ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-3003000
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
C:\T1_Simulator.ps1
C:\T1_Simulator.ps1
T1_Simulator.lnk
T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
notepad  C:\T1_Simulator.ps1
notepad  C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
C:\T1_Simulator.ps1
C:\T1_Simulator.ps1
T1_Simulator.lnk
ationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}
file:///C:/T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
LeaveCriticaC:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
P":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
    "Rename-Item",
    "Rename-ItemProperty",
esktop","Type":12},"System.DateAccessed":{"Value":1.3432150974899053E+17,"Type":14},"System.Tile.EncodedTargetPath":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\mspaint.exe","Type":12},"System.Tile.SmallLogoPath":{"Value":"N/A","Type":12},"System.ItemNameDisplay":{"Value":"Paint","Type":12}},{"System.FileExtension":{"Value":".exe","Type":12},"System.Software.ProductVersion":{"Value":"N/A","Type":12},"System.AppUserModel.IsSystemComponent":{"Value":true,"Type":11},"System.Kind":{"Value":"program","Type":12},"System.ParsingName":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\narrator.exe","Type":12},"System.Software.TimesUsed":{"Value":0,"Type":5},"System.Tile.Background":{"Value":16777215,"Type":5},"System.AppUserModel.PackageFullName":{"Value":"N/A","Type":12},"System.Identity":{"Value":"N/A","Type":12},"System.FileName":{"Value":"narrator","Type":12},"System.ConnectedSearch.JumpList":{"Value":"[]","Type":12},"System.ConnectedSearch.VoiceCommandExamples":{"Value":"[]","Type":12},"System.ItemType":{"Value":"Desktop","Type":12},"System.DateAccessed":{"Value":0,"Type":14},"System.Tile.EncodedTargetPath":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\narrator.exe","Type":12},"System.Tile.SmallLogoPath":{"Value":"N/A","Type":12},"System.ItemNameDisplay":{"Value":"Narrator","Type":12}},{"System.FileExtension":{"Value":".exe","Type":12},"System.Software.ProductVersion":{"Value":"N/A","Type":12},"System.AppUserModel.IsSystemComponent":{"Value":true,"Type":11},"System.Kind":{"Value":"program","Type":12},"System.ParsingName":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","Type":12},"System.Software.TimesUsed":{"Value":1,"Type":5},"System.Tile.Background":{"Value":16777215,"Type":5},"System.AppUserModel.PackageFullName":{"Value":"N/A","Type":12},"System.Identity":{"Value":"N/A","Type":12},"System.FileName":{"Value":"notepad","Type":12},"System.ConnectedSearch.JumpList":{"Value":"[{\"Type\":0,\"Items\":[{\"Type\":1,\"Name\":\"T1_Simulator\",\"Path\":\"C:\\\\T1_Simulator.ps1\",\"Description\":\"T1_Simulator (C:)\",\"Date\":\"2026-9-11\",\"Points\":2}]}]","Type":12},"System.ConnectedSearch.VoiceCommandExamples":{"Value":"[]","Type":12},"System.ItemType":{"Value":"Desktop","Type":12},"System.DateAccessed":{"Value":1.3432780121774E+17,"Type":14},"System.Tile.EncodedTargetPath":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","Type":12},"System.Tile.SmallLogoPath":{"Value":"N/A","Type":12},"System.ItemNameDisplay":{"Value":"Notepad","Type":12}},{"System.FileExtension":{"Value":".exe","Type":12},"System.Software.ProductVersion":{"Value":"N/A","Type":12},"System.AppUserModel.IsSystemComponent":{"Value":true,"Type":11},"System.Kind":{"Value":"program","Type":12},"System.ParsingName":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\odbcad32.exe","Type":12},"System.Software.TimesUsed":{"Value":0,"Type":5},"System.Tile.Background":{"Value":16777215,"Type":5},"System.AppUserModel.PackageFullName":{"Value":"N/A","Type":12},"System.Identity":{"Value":"N/A","Type":12},"System.FileName":{"Value":"odbcad32","Type":12},"System.ConnectedSearch.JumpList":{"Value":"[]","Type":12},"System.ConnectedSearch.VoiceCommandExamples":{"Value":"[]","Type":12},"System.ItemType":{"Value":"Desktop","Type":12},"System.DateAccessed":{"Value":0,"Type":14},"System.Tile.EncodedTargetPath":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\odbcad32.exe","Type":12},"System.Tile.SmallLogoPath":{"Value":"N/A","Type":12},"System.ItemNameDisplay":{"Value":"ODBC Data Sources (64-bit)","Type":12}},{"System.FileExtension":{"Value":".exe","Type":12},"System.Software.ProductVersion":{"Value":"N/A","Type":12},"System.AppUserModel.IsSystemComponent":{"Value":true,"Type":11},"System.Kind":{"Value":"program","Type":12},"System.ParsingName":{"Value":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\osk.exe","Type":12},"System.Software.TimesUsed":{"Value":0,"Type":5},"System.Tile.Background":{"Value":16777215,"Type":5},"System.AppUserModel.PackageFullName":{"Value":"N/A","Type":12},"System.Identity":{"Value":"N/A","Type":12},"System.FileName":{"Value":"osk
T1_Simulator.lnk
T1_Simulator.lnk
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
get_CalT1_SIMULATED_ENCRYPTED_DATA
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
0A_A^A\_T1_SIMULATED_ENCRYPTED_DATA
!#PowerShell:Rename-ItemProperty
Vrename-itemproperty
!#PowerShell:Rename-Item
Srename-item
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
T1_SIMULATED_ENCRYPTED_DATA
        Set-Content -Path $FullPath -Value ("T1_SIMULATED_ENCRYPTED_DATA`r`n" + $OriginalContent)
        Rename-Item -Path $FullPath -NewName ($File + ".locked")
T1_Simulator.lnk
T1_SIMULATED_ENCRYPTED_DATA
notepad  C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
\device\harddiskvolume2\users\forensicuser\appdata\roaming\microsoft\windows\recent\t1_simulator.lnk->[cmdembedded]
C:\T1_Simulator.ps1
%appdata%\Microsoft\Windows\Recent\T1_Simulator.lnk
.powershell.diagnostics.powershell.diagnostics.psd1get-wineventimport-counterexport-counterget-counter.psd1.powershell.operation.validation.powershell.operation.validation.psd1.psd1start-bitstransferset-bitstransferget-bitstransferresume-bitstransferadd-bitsfilesuspend-bitstransferremove-bitstransfer.psd1.psm1securestringset-executionpolicy.powershell.management.powershell.management.psd1new-itempropertyresume-servicewait-processrestart-serviceset-servicewrite-eventlogsplit-pathreset-computermachinepasswordconvert-pathnew-itemclear-eventlogget-processcomplete-transactionregister-wmieventmove-itemremove-itemtest-connectiondisable-computerrestoremove-itempropertyremove-psdriveget-contentstart-processinvoke-itemstop-computerget-hotfixjoin-pathstop-processtest-computersecurechannellimit-eventloginvoke-wmimethodget-itempropertyremove-computercopy-itemget-computerrestorepointset-wmiinstanceclear-itemremove-itempropertycheckpoint-computerget-eventlogcopy-itempropertyget-itemstart-transactionget-locationremove-wmiobjectset-itempropertynew-eventlogrestore-computeradd-contentenable-computerrestoreget-servicesuspend-serviceget-psdriveremove-eventlogtest-pathset-itemrestart-computerclear-itempropertyresolve-pathrename-itemuse-transactionadd-computernew-serviceget-wmiobjectget-transactionget-childitemget-psproviderset-locationrename-itempropertyclear-contentundo-transactionnew-webserviceproxyset-content.psd1.psd1.kp
AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
{"displayText":"T1_Simulator.ps1","activ
T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
        Set-Content -Path $FullPath -Value ("T1_SIMULATED_ENCRYPTED_DATA`r`n" + $OriginalContent)
        Rename-Item -Path $FullPath -NewName ($File + ".locked")
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
Rename-Item
Rename-ItemProperty
T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0H
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
Rename-ItemI
Rename-ItemG
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
T1_SIMULATED_ENCRYPTED_DATA
T1_SIMULATED_ENCRYPTED_DATA
T1_SIMULATED_ENCRYPTED_DATA
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
Rename-ItemI
Rename-ItemG
Rename-ItemF
%appdata%\microsoft\windows\recent\t1_simulator.lnk
notepad  C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
rviceget-wmiobjectget-transactionget-childitemget-psproviderset-locationrename-itempropertyclear-contentundo-transactionnew-webservicepr
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}
04086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_Simulator.ps1
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
T1_SIMULATED_ENCRYPTED_DATA
T1_Simulator.lnk
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
T1_SIMULATED_ENCRYPTED_DATA
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
-@ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
T1_SIMULATED_ENCRYPTED_DATA
ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}
	8[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
Rename-ItemF
tEQ[{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"windows_win32"},{"application":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\notepad.exe","platform":"windows_win32"},{"application":"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe","platform":"packageId"},{"application":"","platform":"alternateId"}]eUssiHYOx8gt4grLn60pEG2m1QnscYA3695n7jpHJwY=ECB32AF3-1440-4086-94E3-5311F97F89C4\C:\T1_Simulator.ps1
g{"displayText":"T1_Simulator.ps1","activationUri":"ms-shellactivity:","appDisplayName":"Notepad","description":"C:\\T1_Simulator.ps1","backgroundColor":"black","contentUri":"file:///C:/T1_Simulator.ps1?VolumeId={93729980-0000-0000-0000-300300000000}&ObjectId={21E07E4D-A7F0-11F1-9BA0-0800271719DE}"}zZerXjhRNmmdmAGorfziKpptywzaZdCYk/BSFEQL2/w=j
