atob-2.1.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.22.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/balanced-match/-/balanced-match-0.4.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.7.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/chai/-/chai-4.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr	String found in binary or memory: https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/circular-json/-/circular-json-0.3.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/cli-width/-/cli-width-2.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/co/-/co-4.6.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/commander/-/commander-2.9.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/d/-/d-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/debug/-/debug-2.6.8.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/deep-eql/-/deep-eql-2.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/del/-/del-2.2.2.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/diff/-/diff-3.2.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/doctrine/-/doctrine-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.23.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/escodegen/-/escodegen-1.8.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/escope/-/escope-3.6.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/eslint/-/eslint-3.19.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/espree/-/espree-3.4.3.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json1.0.dr	String found in binary or memory: https://registry.npmjs.org/esprima/-/esprima-3.1.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/esrecurse/-/esrecurse-4.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/estraverse/-/estraverse-4.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/figures/-/figures-1.7.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/flat-cache/-/flat-cache-1.2.2.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/formatio/-/formatio-1.2.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/generate-function/-/generate-function-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/glob/-/glob-5.0.15.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/glob/-/glob-7.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/glob/-/glob-7.1.2.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/globals/-/globals-9.18.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/globby/-/globby-5.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/growl/-/growl-1.9.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/handlebars/-/handlebars-4.0.10.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/ignore/-/ignore-3.3.3.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/inquirer/-/inquirer-0.12.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/interpret/-/interpret-1.0.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.5.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.16.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/istanbul/-/istanbul-0.4.5.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/js-yaml/-/js-yaml-3.8.4.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/json3/-/json3-3.3.2.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/just-extend/-/just-extend-1.1.22.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/levn/-/levn-0.3.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/lolex/-/lolex-1.6.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/lolex/-/lolex-2.1.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/longest/-/longest-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/mocha/-/mocha-3.5.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/ms/-/ms-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.5.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/native-promise-only/-/native-promise-only-0.8.1.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/nise/-/nise-1.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr	String found in binary or memory: https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/once/-/once-1.4.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/opener/-/opener-1.4.3.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.7.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/pathval/-/pathval-1.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/pify/-/pify-2.3.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/pluralize/-/pluralize-1.2.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/progress/-/progress-1.1.8.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/readable-stream/-/readable-stream-2.2.11.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/readline2/-/readline2-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/resolve/-/resolve-1.3.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/rimraf/-/rimraf-2.6.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/rx-lite/-/rx-lite-3.1.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/samsam/-/samsam-1.2.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/sinon/-/sinon-4.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/slice-ansi/-/slice-ansi-0.0.4.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/string-width/-/string-width-2.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/table/-/table-3.8.3.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/text-encoding/-/text-encoding-0.6.4.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/through/-/through-2.3.8.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/tryit/-/tryit-1.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/type-detect/-/type-detect-3.0.0.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/type-detect/-/type-detect-4.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz
Source: package-lock.json0.0.dr	String found in binary or memory: https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/which/-/which-1.3.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz
Source: package-lock.json0.0.dr, package-lock.json3.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz
Source: package-lock.json0.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/write/-/write-0.2.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr, package-lock.json1.0.dr, package-lock.json.0.dr	String found in binary or memory: https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz
Source: package-lock.json0.0.dr, package-lock.json4.0.dr	String found in binary or memory: https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz
Source: README.md9.0.dr	String found in binary or memory: https://server.net/
Source: moment.js1.0.dr, date-from-array.js.0.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: README.md.0.dr	String found in binary or memory: https://tabatkins.github.io/specs/css-apply-rule/
Source: README.md.0.dr	String found in binary or memory: https://tabatkins.github.io/specs/css-shadow-parts/).
Source: moment.js1.0.dr, from-string.js.0.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: README.md8.0.dr	String found in binary or memory: https://travis-ci.org/GoogleChrome/accessibility-developer-tools)
Source: README.md8.0.dr	String found in binary or memory: https://travis-ci.org/GoogleChrome/accessibility-developer-tools.svg?branch=master)
Source: README.md11.0.dr	String found in binary or memory: https://travis-ci.org/PolymerElements/iron-ajax)
Source: README.md11.0.dr	String found in binary or memory: https://travis-ci.org/PolymerElements/iron-ajax.svg?branch=master)
Source: README.md3.0.dr	String found in binary or memory: https://travis-ci.org/PolymerElements/test-fixture)
Source: README.md3.0.dr	String found in binary or memory: https://travis-ci.org/PolymerElements/test-fixture.svg?branch=master)
Source: README.md9.0.dr	String found in binary or memory: https://travis-ci.org/caolan/async)
Source: README.md9.0.dr	String found in binary or memory: https://travis-ci.org/caolan/async.svg?branch=master)
Source: de-ch.js.0.dr	String found in binary or memory: https://www.bk.admin.ch/dokumentation/sprachen/04915/05016/index.html?lang=de#
Source: README.md2.0.dr	String found in binary or memory: https://www.browserstack.com
Source: README.md7.0.dr	String found in binary or memory: https://www.codetriage.com/moment/moment)
Source: README.md7.0.dr	String found in binary or memory: https://www.codetriage.com/moment/moment).
Source: README.md7.0.dr	String found in binary or memory: https://www.codetriage.com/moment/moment/badges/users.svg)
Source: CONTRIBUTING.md0.0.dr	String found in binary or memory: https://www.google.com/search?q=Contributor%20License%20Agreement)
Source: CONTRIBUTING.md3.0.dr, CONTRIBUTING.md.0.dr, CONTRIBUTING.md2.0.dr	String found in binary or memory: https://www.google.com/url?q=http://blog.steveklabnik.com/posts/2012-11-08-how-to-squash-commits-in-
Source: README.md11.0.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/search
Source: README.md8.0.dr	String found in binary or memory: https://www.npmjs.com/package/accessibility-developer-tools)
Source: README.md9.0.dr	String found in binary or memory: https://www.npmjs.org/package/async)
Source: NLog.dll.0.dr	String found in binary or memory: https://www.nuget.org/packages/NLog.Web.AspNetCore
Source: legacy-data-mixin.d.ts.0.dr	String found in binary or memory: https://www.polymer-project.org/1.0/docs/devguide/observers#multi-property-observers).
Source: ZOj46Y8Mb1.exe, 00000000.00000003.2424737064.00000000007B5000.00000004.00000020.00020000.00000000.sdmp, ZOj46Y8Mb1.exe, 00000000.00000002.2458357342.000000000073D000.00000004.00000020.00020000.00000000.sdmp, ioSpecial.ini.0.dr	String found in binary or memory: https://www.pqforce.com/how-to-start/support/
Source: ZOj46Y8Mb1.exe, 00000000.00000003.2457330280.000000000073A000.00000004.00000020.00020000.00000000.sdmp, ZOj46Y8Mb1.exe, 00000000.00000002.2458357342.000000000073D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pqforce.com/how-to-start/support/12021203
Source: ZOj46Y8Mb1.exe, 00000000.00000003.2456958786.00000000007BD000.00000004.00000020.00020000.00000000.sdmp, ZOj46Y8Mb1.exe, 00000000.00000003.2424838743.00000000007BD000.00000004.00000020.00020000.00000000.sdmp, ZOj46Y8Mb1.exe, 00000000.00000003.2424737064.00000000007B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pqforce.com/how-to-start/support/t_
Source: lodash.js.0.dr	String found in binary or memory: https://youtu.be/XAqIpGU8ZZk#t=17m25s

Key, Mouse, Clipboard, Microphone and Screen Capturing

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_00405205 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageA,SendMessageA,SendMessageA,SendMessageA,SendMessageA,SendMessageA,ShowWindow,ShowWindow,GetDlgItem,SendMessageA,SendMessageA,SendMessageA,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,SendMessageA,CreatePopupMenu,AppendMenuA,GetWindowRect,TrackPopupMenu,SendMessageA,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageA,GlobalUnlock,SetClipboardData,CloseClipboard,

0_2_00405205

Spam, unwanted Advertisements and Ransom Demands

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security\PQForceAgent-CPA			Jump to behavior

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System			Jump to behavior

System Summary

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_0040320C EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,ExitProcess,CoUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_0040320C

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_3_02CE3E8C		0_3_02CE3E8C
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_3_02CE639C		0_3_02CE639C
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_00404A44		0_2_00404A44
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_00406F54		0_2_00406F54
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_0040677D		0_2_0040677D

Source: ZOj46Y8Mb1.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal48.evad.winEXE@3/864@0/0

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_0040320C EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,ExitProcess,CoUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_0040320C

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_004044D1 GetDlgItem,SetWindowTextA,SHAutoComplete,SHBrowseForFolderA,CoTaskMemFree,lstrcmpiA,lstrcatA,SetDlgItemTextA,GetDiskFreeSpaceExA,GetDiskFreeSpaceA,MulDiv,SetDlgItemTextA,

0_2_004044D1

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_004020D1 CoCreateInstance,MultiByteToWideChar,

0_2_004020D1

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

File created: C:\Program Files\PQForceAgent-CPA

Jump to behavior

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\PQForceAgentService.exe.log

Jump to behavior

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Mutant created: NULL
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\netfxeventlog.1.0

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

File created: C:\Users\user\AppData\Local\Temp\nsk9DFC.tmp

Jump to behavior

Source: ZOj46Y8Mb1.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

File read: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ZOj46Y8Mb1.exe "C:\Users\user\Desktop\ZOj46Y8Mb1.exe"
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Process created: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe "C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe " /install /servicename "PQForceAgent-CPA" /displayname "PQForceAgent-CPA" /startmode manual
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Process created: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe "C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe " /install /servicename "PQForceAgent-CPA" /displayname "PQForceAgent-CPA" /startmode manual			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: uxtheme.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: userenv.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: propsys.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: dwmapi.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: cryptbase.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: oleacc.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: version.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: shfolder.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: windows.storage.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: wldp.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: riched20.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: usp10.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: msls31.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: textinputframework.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: coreuicomponents.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: coremessaging.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: ntmarta.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Section loaded: textshaping.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: mscoree.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: version.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: vcruntime140_clr0400.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: ucrtbase_clr0400.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: ucrtbase_clr0400.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: windows.storage.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: wldp.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: profapi.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: cryptsp.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: rsaenh.dll			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Section loaded: cryptbase.dll			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

File written: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\ioSpecial.ini

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Automated click: Next >
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Automated click: Install

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\NLog.config			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\NLog.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\Newtonsoft.Json.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgent.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe.config			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentFileBased.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentNLog.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PQForceAgentSystem.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\PqForceComm.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\Quartz.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\SMallBase.dll			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\favicon.ico			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\manifest.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\polymer.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\Changelog.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\main.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist\js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\accessibility-developer-tools\dist\js\axs_testing.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\Makefile			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\component.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\karma.conf.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps\nodeunit.css			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\deps\nodeunit.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\dist\async.min.map			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\lib			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\lib\async.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\compose.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\forever.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\support			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\mocha_test\support\is_browser.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\benchmark.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\memory.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\perf\suites.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\support			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\async\support\sync-package-managers.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\CODE_OF_CONDUCT.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\History.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\ReleaseNotes.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\chai.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\karma.conf.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\karma.sauce.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\chai\sauce.browsers.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.gitignore			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.travis.yml			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\hero.svg			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-ajax.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-ajax.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-request.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\iron-request.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github\CODEOWNERS			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\.github\ISSUE_TEMPLATE.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\demo			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\demo\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\iron-ajax.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-ajax\test\iron-request.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.gitignore			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.travis.yml			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\CONTRIBUTING.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\iron-resizable-behavior.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\iron-resizable-behavior.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\package.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\wct.conf.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github\CODEOWNERS			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\.github\ISSUE_TEMPLATE.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\src			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\demo\src\x-app.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\basic.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\imports.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\index.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\iron-resizable-behavior.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\test-elements.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\x-resizable.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\iron-resizable-behavior\test\x-resizer-parent.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\lodash.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\lodash\lodash.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\mocha.css			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\mocha\mocha.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\.bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\CHANGELOG.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\LICENSE			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\README.md			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\bower.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\moment.d.ts			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\package-lock.json			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\af.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-dz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-kw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-ly.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-ma.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-sa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar-tn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\az.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\bs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\cy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\da.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de-at.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\de.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\dv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\el.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-SG.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-au.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-gb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-ie.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-il.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\en-nz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\eo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es-do.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es-us.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\es.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\et.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\eu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\fy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ga.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gom-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\gu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\he.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\hy-am.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\id.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\is.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\it-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\it.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ja.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\jv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ka.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\kk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\km.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\kn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ko.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ku.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ky.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\lv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\me.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ml.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ms-my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ms.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\mt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ne.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nl-be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\nn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pa-in.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pt-br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\pt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ro.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ru.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\se.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\si.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sq.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sr-cyrl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ss.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\sw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ta.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\te.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tet.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\th.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tl-ph.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tlh.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzm-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\tzm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ug-cn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\ur.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uz-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\uz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\vi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\x-pseudo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\yo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-cn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-hk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\locale\zh-tw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\locales.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment-with-locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment-with-locales.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\min\moment.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\check-overflow.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\date-from-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-anything.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-object.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string-and-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string-and-format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\from-string.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\local.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\parsing-flags.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\utc.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\create\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\abs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\add-subtract.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\as.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\bubble.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\clone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\create.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\duration.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\get.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\humanize.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\iso-string.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\duration\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\format			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\format\format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\base-config.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\calendar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\en.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\formats.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\invalid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\lists.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\locale.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\locales.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\ordinal.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\pre-post-format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\relative.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\locale\set.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\add-subtract.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\calendar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\clone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\compare.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\constructor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\creation-data.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\diff.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\format.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\from.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\get-set.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\locale.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\min-max.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\moment.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\now.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\prototype.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\start-end-of.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\to-type.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\to.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\moment\valid.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse\regex.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\parse\token.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\aliases.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\constants.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-month.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-week.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\day-of-year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\hour.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\millisecond.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\minute.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\month.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\offset.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\priorities.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\quarter.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\second.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\timestamp.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\timezone.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\units.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week-calendar-utils.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week-year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\week.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\units\year.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-ceil.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-floor.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\abs-round.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\compare-arrays.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\defaults.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\deprecate.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\extend.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\has-own-prop.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\hooks.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\index-of.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-array.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-date.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-function.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-number.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-object-empty.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-object.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\is-undefined.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\keys.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\map.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\mod.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\some.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\to-int.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\lib\utils\zero-fill.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\af.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-dz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-kw.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-ly.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-ma.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-sa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar-tn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ar.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\az.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bg.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bm.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\bs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cs.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\cy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\da.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de-at.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\de.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\dv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\el.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-SG.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-au.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-gb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-ie.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-il.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\en-nz.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\eo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es-do.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es-us.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\es.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\et.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\eu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fa.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr-ca.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\fy.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ga.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gom-latn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\gu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\he.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hu.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\hy-am.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\id.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\is.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\it-ch.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\it.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ja.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\jv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ka.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\kk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\km.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\kn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ko.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ku.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ky.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lo.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\lv.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\me.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mi.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ml.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mr.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ms-my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ms.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\mt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\my.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nb.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ne.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nl-be.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\nn.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pa-in.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pt-br.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\pt.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ro.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\ru.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sd.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\se.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\si.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sk.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sl.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sq.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Directory created: C:\Program Files\PQForceAgent-CPA\www\bower_components\moment\src\locale\sr-cyrl.js			Jump to behavior

Source: ZOj46Y8Mb1.exe

Static file information: File size 5695740 > 1048576

Source: ZOj46Y8Mb1.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\BuildAgent\work\d2b36b72e57e3b8c\SMallBase\Source\obj\Release\net48\SMallBase.pdb source: PQForceAgentService.exe, 00000008.00000002.2408300583.0000017E33422000.00000002.00000001.01000000.0000000C.sdmp, SMallBase.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentService\obj\Release\net48\PQForceAgentService.pdbSHA256 source: PQForceAgentService.exe, 00000008.00000000.2398065870.0000017E33072000.00000002.00000001.01000000.0000000A.sdmp, PQForceAgentService.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentFileBased\obj\Release\net48\PQForceAgentFileBased.pdb source: PQForceAgentFileBased.dll.0.dr
Source:	Binary string: C:\projects\nlog\src\NLog\obj\Release\net45\NLog.pdbSHA256 source: NLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\d2b36b72e57e3b8c\SMallBase\Source\obj\Release\net48\SMallBase.pdbSHA256 source: PQForceAgentService.exe, 00000008.00000002.2408300583.0000017E33422000.00000002.00000001.01000000.0000000C.sdmp, SMallBase.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentConsole\obj\Release\net48\PQForceAgentConsole.pdbSHA256 source: PQForceAgentConsole.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\142daa471bc393a\PQForceComm\PQForceComm\obj\Release\net48\PqForceComm.pdb source: PqForceComm.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentFileBased\obj\Release\net48\PQForceAgentFileBased.pdbSHA256 source: PQForceAgentFileBased.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentConsole\obj\Release\net48\PQForceAgentConsole.pdb source: PQForceAgentConsole.exe.0.dr
Source:	Binary string: C:\projects\nlog\src\NLog\obj\Release\net45\NLog.pdb source: NLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\142daa471bc393a\PQForceComm\PQForceComm\obj\Release\net48\PqForceComm.pdbSHA256@ source: PqForceComm.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentService\obj\Release\net48\PQForceAgentService.pdb source: PQForceAgentService.exe, 00000008.00000000.2398065870.0000017E33072000.00000002.00000001.01000000.0000000A.sdmp, PQForceAgentService.exe.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentNLog\obj\Release\net48\PQForceAgentNLog.pdbSHA2561 source: PQForceAgentNLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgentNLog\obj\Release\net48\PQForceAgentNLog.pdb source: PQForceAgentNLog.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgent\obj\Release\net48\PQForceAgent.pdb source: PQForceAgent.dll.0.dr
Source:	Binary string: C:\BuildAgent\work\9ff7b3c040607c31\src\PQForceAgent\obj\Release\net48\PQForceAgent.pdbSHA256 source: PQForceAgent.dll.0.dr

Data Obfuscation

Source: NLog.dll.0.dr

Static PE information: 0xD71E712E [Sat May 13 22:48:14 2084 UTC]

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_3_02CE942F push edi; ret		0_3_02CE9431
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Code function: 8_2_00007FF848A400BD pushad ; iretd		8_2_00007FF848A400C1

Persistence and Installation Behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgent.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\SMallBase.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForce.Interfaces.Custom.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\Quartz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\InstallOptions.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgentFileBased.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PqForceComm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\System.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgentNLog.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\NLog.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\SimpleSC.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgentSystem.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\Newtonsoft.Json.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\Uninstall.exe			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe			Jump to dropped file

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\polymer\LICENSE.txt			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\sinon-chai\LICENSE.txt			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File created: C:\Program Files\PQForceAgent-CPA\www\bower_components\webcomponentsjs\license-header.txt			Jump to behavior

Boot Survival

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Memory allocated: 17E333C0000 memory reserve | memory write watch			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Memory allocated: 17E4CE20000 memory reserve | memory write watch			Jump to behavior

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\SMallBase.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForceAgent.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForce.Interfaces.Custom.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\Quartz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\InstallOptions.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PqForceComm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForceAgentFileBased.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\System.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForceAgentNLog.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\NLog.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsv9E3C.tmp\SimpleSC.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForceAgentSystem.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\Newtonsoft.Json.dll			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\Uninstall.exe			Jump to dropped file
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Dropped PE file which has not been started: C:\Program Files\PQForceAgent-CPA\PQForceAgentConsole.exe			Jump to dropped file

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe TID: 8076

Thread sleep time: -922337203685477s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File Volume queried: C:\Program Files FullSizeInformation			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File Volume queried: C:\Program Files FullSizeInformation			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_004026FE FindFirstFileA,		0_2_004026FE
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_004062A3 FindFirstFileA,FindClose,		0_2_004062A3
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	Code function: 0_2_00405768 GetTempPathA,DeleteFileA,lstrcatA,lstrcatA,lstrlenA,FindFirstFileA,FindNextFileA,FindClose,		0_2_00405768

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\custom-style-interface.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\custom-style-interface.html			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.min.js			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\apply-shim.min.js.map			Jump to behavior
Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe	File opened: C:\Program Files\PQForceAgent-CPA\www\bower_components\shadycss\.travis.yml			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

API call chain: ExitProcess graph end node

Anti Debugging

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

Memory allocated: page read and write | page guard

Jump to behavior

Language, Device and Operating System Detection

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Queries volume information: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe VolumeInformation			Jump to behavior
Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe	Queries volume information: C:\Program Files\PQForceAgent-CPA\SMallBase.dll VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\ZOj46Y8Mb1.exe

Code function: 0_2_0040320C EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,ExitProcess,CoUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_0040320C

Source: C:\Program Files\PQForceAgent-CPA\PQForceAgentService.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior