1209724b...6930 | Grouped Behavior
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Wiper, Exploit

Monitored Processes

Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x8d4 Analysis Target High (Elevated) 1.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe" -

Behavior Information - Grouped by Category

Process #1: 1.exe
44315 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:25, Reason: Analysis Target
Unmonitor End Time: 00:04:25, Reason: Terminated by Timeout
Monitor Duration 00:04:00
OS Process Information
»
Information Value
PID 0x8d4
Parent PID 0x45c (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 8D8
0x 908
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points AV YARA Actions
1.exe 0x00400000 0x00433FFF Relevant Image - 32-bit - True False
Dropped Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\5uCl6.pptx.SKYSTARS 15.26 KB MD5: 509e8433e4244fb0d0d362de5274a9e9
SHA1: d955fe14e7ce7730cb389301755934fdff4a098a
SHA256: edd41c327c8ff8fd13d34406883d594afa39e6d0bcde75c95c7d0040398389f5
SSDeep: 384:iMOUmqVlmpBbeRLPkuXZTkIkDZFwxXOeHp+xWS:iMO/YlmebXFVkcOSp+xl
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\akWullZV3EwuyRnw.pptx.SKYSTARS 24.74 KB MD5: c81ce5ea6eb13384c4864f35bfe565b4
SHA1: 67fcdcc3661efd5bbe909fe0034a60de627f7c93
SHA256: 3b631342e0c3ef7c82a8a99f40001e51e2e5ebdbb77df9a9340238f31e68f900
SSDeep: 384:AIAzoTwTd7SWQhwP1zGcQh8GNxr97+P9MjVxjFp+DDC8JdQ2s9DINS14nrVhL:AETwTd7vqpulQGDVJdkI7jL
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\CPySWMll AnWU6bLZ9.docx.SKYSTARS 22.00 KB MD5: b2229e8426876e2f8a43b68f9859f204
SHA1: 7e564ad1941d85b16a493513ce646bb3d9949377
SHA256: aa650074de66e23830d128e0f33460a705b578bba6ddaa9257ae704ff84a3d6e
SSDeep: 384:y5WlGt+KH/tz6KErRGKi/XNJ/o3GM81pCCevfbdWoz7IgpCbLZO:y59MKftO9RFAbQ3GM87CCWfbTIgpCbNO
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\iJAd4NLQA5m2_U7sFDwi.docx.SKYSTARS 42.95 KB MD5: d03906dac8482d22725d931692ae2247
SHA1: ece813a6c937654575f082a63dd14c946436047a
SHA256: 6fdefc30f6b60d20135b5f6e1545a4fb3a9100fbbb6b56addcc0a92d2f814887
SSDeep: 768:zblQVC7YIwzOLzw+STuyhHAM/pPPQSH9yjeXMea6kkW95749l5YA:NaC7YXzOLz7SCwHAOFYYygMFkQ5k9kA
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\LdyKq sH.pptx.SKYSTARS 41.83 KB MD5: 1d2744230b8e60619ca2de7cb75682e1
SHA1: 1825bb1d84f85d81c3fa265671a58904db495957
SHA256: c22994685c6728f148b7b51f217c70d3498e618dc361da37d654978424da2738
SSDeep: 768:x/4Q2It70RDc5Qr3DAzbiRO6/6vmTgRYHQ5pryE3BX2nqI3OSH8Y2AtoMrgM:xwqQpiQrTAzs/6vm8RJjFBqtGs
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\8qE80HJgAQ4T-05.ots.SKYSTARS 21.49 KB MD5: 1049dbb9d438b5e4b3effa4fde504c66
SHA1: 8d573408010cea13e4d060c51e6267878ff96698
SHA256: 418dca9d7d93b6578f756274fa84c6bd4496ed1ad2dc9f7609150e5b06fcdbd2
SSDeep: 384:aunAqwsLUkML7izWbH6d6AvybhNuSMgaW31h3/ZUT1EUF5OFxYvdEpawXPYUzfnn:aunAqwsLTR6md7ohUiayxUzdE/fY0nn
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\6fah5Apwpl8.odp.SKYSTARS 74.95 KB MD5: 1d2cd030d0b3871d673576c54eb6018e
SHA1: ed910c46ae099ce44cbda49b713ce71f98a8c3f5
SHA256: 870143aba6af711fbdef82086a90f1727bf517a794838c81389b60e1667811f4
SSDeep: 1536:F2mt+q29qALmFgYFFSdXL4+8LqPHtPjhfoDP1n8XzHx:F2+Hsv4gIY/82PwJncN
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\Ck73aG03huDrzd07UJ.pps.SKYSTARS 81.52 KB MD5: 43fc91e379bc4333d788499de09666bb
SHA1: 9b82d65a0f13fc5b86802dc1622084ddc488d91a
SHA256: b2b918cdd87ba271c3ec9536bfc35682a7c1279e84f8c23edf9cc03261031ad1
SSDeep: 1536:RPentPSkA3j9uIdVLzOfBDdJovFCSo7PRptnMugppEV7JscPzXEDQZ317:RyPaJndVvOJGCSa/tnMugTqJs+EDQp17
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\sHSDSkZ0g_NoboxW.odp.SKYSTARS 71.95 KB MD5: a67616a6964e21f9a06f649d45f767c9
SHA1: 32ee7ace4f5be4c561155e6ef11e53466e4fe40a
SHA256: f77d80f6e4d3adc1d849edc002dce5b44bcbb6d26f69e82916bdfd1363c6ea5f
SSDeep: 1536:goGSCLV7cHT3Z0SPPv3sz2B98fHK4ecc4EdBuqSAG3+VSpbUttc:/Zpz+Sv36/5c4iiAqQSpbUPc
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\T_P_-SNfCBkG8Aq2jj.xls.SKYSTARS 71.18 KB MD5: a073536a41e95abed0918769724847ee
SHA1: 86ebbe5d2e154f1c2418e2584dc3a439193a832c
SHA256: a906dd2cc2d46928822dfb148485d4056545e280a7ac24bf2cece918a11e0164
SSDeep: 1536:syUp670yNhphSxJ6g704MNsdt6YUi6uTl/oayocfggoI:syXTFW6g7/NUqB4ogoI
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\desktop.ini.SKYSTARS 224 bytes MD5: 49ff976e7e533a37a6be73268207ab20
SHA1: de41bb1cc83f9ddd816fac11ed0a647f910ed17f
SHA256: 4683664a77141ba48ccc8efa4fbd2b157fe72567c19795644533cbaf1dcdb6c2
SSDeep: 6:Wxijefvj/RxOivK8feeanlaOkXxG8Uu7Bn:W4SHCivZmnehGX0
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\4S7aUwFCgm0F2.docx.SKYSTARS 87.58 KB MD5: 6d3d58bd245a41654bf050d90ccf9453
SHA1: e35b0866460896f7da3a3d7e271feedea907903e
SHA256: d7b7f53b41e08a9a7b56d28d475a09f1e91a1be910b7b511f7d04503ec726053
SSDeep: 1536:2sw3zvpOplCgUf6sruKHheZPAYYHyerk0WFOaoBg9uFXnHxWHGthzt:y3bpO/DsruS8NAYYHZrzvaoC9IX4mLzt
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\jCl699k6cnu.doc.SKYSTARS 11.36 KB MD5: bbbd09d6311aa0e8a73735b63ba4489a
SHA1: 45515d6ec0a0bc08ffc688b22ae46e5e8e1cc239
SHA256: 0df0909e84723bcdfc3989f9e1739c8788b9b3a47d4ec6e98b1f970e0b7655d0
SSDeep: 192:i+ZtpxXHaImnDsNsDHaj8gTxtS4HRLDFmPyUu+rFt5RWf9J6so1OTL6Aw3rRwtMP:TZnxFmDsuD6j8g9bHR9mKuRRWvBS9RIo
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ojzwNs9.pps.SKYSTARS 21.95 KB MD5: 477a03222ee41d99daaad2e2dc902e2b
SHA1: ed4dfe36f1eac9d73bdb4835eca1d6e1a6be4761
SHA256: d6e22ed35733c7f4e12367ffad93dbf89fecc5981924fe6252c1088665bf39d4
SSDeep: 384:RZ05zlXA6FebhRj4LVI6To+HjhCEnGbQpfINyHrwvCChcobPHOCa5s0/dusbC6:L05zlVahYVJ8OjhCwN2QLwlOobWCaicL
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\p1IDCpnxsoIZs5eLNz.doc.SKYSTARS 66.62 KB MD5: 4b3f7b77dd0e90963635cc321fdd18ed
SHA1: e86bd8a2a0d135a41f702acfc8263af9b5c80619
SHA256: 6b545050b6ef5251cd04257f8cf10cf02d5146628791993eea72e104b241facd
SSDeep: 1536:QB6C9cTWgI2RziKhZIO3NzU+l9vebrRYFnSF:Q4TWgI2liXO3lt7eGe
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\4eaJAvH8dt snU9W.flv.SKYSTARS 63.56 KB MD5: e85d624b43f0b2194af62ebdd649b43c
SHA1: 5a5ca1817dd66abaf78768448d0395c3be7dd1ed
SHA256: 8651193047541324bdcfc059bf43f004217ab6c5db3d0e132c4905ad15d0333e
SSDeep: 1536:tFysD9u1ksSAVr33LLlKRslMi+yGUqosq+ss6ej95+I:Xyw99sSAd3LLlTG6+w6+I
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\7IfjlEOaKqm-B.wav.SKYSTARS 56.59 KB MD5: 771aa38796507b1dbf22ac73ed105b30
SHA1: 11a4712be14d5e1c872e7645cac17df8c4f9831e
SHA256: 48143d04a7e1d5f8f1f6d4e1ee02b6b78abf580107010a5a0ebed53b26f2ee66
SSDeep: 1536:dSr/gPR6FgxpJsJXpuc9s/b9fPVTDir0w/VeR:dSzekCxpWbv9s/bB9Dirb+
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\desktop.ini.SKYSTARS 288 bytes MD5: b3e7244e5c6afbc27ac120f579d9c151
SHA1: 2b9c2589d731d47529afd243ba79a7600d7c8fce
SHA256: 7accec1ae983f5727635e04f30c1fd02384e4669043160bb6afad68a0a7726a9
SSDeep: 6:V4jefvjtp3QPsTqrYkhYqW0qP43IBOdvm4Kl0UBMNdckZaeTryfAXdJ++h:GSHZpmrYkhYI5GOtnY0p0kZaeTryUaQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\EDxoaq8Iw18ul.gif.SKYSTARS 91.90 KB MD5: 878c096fb05c24c65a0c33dfe196cf60
SHA1: 866d9e1f71039495816165b6d63be26b2cd15f49
SHA256: 60bd73fc7c09af7f6ec29b9708c71802f96bf25d5f7349a232dfd4702d2470ec
SSDeep: 1536:K24ZsKXaFBxtfJeUrzNXDREBGUc9kfInAO99Ap6czoLndpXM/ZCSKGBI:K2eQBxtfh1EkUmkf3Gn7MRCPsI
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\imF1N2GKr.bmp.SKYSTARS 50.91 KB MD5: ce555bb4a5db83226847608970ab1160
SHA1: 54485a37b0ced5ab875f95f84aeba079baa40b9d
SHA256: 3958a559dbe1dd8af51c0ea143ae906a387d71f7c53639e7501439a31d378c36
SSDeep: 1536:UC3vV54/rKbf8tty6TM9Ih9uyXUcIKPUNsnsaxz9:U+vV0rKbE66T5hDXUEP9nsiz9
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IpQ3E_cZPa8PdDey.ots.SKYSTARS 10.52 KB MD5: 6d0d1e9a516e704142a61ffd399fe5c9
SHA1: df934511bbc55b32d5e5d09b3eb4383cd2cf9617
SHA256: 7ebc286a926e153dbb36c2391325423403a5f4715cac4a119920308ca3bf7647
SSDeep: 192:nPkOaV8CeAZffBYqecA2DElIu5+Qb+Bk5s/WKnsoETLTNDKtE0:ndaVrecpQ5pb+YeZs/Kv
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\umeQAnzpGAKM.wav.SKYSTARS 48.28 KB MD5: 81d3fdac5b5fb8ca220d1e8318feb119
SHA1: c1b1d2f58303645cc829f352f59e1e34f6dc8d03
SHA256: 49a792543c44a0f161b87ca77989d8949da493494eb266d352eb154973f119de
SSDeep: 768:45BANuZfvH9coLZYDdFf8KL77qxBnCujFWQUKnj4Jk2+dqjElM9Hz5i5I:4H9ZNcoNYDdBHLX6MQrjFnK2/S
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w_MGGU cdFd.flv.SKYSTARS 81.59 KB MD5: 2f2ce73bf7e1196e94ae07f8da4f6c31
SHA1: 2974ea108e36c15f6c97aed137c24fc29e129ecd
SHA256: 7b7a86a844fb9fb6f320ece361694778a2a2a4b2c212b990dc0baf22be196b9f
SSDeep: 1536:UAr4xmMfc3kRxqOmynwnqX8wdypmM0T69t7QZZuiSGQ6GI:MIMNjmywnRp869t7QZZZ9Q6GI
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\okSd1.pptx.SKYSTARS 34.16 KB MD5: 78567bb92a3bf67ed496eacd282483a4
SHA1: cb4d2374ab959e12e96d484c44661cce80a72ed6
SHA256: 38f88810d8026a068e2716769c52f254f3460df2d59f88fe566e3cb84c2389c4
SSDeep: 768:VGRGAMwm4M9cu7/6xO6sG6FXE1Jtx0JtjqKogay9:oQAMwM9c1O7G6FOt+JBXog5
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\WKgBkja.ods.SKYSTARS 88.00 KB MD5: b911c17ebf4c1ca7013f75387fcfe625
SHA1: 12f82f4b348d3a03ac07af17bc3e970861e02b68
SHA256: 0deb75aecf6d0c92de81dfaef4984e50703e9a90634ca39196030fd4c1e8bc58
SSDeep: 1536:qzx7J5FIZRy3AtfuW+N75XSt/09EdNpQukjUjcw8oAphpReyEFqpSpbu/QQHFogj:gx7b5XW+N75X4xhtcwcbpAgCbuQGog8G
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\Q1gx-EumCFr8hNVa8.mp4.SKYSTARS 8.89 KB MD5: de892648f11cd215a954f9f440054715
SHA1: 11985bf95d4b27d55cf9a57108e6b86db4ff448d
SHA256: d9acc4dd8dc65d77b8b6b1aab39750fb07fcbcbc9a0ae1d1a35e47b28971cfd2
SSDeep: 192:FX/dQGE2cmodkXSfZhs7F/YQeC/2toJbdxdigy2rlDZw5wMC:V/d42cmHCBepeC/2tcHdignrkI
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\jq8VxXCnWlEayHpw6D.avi.SKYSTARS 76.07 KB MD5: 0bc467e8cd85da98e7d0b3fe09b8d53f
SHA1: 3a097c20ff50f6ece1efc98981b6597103495a79
SHA256: e82cf12db5a9ba9bf37e98d30898fd1a7c87cfaa989f1e0d36e3fd5201458324
SSDeep: 1536:8wo5q7S3jtPDI2jbtzFC2p8SLtJHSDm8xoReBm4v0Oc8MIv6X/K29C/:8S6jtPbzFvp/Lt9SDm8UEI8Jv+/K2s/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\kFSjmyF-KmWxxu h.swf.SKYSTARS 64.53 KB MD5: 11b4c20c68232deff4c0c803ccd8fd2e
SHA1: d4fd645dad73d151a50ef775e3f5b60f2dab8859
SHA256: 667f52eb16db935fa66d6bd707fef908684d5049eb0cb8654a56b8358a255d14
SSDeep: 1536:xJmnzsEqZ3wCAmkkIE1D8Uy1pl/QUWOuPGbL5rzBjgNZfOR7r/Go:xwgiCAmRDly1H/1tXxzZ6m9
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\197VZVbvdT s2CUJs.mp3.SKYSTARS 43.59 KB MD5: d6c5a017c9f3010989520064b9e5ba4c
SHA1: 65f0b3664c1ede182997a73fd0ebe5861b3d6528
SHA256: 9eb151ba184fba6e793e31824d2fdfab9297a984fa9af7e5b6666b018bf222f0
SSDeep: 768:N5S6zFqUxpfejgADKgUEjR0Fq3ezNFHRnwLOIPTO6deilq3p9Ayo+X6o/zQcqlnK:Nw6zFvfe8ADV5lSq3w/HRnBIO6deKDvE
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7_2Pm_o.bmp.SKYSTARS 18.88 KB MD5: 2fa79a1337dc6a38c10f23f510bc4305
SHA1: 60134049edc1c1db8adb51ed5237b33a72687f7a
SHA256: b0f2c06d9710b8ee6a4ed612efeecd559958b75e63ea5996bd7d9756c1a806a0
SSDeep: 384:sc9/nndZa5VYRHViyTv4TcMkWY8F0Gkl5G3JVuhf0zVfgelyPh0CLm3B2:h9fndZa5oHhycSY8F0GUG3JWfIRyPh0O
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\8RPUZRrEb-g13uY1.flv.SKYSTARS 2.47 KB MD5: fb3a29747324f0260396e6398165ecee
SHA1: 6ea311d6f0dc92b36d86590dece8030453be299a
SHA256: bbde062dad55b8a087ad2bca0d49f19d83e8b17957105c156da93fd4f78ca658
SSDeep: 48:ppgF8hUGHMBn42Gy18M2F/1qjK+A0yBudaqpqqEC9kHZINHY:jXhTHMSXymM2FdCJJaq1EC9464
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\aK8F9M7.jpg.SKYSTARS 68.32 KB MD5: 0e58d77cb1c0cdce3538789f119f452d
SHA1: 253c8a5fe595821ef643e5a9647aa68d0b3eb005
SHA256: 5efc5d16d661a6156509c8935ebb5ef984f1d72084e2219d3bd7bd42d662ef5e
SSDeep: 1536:CqujcSp1ftefXCcYIBZDOBaraSgdqxscYQXgKkMC0Nf:C5jcSnft4dYIDOBa3KUsXb29Nf
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\DlRKCMr1kuUs99ccD.wav.SKYSTARS 89.70 KB MD5: 7a70e3e9f98ef124e7082b0a5241a549
SHA1: 674ab04791fc97f01c1cee591ad32e510257f98f
SHA256: e4f9e5ee3ec0d268c2e58b84724a82753906c9f40f789639936f7f3351057e8c
SSDeep: 1536:dHmvVYlwRPFRzEHqlV1iudHvnnHWMy059yCMKCvMn//eW:UYlwRl/gA/nH8059KpUn3eW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Hp9uEm2qgDx9.mp4.SKYSTARS 93.71 KB MD5: a417f05bdb99a1aa62d49fd6929f16c4
SHA1: 11b50e46be46e78d8b19f05451db086c69973f26
SHA256: 650c2419571e1b714adba746cd42e289999abf18788a7d47f99ce86e7f7daf60
SSDeep: 1536:jwuHrzWfDaOX4aJPMf9Ud1DaT+8jbfskRH/kGmjmp1LtUkxNLn2L49syAVGCsODK:jweufDB7E1Ud1u7nfflvOmfjA2HARbDK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\hYLZvHOHq.bmp.SKYSTARS 19.70 KB MD5: 4b89659a97820ae55926e505f28888c7
SHA1: a948147dc1efa9114edc56f14fee466e2c92d8d8
SHA256: b866040956c96bd60e05e4b4c3cdb98b96e3088626c44080cbdd02bcbfd3ef12
SSDeep: 384:bFdgsO+8k1RLIvUrtxkPWXS4hDSlViSBgZaFpzc5qE0+tP+V:bFd1O+bLIvykPWbKViSEaFpQnkV
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r4h7GGfytZNn.mp4.SKYSTARS 25.51 KB MD5: b899278b71e77b44fc46eee0bbd2985f
SHA1: 7db3ce33bbaa4c2afbfd1502f6c736727b1b530c
SHA256: 80d28e81a77f3ad63acd8feb731d35bcc24c8029793b2c8eddb145d195f4eef8
SSDeep: 768:znKdLYMeOxg7lofrKtrTV0CKgrz7weTlAI72RN+DW0L:jqLYMt2iI/q/AzDTR2gR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\WtGBDq uSQoCPzY.avi.SKYSTARS 96.86 KB MD5: 4f2efe9630c0da6418d9d9530966f5d8
SHA1: 2a354a8c0513c45de865806b4402c0273f9978bf
SHA256: ac5e9b8420d6efdf1f0217106680ee2ea00c95ccca607ecc3edaeb173f2df6db
SSDeep: 1536:N/cye44aBsaNcpTje5xJBUruyX4naG+30AUCN5O5LzIg/4a8VtgcR1z1bw:Fj43pTje3JCuyIaBf7LOJ87U
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\XUo1Tt.jpg.SKYSTARS 28.81 KB MD5: 90435981a96cd4887a0f7100191bd46e
SHA1: 3ecdc21576306afeb9a51308e4b492bdb6ecd1c3
SHA256: 5459184c63b51231bf1c4ffa99968a66087b8ab95bb17eb3f8ff511b9f539bf1
SSDeep: 768:EWd54wQeCNc86DXUTvgFhx6pXmcOwE//dwu3J:H/TfDXmvWxtcOR//v3J
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS 56 bytes MD5: f0df73f219bf6f6e1f053f08c8a9dcf9
SHA1: 37051b30f179d8e3b18493ad683c33ba1fa00ba3
SHA256: 5c733ca68ca23b02e09b66925b4643a2fccfcd7a1963619a03407981ff8cfb4b
SSDeep: 3:Eks+2W6T2ikeZQ1VGQ1VGuT91zR:Ek2W6TaGsGsGkzR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS 96 bytes MD5: 1bf7a7cb1848f146bbc218935c693bcb
SHA1: 75015fa3ea6f9acb4fa2bcfe5d078c19f959f680
SHA256: 36798b200ae4b6e92fda419e97eeeff30a325d07dbfbb637830dc17e99449fe1
SSDeep: 3:bF/WhJa2HGQ1VGQ1VGX/1ntPttOrP7qFSscm:hehJ9HGsGsGv1tPttOrP7qt
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx.SKYSTARS 3.99 MB MD5: 56170c5a90f18a68423b8b0d5087e7f1
SHA1: 1302d311dd7038f5334b782915ae1abc5649342b
SHA256: a781538ba8593901ac3b1c83ad8c4e83469710ae359f024e800c7b2a21581a4a
SSDeep: 98304:PVfnjs6rV70BoP2Eu06i34sQ0R9eJV8YFreeRXxW39:PVfnjsM70s28Q0R96V8gee/W9
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk.SKYSTARS 1.42 KB MD5: 4c5a6a9b3d47f6a129173b2f0119c8e6
SHA1: a8c4007f264d2090de2da2bb7f8aa318d1587dba
SHA256: 4e8796f6566e8cb8df1d20ec59d2edfbcf73ccebaae4b1f565dd642ed56f7b92
SSDeep: 24:mnIggZZQnslkP1ka6s+lel1dZ7PusR9LUht9hwWcLBgF1Z9RwrPrwvI:mnIdZ82xHlWbZ7PuC9AhjhwVSPwbriI
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player (2).lnk.SKYSTARS 1.52 KB MD5: 73b77cbe68cbf7d0722b6474335fa1b6
SHA1: 870e59f6b19d293b373dbf7f7f2a0e712c5c5e1f
SHA256: d1a803614a868f6619b0a0fddecd1b89894f82b62015863b3f81fd44e7234707
SSDeep: 24:PaPuirZUZXHhU1CInAs7Udb2MwOZAr6mzITP/:PaPu6QmhXNAgIT/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\UserData\Low\index.dat.SKYSTARS 32.01 KB MD5: c04e9ce20afe5804f2a612c11c96fb1e
SHA1: 282c84019be658136487f994bad878dfa90d36d8
SHA256: d5c48cbf25c7c95fd57034cf302826ec6b27013b15981722f1454f63ad2c20aa
SSDeep: 12:hOzAR/cK0+bRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRE:hOXDpxzl
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Global.LNK.SKYSTARS 1.41 KB MD5: ae2af9d27e1384d793f74eb231213743
SHA1: e20f6755749f495a93010f5dbc0dccf4aa13db1d
SHA256: fca81d316405802492b70752126d54d111787b4935aa49c1d44c272b5f595bbc
SSDeep: 24:YChO1RbuddnP04Cw9LeP+FgO9hMC3tsd2jMpNhLqTXUIU08ohLbwAUgnQktygv2:zcRKdhbCeLeWFgYhddsd2jMMRPQuygv2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Templates.LNK.SKYSTARS 1.12 KB MD5: 0104a7055ffb29c96f0ebd7d6d96f57b
SHA1: 02e7b62ca1c679141ec0592b8a6bfe473077484f
SHA256: ec72a086db7b152a4e9177a607aac3ca01f39b0fd849997360776b9516d571ae
SSDeep: 24:ssH1dhO1RbuddnP04COIeP9PB9lICM56kHwAUgnQktyuGCK:ssH1dcRKdhbCjeFnlrM56kLQuyuGCK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.srs.SKYSTARS 2.51 KB MD5: 9a00bbd5c35f5d5173bb69aad870fdbc
SHA1: 279176d3ead742e38fc64ca42b9f2e3cafff666c
SHA256: 45e2f1aff3b597a2a21f68309eaf540c4c7bafa672a49f8094a84a2668d49b0c
SSDeep: 24:xkqe+6nUDDObk9kQ5QfL9kQ8tP8eZ1/rCu9nC+9kQEwCz:2p+6mObk9FWfL9FuPZv/rR9F0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.SKYSTARS 472 bytes MD5: 6ef1f8585a2d02ce1df02ef3caad0488
SHA1: d0aa169a7427ecdaa09462d73908f06d7a4ed30a
SHA256: 1dad3fd2dd561c6e7cce33b162fd654524bfed6456bac58a40541a23465a34e3
SSDeep: 12:+enJ3dZQrVNKgdvfbreVltN5v0/JVk+yJPFJgmZO:/kTtdnbreVlRvsVtMImQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.SKYSTARS 32 bytes MD5: 93348225a94ec6f47bbe4167e02f528b
SHA1: a650986efdfafd65cdbf4f2e8b9a237db6a41977
SHA256: 5c24fcc5cfc58edc173baa28a2c7bdfcc922211e82b1f330766e4d937e046fb5
SSDeep: 3:erPZ7u/Ueo:erc/jo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.SKYSTARS 472 bytes MD5: 4a9262fb4423b826b225ad8ac35faea7
SHA1: 6545726ce1827c6adb2ef92d92142a802cc0a2a6
SHA256: 8f0de8c244d66166261c7067484580c9ed5c4c0cd69dd0ca5b7e98b82895d895
SSDeep: 12:+enw1rII8iGrVNKgDRcmq/HLZmR6quy0BdSxkcKIxMxIYEyIId:ClyTtF/q/r03qBdikcKyWIY9zd
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Publisher Building Blocks\ContentStore.xml.SKYSTARS 176 bytes MD5: 2e354cc5c0f0ded3521f7f2abd8568fc
SHA1: cb97d14597c3ec0aef4b5e66b899ef80f2bd6aac
SHA256: 0bd8fa4bfb115d7ebcdc495ce2a7443d23b3e0afe482ca47c8568ad3f6b68e9c
SSDeep: 3:Bl9RktSAb4VytcbIhO48ZMdw5BRUVDh7OkVoP3qV242zUMT5W4PUSn:j9RkrbuFlbMwfRkhoW2k67n
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.SKYSTARS 88 bytes MD5: 6edeb1d95c25c5e7237be1055c45ab76
SHA1: 74aa904c66cfaad88a5e1d743b2f756991ccb377
SHA256: 8f450132def4ca913a62a17b9b9655081b82a11099e171b305c9b57f364f5b9f
SSDeep: 3:7f+qqN7GtW2VUUBjWns0qrrMsAU4z:KGttp9WM5AU4z
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.SKYSTARS 120 bytes MD5: 41030042d675e249af573a9867d9c363
SHA1: a964c2fd6281ce873d95fb75ee85fd36ee94984c
SHA256: 0785a5936f00f9b184197389c376000b96d907e4c6955f0e1859a746eecc7ff4
SSDeep: 3:onveAPX3c9ljB2da94rJkE8iKq3zXynO9VMEus:6veqXcf4r/GqjCO3MM
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.SKYSTARS 112 bytes MD5: e146532c7c542256668c14e3f62edcfb
SHA1: b5db7fd80edde930145bebbca9b7fcc4969c51b5
SHA256: c07cc2b83ae096174bacde6a518af4c5e5e248a31c3b323ffcd4eb52d502a06d
SSDeep: 3:fHUrR80hDuhbRtZDkTdkrzwx96ypoN6mzvus:fHUragD8bRtZDYd18ypAN/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.SKYSTARS 112 bytes MD5: 02eeda6dd0a5745ff8bd1468b3a22ec9
SHA1: ae2a511806bc2807750521dbdd0f78e7783f953f
SHA256: b078a7f80a428f2c5ae3b30d10696531b27962b3a8d199e5c8ddf0c7803cee5f
SSDeep: 3:WrDkm7lDDr1VqMZDkTdkrzwx96ypginNWyfUJaBvus:Wr4m9r1VtZDYd18ypn1fUJal
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt.SKYSTARS 240 bytes MD5: d1225c514a0609e500f7e1d21bd4a78a
SHA1: 5fa38b43c8fc1503126d586c71d8886497500a84
SHA256: 2e39dbaa30b623a64e78180b8b9ca35b0f8065a8f6ac1f4274bc07bb1b9a61a8
SSDeep: 6:ZWPbLJzE3hnwSuDiIeu9s7anQe1BfCqA2Clcex6iiqPLb5X:oztzmZwLDiIl7Q+pTArb6ilPLdX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt.SKYSTARS 584 bytes MD5: cb6e7aedfd68e4f772f859d14c99b550
SHA1: db1e6ca3c7ef90feca851ac0f3b69a1d35f29273
SHA256: 077f3cce76b28a0c4361a2b4da0474bf9c6ec5164f14b1d7951ab31995aad2b4
SSDeep: 12:xubIq87toOXS8QoIc3ExkNmHfcsDH+fykpJy9Qwxwv81g7EvJZYcpkBRK4QefPzX:Mb78hoOX7c1xkNG3Sy2Jy9Qa1YyJAPzX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt.SKYSTARS 496 bytes MD5: 21393a4c3817c4c1b716e4a31133a90e
SHA1: b43277cdb64eb8854d8994dc0c44575bf1165843
SHA256: ff0f4365250618b90dc6b182a28f3e96d72e38e05a67de3804f90b2eee1e1bb8
SSDeep: 6:Y9SQTQbBI1h8+ONXQqzvubsvvQK1kqSmBIsA8e935N25o/o/dyJM4JnCJ8IQuDdR:Y9zQCfaNXQr+4utSmCDwYCymGnW9gtPE
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt.SKYSTARS 608 bytes MD5: f20abdb00802546b89ce15a338423f6f
SHA1: a38fb7e8c755821bc9b70f099b0fdec12b45ae25
SHA256: 3a10318211da9c2847054c26d6f787b2706a7e3d2c892461a25c7f7f56c0529d
SSDeep: 12:ydxiNoOwd7cQJo7hogVVkemB5XLAhXG1OdtYrdsN+VVkeyO77WcufYg3a11:CV/tcQk3Vi1+XGvhFViROuFfBa11
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt.SKYSTARS 280 bytes MD5: 936d27bb7efa9e215342dab19392e1d3
SHA1: ed02836ef7e7d8343fcef0819e5a93da8b05bd51
SHA256: 86cefe0f0aa6f92be160617497dfb5044e00946e9b936c7c8a39c1a1c3e9c00a
SSDeep: 6:gxBypi7V77dpunzJQngXiQzE/GhGtRx6pLuoh:g7y8V7REQngygeGhoRq
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt.SKYSTARS 832 bytes MD5: 059590779b5feae487351cf3d180e2ea
SHA1: 03e61651225135302d69553cf8f56dec6117c3f1
SHA256: d237a3f9f90855b07b453e1064efecae6b1b9bdd1bf185cad2f804b9f131dbe1
SSDeep: 12:FoI8+kCkccqxFLeis9U7e1kkpGc0iV9eNgdDEi6N3NJDSJzp7dNuJWERXoA3b:z84V3Ls90ee5ibeNdiqedNoWERXvb
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt.SKYSTARS 112 bytes MD5: 32fd9465291b1826c0ed8c031daab526
SHA1: a77ac7812cccd5d109ddff98bdaf4f870e62f85d
SHA256: c5a68e85f01c55ed00ca651b96c65b9f588556aab67fccdb793a120744c2759f
SSDeep: 3:CyFmCEcww8bxGBt+EAn35dgzQx/BmeuwX:CTHBw8bxW+B35dio7n
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\index.dat.SKYSTARS 32.01 KB MD5: bbf112f488fb2109fde576892d47a9f6
SHA1: fa950fa80e0281ed84831a1e96318ababdbeecc2
SHA256: 0eaaee5c308fdc0f2af7023bba23dd23603256a4fc1c7bdf94a6ae2c4e987416
SSDeep: 96:YlEWGszmIfJy3lsQdYp8q+jE4eWnU8h8A+W08kurFIbrljBJreIObRKFHm1a:Ylz3gOLAfU8C1DUa
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\Low\index.dat.SKYSTARS 256.01 KB MD5: f9b0a43f63b462f44d8bfa72ba058827
SHA1: 5a4e54522b2731129417a90b4e09b2f7928fbb60
SHA256: 9b1793c602c345d3bbaa8951285f0f5e89a4cc154e35ea9bc586f43a35863500
SSDeep: 384:JJYIrt+Ve4raZ7gpoaG3kFftO/WmnJpDSCulaUruOAR+iZj1:JJ/rt+dw0bw+ZBARjZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Documents.library-ms.SKYSTARS 3.55 KB MD5: 903e076bdf4ab746ab5d5704950f367b
SHA1: 913177615bc6d572b62539ac4458b29b9862a8d3
SHA256: 1d66dcd56ca159b568dccab989afa0f45928df9fbade44f24ba6feccb09ed6d6
SSDeep: 96:hufhwr1ug/U+LZuKe14wgMSXYX3II3zlI3C45XJlIVsmBl5:WhuN/UigpfQIXYI3BIJOVtBl5
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\Low\index.dat.SKYSTARS 112.01 KB MD5: 4d798c0c178fe793aeae0766a5aa74ee
SHA1: 9b83cd2f9d6aa188ff94f8efb2ac69d772a60a63
SHA256: 9868578f8f048fb58f07e03a6367d72cd9d4660ca3c2c444d6a5e4df70fae9a5
SSDeep: 1536:1ZD7x9mUXgiCb97wadAUTMAeOqrSvsWCeEAuVij21IhM4AZrWREsVb8F9IOsfGQK:1Z+WBYBsmUF
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0R8VZmxctZ1GX1QI5rL.lnk.SKYSTARS 808 bytes MD5: 0389b8172cfd05471fe3437e68c1d848
SHA1: d7ab464bce15300bc50944d332f1f74f73a4cd4e
SHA256: 1204b882bb9f53172a50f4cc8cddfeea16a4d7589005a8e0d1171ea72453edad
SSDeep: 24:G6n8sHKoaijGBiNBIGimYfM4SWEqOseYmVk:B8sRGUyxfM4aqOseYEk
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\1SVv3QXnp1AD4QB.lnk.SKYSTARS 3.86 KB MD5: f48d3cf6ff35ad87e38bb7de0df3c33b
SHA1: 7289c25dbf975db4c294d67787583bbb2d2df4ce
SHA256: 83ef000dcb518e0660ae670c3d272d4f305d51e5b18b08435cd6e9d8e921cb89
SSDeep: 96:TSEWKRWYqShiT0C6fNu6Yv6f7kfynWVhNK3:T1bWYqS2yfeyw6ShNC
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\2LoErBDNL.flv.lnk.SKYSTARS 584 bytes MD5: 351bcfa12a2f848bfd40532523c02234
SHA1: 488a791444012b298d11a0ed2052fa6c71437190
SHA256: 787552a86fc141c88af2d60bb201024aac9a77307c239151df5a253f5681dd34
SSDeep: 12:s636lDJvUGfa7vKEcHOODtnqZKLp7KMfGy2yrGxlfqnlfuR:GNK+kWuCjLp7Sy22GjSl2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4RX058L3qJC413r4.flv.lnk.SKYSTARS 5.12 KB MD5: 6edabe9738507d4e122b5a1fea3ba1da
SHA1: 0e6fd6937495b449ab70141f079a75b5e8b82092
SHA256: 4464dbd69fb20126ec5dafd9dc92789bff94fcfaf5343dcf62c4854c9a28a5a2
SSDeep: 96:MlETRWYYJUfUs0CqdERTq/K7RWYfvwWu1/brkr5Ok64HSZl+uTcYwY483:MlQWYTssWERTqiFWYm9brktzFHEYuTn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6b 5xTdqcrCQ2.lnk.SKYSTARS 2.45 KB MD5: 5d71c69cdb328e7e2e73c38494bcbd40
SHA1: 3218c8975d4302b3861b03dad61575cfdb3e2932
SHA256: b91d710a0ddcef66fc1374d5e475e18f2ae9c3b23719dd4e51cc45627013e91b
SSDeep: 48:2S96+bto6xaWYPSS/5HirMe0CvyfNpFKl1G0gwlXoqOsek:2SEWKRWYqShiT0C6fNu6R6Cs
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6GPQLrb9z.lnk.SKYSTARS 584 bytes MD5: 1b21351aab3d281e0ecf005ad8cc1a67
SHA1: cd7e58a88f082f857ac8c456e548cc6801cfd704
SHA256: 315962a44ccf0193e49629412e0e282c175aee23c7dd95aaa2812c590f91e314
SSDeep: 12:s63ELLA4kktngnTglMcHOOZVnqZKLtMfGy2yrGbQStQ2R:Mek+TkfuoVjLtJy22GbQStQ2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\76hRSKD790-L.lnk.SKYSTARS 2.59 KB MD5: d2e3663950a0b252e7209e069acf07be
SHA1: ef4b3a07f1d66eefdbd8dad734a080878be6f5c1
SHA256: 12eb1feea736a68e53b831c40f303fa956480787c46a087779636b4c8ec343f3
SSDeep: 48:3xS96+bto6xaWYPSS/5HiiqdVXnjoqolcvE7DDIw+JU5YMKl6Qn/n0:3xSEWKRWYqShivxfolc87DsPVkQ/0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7fgzkGfed5cplNOCn.lnk.SKYSTARS 1.03 KB MD5: 7f1e7047f3a5958ff56a0f64ace18bf6
SHA1: 7de2a37513ce5c5d3752ef7fe1392d45bcde1360
SHA256: eef391a14a25ec4865164fdff947ed1642dd2b16fa144dc009aa4290e65d4efc
SSDeep: 24:cprh1AhO1RbuddnP04CoePtE2oEXUIUS6JvcD4jbq0:cpr8cRKdhbCoeVEnuRKJvcD4jbq0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8qE80HJgAQ4T-05.ots.lnk.SKYSTARS 3.82 KB MD5: 11b2af1fb8b34786cf729460f2e58e1b
SHA1: 1a9a01cd58f9c163ba304b954506137f812004a5
SHA256: b7d89a3534949a64fcb9e61b8ff494f8a12f36b8d62cb07d1dca5e675c38666b
SSDeep: 96:tkSEWKRWYqShiT0C6fNu6Rjf7kfF87DiM/t8:+1bWYqS2yfLjwN6DiMV8
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9H9uiT4RQS.lnk.SKYSTARS 584 bytes MD5: bcab587fc9df7119575a91eec206d3c1
SHA1: 683d944673827e811952cca3b766963a02df321a
SHA256: f7af32a74f4e7dd8c4c85b97953d8bb67a3c44471c14662fa00287f6b2239c1a
SSDeep: 12:Qay4HLjLcvcU1g3rPkv9y/aFkK3YoNwC+9xvlbZ42Hn:C4H7bEpy/RawC+9xvRRn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9rfr3g.lnk.SKYSTARS 992 bytes MD5: 510074a7f809961bc2cb496a8badec90
SHA1: 1434c9a013250a3e7448b7d20b6aa4cd51a066ab
SHA256: 7329525527f194380a48985cedcc62455b331386c3be35d43a9c710d1f62d9ea
SSDeep: 24:bchO1RbuddnP04CoePt84GBfQn23XUIUWDLTc2xDZOset6:bccRKdhbCoeV82n2nRX1Ose0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\axiblyMnDJq6wybsV.lnk.SKYSTARS 2.63 KB MD5: 51401c6ae2e0fb2a307f3695a3e4f3c9
SHA1: ded2c584c2ce62f693cf98f21f0a97ad527a5596
SHA256: 884a60e9fbd8dbf59e94dee8578a2990d30f4b103b190853ffa9a76501616f7a
SSDeep: 48:ADiS96+bto6xaWYPSS/5HiR462jnjoqZlq8ni+HQDogyOseY:HSEWKRWYqShiR462jfZwiHmTZg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\b1Al6ru.mkv.lnk.SKYSTARS 1000 bytes MD5: 95930543ae2074db79c856c4f912167b
SHA1: 80bef1c9f2a2e3fa6a17a384d00148918e40b473
SHA256: 4fd7d5c68f25c8e06654e01ca7474b9745444193c603249c5becba770db5ae18
SSDeep: 24:fNdPAhO1RbuddnP04CoePtWoyh+UukwDgGKBP+AOG:fNdPAcRKdhbCoeVWo8EZKBsG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\BEthdv.lnk.SKYSTARS 2.52 KB MD5: e41b135cf4297080c7de7b3f51fab3f3
SHA1: 8d046d23ea1b8abf806ca897e494f519def20706
SHA256: eb272a05e38496d73fcb1e4c917463b6e11f410a3986524123b03483cec78b2e
SSDeep: 48:eS96+bto6xaWYPSS/5HiSF2+7cVwdruRZ09P1E2QMh+00POiuVCl:eSEWKRWYqShiSF2+YVGrukfQEMbuVCl
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\C 8INbgLqg8.mkv.lnk.SKYSTARS 920 bytes MD5: a7fd66b0ef08d0eb529b0f2788b3fa60
SHA1: b361e01af69160e09bdd1549f8db9c7947cf76f1
SHA256: 95c66b2ee0f7f32616a2dc0cf1d5ea21b20775deca48b71dd344876d3742042f
SSDeep: 12:E6SVZ4l6nLguKYCanCm52vppsz1VvzeV9DG1/Js3C60VH/bROyvmJLE3jRbCF65k:6Hg6n3CKIgvzEK1/JQkHogFbCF62PMl0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\DB4Pt MG-kRMN5PaImf6.lnk.SKYSTARS 736 bytes MD5: f00f7071813f52dbfbb987f4645d4cda
SHA1: 1c8e180961b16950152b5675238a3f6a43c3f241
SHA256: c7e458f52c46848757ebd3eab6781a53f84067bbf32763f1345babcfc3b0bb63
SSDeep: 12:QNOsAYfkaJNR+HXl9BMzhWidY5AmOORssnqZKLejXzhWidez+ifG1elFNcSgbzYE:zilNQ6zh9d97LsjLOzh9de81elFm8mXn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini.SKYSTARS 440 bytes MD5: 2b160a4617029b3d16b3370d464d3614
SHA1: 7f627f60add583c756a1459480910d59c7486dcc
SHA256: b197da9ed8b344fb7a90d3193e5a2c9f4c529f4c2c1fee1bc0af81a5865b6217
SSDeep: 12:NZHZpmrYkhYI5GOt495MDPbTK/qz5vrEM3KTVFPqWO5:uNhYI5GO295MDK/qz5vGTvD+
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eiXRArevP-KNSUGJ1km.lnk.SKYSTARS 3.96 KB MD5: 80464e3495bf2da3010f8ef49b4cf53e
SHA1: f9859bc4783a4fe5527a6408a2e9e9de62053e0e
SHA256: c25ea1a5ede6b9cb797ee89f19203d8fc7e102d1ce2eb846d5881ff5888e006c
SSDeep: 96:Tjw/A0CDztSDKj1XO42RWYO2npHT28kTJ7Ql6B1VG:n7xSDopO5WYO2FT2BOl6M
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ESHHI8tKuSTh9Xs1d.lnk.SKYSTARS 672 bytes MD5: 804a2c808de0003df8ac68a751bef53e
SHA1: eab45867ca35f6c13d5bbd15396d90b433d55ad6
SHA256: ac5ad6af58a1e7ccb01a35f58aa210091b2be8b994664c23a1b287ced989dd9d
SSDeep: 12:kPi+JrAHfa6nLguKVnr7od4jhWGgU/Yj0EOOCIGR7RZKugASz2+962yrGxzXSTzG:sOy6n6As0GK09BIGMu7T22GFXSHX2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eYe5rxlt-hbeM.lnk.SKYSTARS 3.60 KB MD5: b5c8117eab99e5c9b412f7109e52311a
SHA1: 8d55fb803f5fa0a116ee4a4c888c3ed5b6a62191
SHA256: 5bbe61f5829e549d50b8da3213a8142c6459c41e222ae1e749478a9c32d54cd9
SSDeep: 96:6lETRWYYJUfUs0CqdERTq/K7RWYfvwWu0Aa9vR:6lQWYTssWERTqiFWYm0AI5
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\H938whtrhk.lnk.SKYSTARS 632 bytes MD5: be5c5e4cf069ff35904d5065207435af
SHA1: 0ed8794c8b509bd606dc2fe4548a265335967c9e
SHA256: a3ee66eaf9c8f2116f1909c3c9190780142cdce94cd7c278c13bafb363c34652
SSDeep: 12:qxorAWl6nLguKYCanCm8SN9t9/J0Os60VH/bROLbZ42oKZn:qx26n3CKRft9/J1iHUpn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\HDB0GdLUiySD7s83WAzQ.lnk.SKYSTARS 1.05 KB MD5: 8dc894559c8056bd5b3aad7750043f17
SHA1: c9a8438d57bfd41f601596d2f547f326c09564c7
SHA256: 163997de8c34d7b6e3118361478ad1ff4c3b631f080c060fe6c657ccd118e638
SSDeep: 24:4abhO1RbuddnP04CoePtkxF7k3q6FXUIUrRwpgKBP+ASG:PcRKdhbCoeVAHURyRwpgKBIG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hYLZvHOHq.lnk.SKYSTARS 1016 bytes MD5: d574734bd1b31dbe45ab09326e70b3c5
SHA1: ba8b0187de0047114aed60cc5646de25ff55b491
SHA256: 4d6548cf034d5f569021a570806c86dbec934c1258e007e2e4fe9c26d13864c5
SSDeep: 24:tdl1YT9VuhO1RbuddnP04CoePti04Uvg1iLBXUIU8P+Ojl64jif0:tmJVucRKdhbCoeVJ4+aiLNRnP+Ojl64v
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\i4dQ.lnk.SKYSTARS 456 bytes MD5: aec0b1b0624be41a3bada41c143604d7
SHA1: b2f7b0c825d9784f4f685b7e9f04750f2c862d7b
SHA256: 73cd3f3f0163f3486b29ba26911f5988f589a23660d7ed5d92208b8b1b794a3d
SSDeep: 12:YMoA7jAYfkaufkvD1VfDKw9Kj/a5jZMGoapoAR:YMoFiqYGD/YjZLoio0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IpQ3E_cZPa8PdDey.ots.lnk.SKYSTARS 616 bytes MD5: fd0054876a745c9136355121aa75252e
SHA1: 0fd3ad7996f5041eaf3dca686cf1dfab86435666
SHA256: 3b24e711928931d994ecc1ec26cf78f0306dac3c012f5b444a7049ca832aa3a3
SSDeep: 12:GCWHbMVJlx3vDz1lwXRD1VfDKBC9Kj/tTTv7RXp7WIc+AjbC+CGR:Eb29AXNGBl/JTDXKb+AmG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\k8AKeCkuzc4HIIi.lnk.SKYSTARS 2.62 KB MD5: 0a23a0a29ea32e896b1bbb8f784dfb0b
SHA1: 1436c444c4bcebf697a613ff009ba60a10106985
SHA256: daad059b2638acfa0e741a91ea0a7d718e7b5a504b0792d661545202b52ecafa
SSDeep: 48:OuZWS96+bto6xaWYPSS/5Hiu7Ym2wmRZ09P1E2yN6GiUGHC+7ZjqzzmAi:hWSEWKRWYqShiqYBLkfEziUGHdj/d
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\MArt8B5Nnvr6CocV2.lnk.SKYSTARS 3.94 KB MD5: 7bb78e997b0bdedd64d291ccc8654a87
SHA1: 6b8261c22a43cc69df3a4c131c4e3abce25751de
SHA256: c3eb69367978e346c8343033f7df4d9d1c63c30fa9a2c80224371a47d6b62038
SSDeep: 96:TTJjw/A0CDztSDKj1XO42RWYO2npqaGM2eZMsyM+D4ez:97xSDopO5WYO20aGMBes9A4ez
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mn5_uAB.lnk.SKYSTARS 2.50 KB MD5: 4ad1365b9e7884768e21c57cb84f8d5b
SHA1: 1bd2fca7dfb49b119fcaf433813677ad2d5b5979
SHA256: a93c465ef88bb054e0d23a69e8d69e5b45057a0accf07f3bf165a67b1f98732d
SSDeep: 48:2yjAx/B2PP0CDbftSKsKJFGWU9cPwyRZ09PTPnYUZ+XAw+R/j2hW:hjw/A0CDztSDKJFGhu/kTPnYUZ+wLKW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oFYgBk4QtpG412-y.mkv.lnk.SKYSTARS 2.53 KB MD5: 56802b576a86db61a0b4332b2f5876e0
SHA1: 255ad41e00deb1335cbb92ae4d4b9a142f7d32e8
SHA256: 3da39055a4a34d895aeef0824a6db9d600093861c8b6f04a88df2f5dd0f19b9e
SSDeep: 48:/l+hES6xaWYPhTKJIxPnptJpspFZ4hpEij5yh:/lETRWYYJw1pspX4hpfyh
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ojzwNs9.lnk.SKYSTARS 3.79 KB MD5: accbfc39a1c2440e3d8afa19bc85cc72
SHA1: 506922d3d3fd5bc0773c44145ca5906ab0921cb9
SHA256: 5c79e025ff08463d512545828e4a2a8d83300dd00916db09ae8728485e05b548
SSDeep: 96:RcSEWKRWYqShiW6FLiRWYChdA2EPJgsVfZ6Zhope/y1:y1bWYqSzwIWYl2ERNIZhope/y1
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OXwvMzo7VU4DQ.lnk.SKYSTARS 2.59 KB MD5: 7549a80cf5c42a216a105a5547a77ce9
SHA1: b36c2d304dc2b95428ace511990ccd28b0dda7c6
SHA256: 9197e999c2fb589b5774fe3aa217479f8294fd9e302fd833dd805762d1888c2a
SSDeep: 48:hVMCxS96+bto6xaWYPSS/5HiIlhPZ0VXnjoqABZvE7RHw+cnF5Cl6Kl6GyTy0:VxSEWKRWYqShiIl70xfAT87RHXfkGyH
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p2v55AVj.lnk.SKYSTARS 3.78 KB MD5: d53b9ed4568e7dd51e714e995ba20d87
SHA1: bab724872d8bd8fe30a327a4636aa5a6f3e3a1d6
SHA256: f2c8955dc6d9be3524f2cfcf1cf8322e3f6a637b30f3aa6e920ca8ad03b8352b
SSDeep: 96:MSEWKRWYqShiT0C6fNu6sg0fflmcv39Q0:M1bWYqS2yf2g0Jv39Q0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PQjPiQ-k5UaAunXcyp.lnk.SKYSTARS 624 bytes MD5: 67e040d07a6cd3165e3442da0adb046f
SHA1: 9028e9f9cc1308ce7dca4577b7639005daec42ac
SHA256: 4c0164e6fe6bc0812665aa3156584cd7ecd97aeb9789167250ed951ebe3437b8
SSDeep: 12:l0dZ9eIQglOAYiEj1s9lg/a/psKgyjoNwC+9xvlbZ42Wa2Qa25n:lgZUIS1JGV/p9awC+9xvRNmyn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R7_g8IwpOeJE _.lnk.SKYSTARS 3.91 KB MD5: c155513fb70740f652a52f4a90ad955b
SHA1: 693160a24409c2ac767a5037ba6adf9d0fa9d437
SHA256: d6491f2a08f70a5811abd701b79ef82e73a4ce3b6715c4f930fec486653b1bc7
SSDeep: 96:kjw/A0CDztSDKj1XO42RWYO2npKDJAWkTJiqHO0+DlUS7fmi:o7xSDopO5WYO2GJA7kqu0ACSSi
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Rj1_r3.lnk.SKYSTARS 3.77 KB MD5: cd82eb8fae146c902d34c6b6c230a12e
SHA1: 8fbcc1ffc7b2222e72eaf2fb29dac3427bea069d
SHA256: e9a23b64fb4b8fbd21cc7a89bad087b11684d7d00a19ecbb65e9daa0cdcd44d2
SSDeep: 96:tSEWKRWYqShiT0C6fNu65Fx/AFikfmjIhTj:t1bWYqS2yf//UHpN
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sLz-Qn.lnk.SKYSTARS 3.77 KB MD5: a474a9e036ad8a56860acb992f149315
SHA1: f0b5810aed5d08023e4dec8cb957639eabec8d42
SHA256: 3e120fadb2ab1428672dd53cfe4912a8cb77e497edca3051a40bc6c5c36a7aab
SSDeep: 96:FYSEWKRWYqShiT0C6fNu6/FQLVkfm3dKLW8Fi:FY1bWYqS2yfwL6eo68Fi
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\SS_0.lnk.SKYSTARS 648 bytes MD5: 3e79be5f567a3377e78a6dccdc67f92b
SHA1: dbb33d1ee2a395263699919e65e6a626044e270b
SHA256: bee0be36ffc12483faaf02ab196202f8983e79b55985f4ff68ae86b871169a88
SSDeep: 12:qIWvOQl+FqAYfkaDpwSZJekvCbfeTee3JZKub6HmCnO70O3mOsa13PFiaUh:qVORxixwJbe36u43nOL2Ose95Uh
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tefEtu9q3KkgFxvT.lnk.SKYSTARS 1.02 KB MD5: fa47b703f70466832e61bf19e4d1473e
SHA1: f273910c967bdf4d25bf510778be251740eecf7a
SHA256: f169ff77beb36d1852999f2d17b64950cd8a3b1f8ff0e3f0786f88a6e22f2925
SSDeep: 24:nuhO1RbuddnP04CoePt+3o3t++Sa3WOPn4lFm8mXPH:ucRKdhbCoeV+Y++SvOP0m3f
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VJDc9FNq06.mkv.lnk.SKYSTARS 5.07 KB MD5: 32277bb8593d1f5ed1a831b46abde77a
SHA1: 34f1c08ef1f13b16fc37d0838b97e8f4b9ec75c4
SHA256: 260e6676b7250dbb3b4c0ee533a474a36011f66fc15f3621981074ce8104d04b
SSDeep: 96:KjlETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWc/hIlD99Oj+uKO:KjlQWYTssWERTUNwOykoh/hIlBgj+uKO
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VVWQOJivCiw.ots.lnk.SKYSTARS 592 bytes MD5: 886fed1149b9358205444bdb9a5c5981
SHA1: 4920282d8d8701be6a9b58ef9d2bbc92126c94d5
SHA256: 43218943ab4124754df1658bd4e387d24023c6604fdf9343449e9963be962396
SSDeep: 12:Y21xzYtJqztJd4bu8+eelvJnqZKpJ0LMAyW2YnlFNcSgbzYm2ab+6ab+LkGR:3YGD8CJJjpJ0B2YnlFm8mXCjCj
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wcytZbmWqSORl.lnk.SKYSTARS 3.90 KB MD5: c8e4308548ea0e295fa4a3e77da9f344
SHA1: 171c5cf4ee75a7cd0570d145bd6cd8b7c9840e14
SHA256: 957056159bc761d902ced3f87c2a00051cee63237fbb89d27d890d02c20c1e53
SSDeep: 96:B3C04jw/A0CDztSDKj1XO42RWYO2npfTzUvM2eZAvk+D0djlTChP:B3m7xSDopO5WYO2JTzuMBFAKaP
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xzSJ7.lnk.SKYSTARS 656 bytes MD5: 3a96d471a0063634e7d48507dfca190b
SHA1: 30e926c2071ae52c2f05aa1d07c1fce9df4111fb
SHA256: f0a77def3d623ffd288cbb52cd69897818ff8df6a13f8d64080e6eb96a34bd15
SSDeep: 12:U7SqXra+aqAYfkaoemhH5/SsD1VfDKT60VH/0U9FGITlRbC/jxcr2AjbtmpmCGR:0ONxiPu/SEGhHhnZbCrxciAGG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yF7UTSD8x5Tqa.lnk.SKYSTARS 2.56 KB MD5: c32a42288c4a08b536ccbe6a99ecf349
SHA1: 47ed61f197f7ce81704967bf6fb2baa73daf2db9
SHA256: 9c8fda26e73e90025de6eb8e4f2ecace0374530282d618fc3cd8dc9bc2bdbd96
SSDeep: 48:9fk3FjAx/B2PP0CDbftSKsKJ3nP3kZpyLc96WzA8I+G1Zzm3PtLtb:98Vjw/A0CDztSDKJ3MZpKc9yhnz6
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YitNJanVQcH2FO.lnk.SKYSTARS 3.84 KB MD5: 0a71f11e5333fb83c518ef8c4702471a
SHA1: 19237fac505bbf094fbd65ba84c76c7406d1030a
SHA256: 82e7b1c42b932068233ebdcbab0017a5cde3ce54e0e77cf808cfd57acb3d67e0
SSDeep: 96:kSEWKRWYqShiRaN80CyWERIlYXfumZRDchOG:k1bWYqSP8bERIlYXWiRAz
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yNNti.lnk.SKYSTARS 3.80 KB MD5: 0bc96452dd0b9caf1c14251be5ba8449
SHA1: 4441b25a3677fb109281fce96a330a1cd5d052a1
SHA256: 8f6cc25d825872566eb2799076756e3f2a604e35a4991effdacf99088e18e04b
SSDeep: 96:wjw/A0CDztSDKj1XO42RWYO2nprKEVM2eZ5CGj817bab:s7xSDopO5WYO2ZKyMBz1y2b
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YqrvAc.lnk.SKYSTARS 568 bytes MD5: b94d5f7a73c7644db6a8f6646a601c4e
SHA1: 50db3ca3d9671fe7b76ccc35cfe5ee9c95a81486
SHA256: 05334b3d127d599f66c5fbc9918751ebf8857b9a17eca92a90a11c2c81dbc300
SSDeep: 12:u2tuHfGYI8eg/kY2btEQz0EOOgv69Kj/0byx4nMTJaAJAR:JtuuSeOQz099/0cAuJ3J0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Y_JdOEwgYzgJjoB_mnj.lnk.SKYSTARS 2.62 KB MD5: 4be751dfa0ced87dd996cf9f99238b44
SHA1: 397ce36b3a7232799e4e4ec22fe0b377be50aa7d
SHA256: f548c1748c11b82368872379c87ce0fc41dd2f9dbb5532322d538b9b582764d8
SSDeep: 48:tPCJjAx/B2PP0CDbftSKsKRG2yIfwHRZ09PTWVBlE+SAJ+XqU8oy1:sjw/A0CDztSDKRG2yc2kTWVDE+J+8oy1
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ZwQr6.lnk.SKYSTARS 3.74 KB MD5: 390261280e189c019a47404a5e4cc897
SHA1: 8699df21b2bfc2fd08694d396891ee0e0157094b
SHA256: 50857d9622a09e78b24758e8853b88a8e5c9da38f1d8efbd298f7ef85d3cd4ab
SSDeep: 96:bRSEWKRWYqShiT0C6fNu6L2+fflq/gjd5+Ehk:V1bWYqS2yfB2+Y/udru
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms.SKYSTARS 6.51 KB MD5: f63b647d77af686ac1dbf4ba68272592
SHA1: 29f4e9bee9fb04888475051aed9a96d4966ac64a
SHA256: 093512ccea6060ca7626cff38a6ad64b69ed8c6934294d8ea93ab95dde53b5b4
SSDeep: 192:mAT7rHFP5dpJl1aNgMaN/w/jahUaB/av0:mATf55ZtU2O0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms.SKYSTARS 16.91 KB MD5: 2302a5eb4a9dee9bbe09d2ae2e64255a
SHA1: 3a97c327ca648af78d9b876a5bb06d01ac7b3ac3
SHA256: e56e7ce67c19f1a7114ab6281f7c295a64620199afdceb09bc678924bc19d771
SSDeep: 384:HnhtwJ2UMEA9sVHPvinqhOaGPJRnp3eZ9qbeo:HyML9Si2Za7YZ9Jo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget.SKYSTARS 8 bytes MD5: b8e869348b7f36fb18fc6ace042b8384
SHA1: 2c1f4a7ddbb862cd0a214656cd91888da47670c3
SHA256: 383e7b816ecaf6e8027a88421bf45d65e5e11258d1879d3130b49309eb19cf6d
SSDeep: 3:UyQ:rQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Fax Recipient.lnk.SKYSTARS 1.22 KB MD5: be72eced12f5bc61bf8ee3c7ae8b1709
SHA1: 6cf5a7270c79aa440288b7fd0c8744ea9f300e68
SHA256: 5a4ba7469f31d7e17d4b351a64cb82e906414df6afa5537de638cdffa3bef6f6
SSDeep: 12:flkSZ4c7YNCmr62r6EAZnPgnqZKuZnbeX9XwKeCxiRIeT+iRRRRRRRRRRRRRRRRN:3ZxA62r6EAJPgjuZn6JwKpHhD/jwRN
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk.SKYSTARS 1.39 KB MD5: c9e2294081028e13b71ae91aae46df47
SHA1: 880a16447cd5f2e017e2614c66fc98e53d278b6d
SHA256: 69738a155943f5e0a0ca6fa6b3564a64d0a1951eaf5059ef17bca1913290e87b
SSDeep: 24:6GzxZ9M8SBmrALonYIXGw3Tu22YEyMPuALUqBqROQhvEKAHHbS0Tn:6GzxZ9VcmpnYKGwTu+EJPuAA8ItElH2S
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk.SKYSTARS 1.43 KB MD5: 88e4ef25514a66cfb0bfe78ce0acedb4
SHA1: cc320a66e46ec3b87c11086472fd14981d245ebd
SHA256: 73f0259c3c77be172792b1c31998bf7b8fa3127722696f338a58d6bffbfad5de
SSDeep: 24:RnIggZZQnslkP1ka6s+lel1wnrmPH7BcthjXLNiaFchuYgb3Mcw4EyEt:RnIdZ82xHlWWKHqbNiochuYgbM4Zk
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini.SKYSTARS 712 bytes MD5: b9af50ec31d54d109502414672d72fb9
SHA1: 911a898cb4e5001356b517a8b4719c52a57749be
SHA256: 6640e4c2f605f0969f77f09492d909caeab248fabd4bc4615d61bc55d8ef8db8
SSDeep: 12:MapQxUYloRAfBVrufPmeTrMqoD7pabt1t0r6q7cMxxfmeTrGaEONoZdrt1t0r6qz:ws8VrHKrsFabtu603OKrn9crtu6U
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk.SKYSTARS 272 bytes MD5: 5af21526deaadcefe2432677484d92ee
SHA1: 4992047bfe80c441146740e3a6214165a41ef4dc
SHA256: 6a37085f5651dd2d29dbedf085e4ba5932642c346a47e97da3108bf3f86dc76d
SSDeep: 6:2L2y8JsGsGBL14/j0xnRM3W5XrvMOEhBD3ANKnbrVNuxpXnqpKgcJ8ybVGsGR:1y8JRR91mAqYMOErEKHujnB2ycRR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk.SKYSTARS 272 bytes MD5: 07c9ba23de16b6e7a611c0701b73eb2a
SHA1: d5176f4c45554209969698517d74f3570ea33df2
SHA256: 9908e3219d7e14d4832e97349eee1e34e823f7a2855e0d9611c6e47bdf70a920
SSDeep: 6:2L2y8JsGsGppR0FRyw/g3rvMOEhBD3ANKnnpVxpXnqpKgcJ8ybVGsGR:1y8JRRbCF44wMOErEKnpVjnB2ycRR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk.SKYSTARS 1.48 KB MD5: ff1e9e28be0f3517870e35df5a707fb4
SHA1: fcf00c0a1915fdd70127cee9b3a0519f9b8cba9b
SHA256: e1e723acf6b0c5e8074f451e987ed15be153595cf3299f1f3977a7655ab7921a
SSDeep: 24:AyCIggZZQnslkP1ka6s+lel1CK0AlababyhCaIyeYm0hupm6Z9RwrPrwvI:CIdZ82xHlW4KnIabyLi0MpmkwbriI
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk.SKYSTARS 1.28 KB MD5: 2f2e6db36effa3d2148ebb35a41634ad
SHA1: c0f94f6372da27ccb1867335bd5a83bb68ec8db2
SHA256: 173aa6e388a5704715b59eb235f9424553cb3251aa025fe28d7c0f79fa3651b4
SSDeep: 12:8/3rVLzLr62rMqonSZKunqZKunqZvyrV0VSna2ylSMhwRRRRRRRRRRRRRRRRRRR5:8d62rGujuWfh2Cjg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini.SKYSTARS 328 bytes MD5: 0cc71048015082a00aaa1835dcfba0e8
SHA1: 15531ee886a0e86d9f3a05081a77dc1c6e35895a
SHA256: f93ea7b34ebf4f97c27bb074373dde658d9ec09f231e4bd4c8577ac6dae936d7
SSDeep: 6:QD1RPNMyEiK45NpKfoTQ2BhdpjgB3QPPtQTf6P20KN0C0qP43IBOdbPn:aUYloRAfBgBYuf6P20D5GOZP
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\addons.json.SKYSTARS 32 bytes MD5: d69413a17fdc1cc8d4aabed4591275f0
SHA1: 54ed3b95319f7c20a184228d7b5142baf440acd3
SHA256: f03e7b9deb68625059d4baa843075989d4b973f2542cffdd74b95d26f8bafee2
SSDeep: 3:c3Dx9Qn:c3HQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini.SKYSTARS 216 bytes MD5: 852c1dc9e7d0e941e21bc5fa1a910216
SHA1: 4deebb51490265397b336f9af48c0fc7aa911236
SHA256: 1de767bbbc05ee8010c43f8b9bfc5fc6cc9cc097fe7271bec0fc1c478eb20846
SSDeep: 6:Qf8mwGDkb7b1AAsPJp8/ABQh0RBuMle2pAB:Qf3wGAb7xApS/YkucX2pAB
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite.SKYSTARS 448.01 KB MD5: 958b547860b37201654b3a6a0b045896
SHA1: f6672a8c71694dfdf53ddd2cfe961a16bfa3dd05
SHA256: e97ae34c9a7985ccb993f496773a6397eaf1732f7f75f1259adc8d161072d7de
SSDeep: 96:A8NK0ARzmmBtnRQQkdcshGEHrNWDFilcVR6z/xgHU:A8NKT1Bg7dD7HrNWDJU5gHU
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\key3.db.SKYSTARS 16.01 KB MD5: 2a456cad3539078e0813717327546844
SHA1: 0df82fbebd9f5b067d290a69414555ea74105367
SHA256: 663edab10e1a1ecb648742dcc3824598a7bb7301ec792deedddc98e3b4d9404d
SSDeep: 12:ZhrejiJRRRRRRRRRRRRRvRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRz:tR3C4a9+
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log.SKYSTARS 64 bytes MD5: 60f137d5c0cde0dcdb1c97efee08ccfa
SHA1: 65015887cbf8eaa26bc29a353bb22efd56343f24
SHA256: 289b366d4a44b236efce080b64d720ceb5b989826ce4ddb9c5f50cb4ea743fd2
SSDeep: 3:81r1nBubtIKe54SJ22aYUZGq6dOw:812bt3e5ptaYW6/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite.SKYSTARS 10.00 MB MD5: 7da36818fd931916118b50c03da637f2
SHA1: 2e3d53a5a939d0a59164bfc024938ce18cec7a5d
SHA256: da2639ec02ea6296aea185ca00fbe86e160ca62cd6b6ad79a272c5548270b504
SSDeep: 384:T8n528ndgSl14e6T/K+sTtHFpf0ljBC8EE9eA6SA0MA9NAToG8bnK:TUIUdZ14zOTnpUBsxAjAHAzATorbnK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js.SKYSTARS 3.98 KB MD5: 922d3e9ab0413c56bc909cc0820df753
SHA1: 81037f634036b88ac22a1d115f90c6a0400bb5dc
SHA256: 678eb70055e4f772cc86233f490ec3c8926dc7564c207e42a2b11dd5ca7af5ad
SSDeep: 96:5DFKMmqM5bD4BFH/O2iEBOtfzaOL9yzhEaorsztHBR08y4o3:NFx/Md4Bc2iEgf+OL9yFCaR0/4M
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\search.json.SKYSTARS 16.38 KB MD5: e7ec2853cf3b09ddceb547ba242321da
SHA1: 9c8ed8f131b00a056671c92dae01f1a460478537
SHA256: 6e04c2383aba1c8260d3587e420c9d66c81097468f5da187baaa8555e2fa6a80
SSDeep: 384:MMxx4ZMNRG5shcH69FJKVU9QDaa9zJWOid8jFcw:MM4Z6YvHlCilbWOiqjew
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db.SKYSTARS 16.01 KB MD5: e015626b46dc51ef3889806480e6bb59
SHA1: 7d019fe75588b6fe917503ad5d52ecca9aafa7d3
SHA256: 48c84c7797e847e9649f0354d330fc166edf8fa5baee7f34b3e0d3171e662b07
SSDeep: 24:7hZtPTX7lTcJbxZ+XIf0z9blDRznjsg1pkn7acO:7hTP/lgZfUhdjs+/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite.SKYSTARS 320.01 KB MD5: cf451d791030a0da83e9a99665d45466
SHA1: b2d1367cc58c15cbb1bc23d7f7cebc8c74d6195d
SHA256: 2a671533fcb359ae0c4d5ba03cc1f7c25bd904349dec3a548c255ce5ea2ed617
SSDeep: 48:EzA7SaO+uJdiDCaQxvPAgMPvNdOCd9Sx/m:AAJO+uJdimaQxvkPLtP0O
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.SKYSTARS 2.97 KB MD5: 0f55ca53e97d9c4e8d5c8f4124c935be
SHA1: 22bd0f7d95a61d131cbabbe0cedbe0865ff839f1
SHA256: ef73a4d72e11da4a21f08849310fe554fd9b53e612652a3fe018e4cf3e32e58a
SSDeep: 48:4Bp53k8+aVR8OFFSaLWGGObIEAcbiyCBAOrPXNNhtg/8OMQPV18OmIQ3CNLB2t:4y8+q1jzLoOEEApzGOjDhti3zmgD2t
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.SKYSTARS 640.01 KB MD5: f3d498e5b7d0055ad3c6dc2f2cb75090
SHA1: c2e46d7efdb913b5330c10384309e47734ab7d93
SHA256: f09899a2828b995e645c194949639c6cf47e1cf295da5d715d2615edfb91aa89
SSDeep: 3072:LUmqxwpDxPVePCa4dbYlzt8C9unxV7zVYYrvUQzA/vmYTqyCd3Zd:LlpDGXYbiZ8C9undY//UZd3L
False
C:\bootmgr.SKYSTARS 374.80 KB MD5: c5cddf3652ae22ace7625163be8074c0
SHA1: ab71db4bd9303a422e6b478493773211ed82001c
SHA256: d58e892a6502b3a3e19d7d060eec069993e590e9130c216c64bee05ac54868e3
SSDeep: 6144:EhhZAZxQLTykkSFZSAZ8h/5NWqW5aFIf4VF6r9xO2uMu04q8s3JGfHJ+FbHq:EhhZeQLPjZ8fNWd5VZxOb0h8ECJuHq
False
C:\Boot\BOOTSTAT.DAT.SKYSTARS 64.01 KB MD5: 832c75d461a7ec0394ed9f50fb5f857e
SHA1: fa228c03785b5c22f4d4e6a7f791e2ec0b510d5a
SHA256: dc3452a69d5b22208aab3a33edc3ac2cc071df8dacbf1ffe6fddd78f4607304d
SSDeep: 12:BRYgGlRb7FR9F5eKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRD:0gg7FDt
False
C:\Boot\fi-FI\bootmgr.exe.mui.SKYSTARS 87.07 KB MD5: 43d7fabcb4dcff6365703c0ae1759b35
SHA1: 46a801bc2dcd9366d488434830fc82c8e2191099
SHA256: 174d9b045f0181df336ccdf61ecb12f7233b7af3eeee2d6f202955bde3c494f5
SSDeep: 768:m7rdOBS7psWCZ7FX3FuFeQ9FrMNBdmsouR36yxw9dlpPVYMRYeKYmpqVWWJw:U6PZ7FW3MN6s5yVbztmoVWN
False
C:\Boot\it-IT\bootmgr.exe.mui.SKYSTARS 88.59 KB MD5: f33ec74f3ce8303b84d8214d92de9077
SHA1: 43992c9ecf62dd45529fc8bc56b5fa40c6373223
SHA256: a86212294f6d729263ed0ebfa9dc581198a98a528f06609a230cbfb2b09af1ff
SSDeep: 768:aX9fbp6ibH98i43FmuzlwkLa3Fbm3FS4fdq5TwFF+6x4Ly+WNUN7wSINhPyb2EoK:O9fbp6mHblJ4s2UyY78Od+K
False
C:\Boot\nl-NL\bootmgr.exe.mui.SKYSTARS 88.59 KB MD5: e4b4db92f76a9980ba5173c642a2cffc
SHA1: 65a608dd28846ff7617aa25f66875637d8962d76
SHA256: 937a02801ed4c5611530f0481e292fde988162b8d921925d74b923109614b3fd
SSDeep: 768:xKwa9PveQPvsbu+LeUfsJm3Fp6cK3FpLirjmY/ln4Pp1QRCviYFZTrywY/Pygjco:0wkPvpXj+fyUL/4OOFZ3yNod+d
False
C:\Boot\ru-RU\bootmgr.exe.mui.SKYSTARS 88.09 KB MD5: 42bc3ddce24185883ba0282a99a9c5aa
SHA1: 16d4a4f380f41555810bb35e979da6fbba3f8b14
SHA256: 79e9b177e8425f520f86cc905642dafbef2d05a3e0b3a900ba978e5a07cb198f
SSDeep: 768:UllPlQCVbV8R28RLoy003FB+y71w53FBQtMiL/Y6XEUFNBaKiLOhjyf6NDEwy1vc:GLb87+yGNo3p/hO7M8vyd+E
False
C:\Boot\zh-CN\bootmgr.exe.mui.SKYSTARS 69.07 KB MD5: 24d19dafdcb5490a2cddbce805158af2
SHA1: ef273614e8b14feac1306e77f441a45ec3055c5d
SHA256: 171231f0074e5c55c823fb5326e6163510579f523ec1d1ac09c7a4392c91ff1e
SSDeep: 1536:r8LEbpeCtOudT21TkZr1T4UeLsBTznXuItmoVW+IB:r8aeCtHdT21TIreNLsBTznXuI4+IB
False
C:\Boot\zh-TW\bootmgr.exe.mui.SKYSTARS 68.57 KB MD5: c63c086ff737d7595fc9f0993c6259c8
SHA1: 65f9260d4465b5e46cb83cdc88c7f00ae8c19065
SHA256: 00125db3a0cd422027d245c1c9edc0518d677e0be6482da054de1dda7fc7356d
SSDeep: 1536:L8EUUTOZNddJlbRJkGSpnELNgF5BCdtmoVWSd:L8LUTOZNdfJMTdELNgF5BCd4Sd
False
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS 2.25 KB MD5: 2728153b8b682e73cfc6c2a71ba0ca64
SHA1: 52f478a1ed81abb60c71859e98be0d1206913662
SHA256: af7f6af4287003fe347f04d2f28c83b26546c1b07f5eb585c955b54b722ca76b
SSDeep: 48:pzlkJKVsKlmWHQi1gxO/5rcxHlvfsSDHbwXTW+v5jvs7pxBvE:hUitRH311/5r21URXTW+v5jsjc
False
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS 1.58 KB MD5: 5d3de6dde9d60abb6d89ce1558bfbfde
SHA1: bb1317ea55feca9674367059ac300def64e43ec6
SHA256: a26e800f10d985d0c337a4a9d644f3dc1af2b4c8349bad3f43ad7b88de43fca0
SSDeep: 48:xzvuCHCHQWH53aHNu5POKwT1Xbdmc4Vr1E:5vdHCHzatuJwT1rdmcqrO
False
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS 2.38 KB MD5: be58b896178ccce8a06d142c8fe2dd12
SHA1: dbc2e0f289b903504103b3b5bb953e35ddc9812d
SHA256: c9be93472199b711f08b8686059faa4c029165c141f6cd0be51554725ad04a19
SSDeep: 48:9z0FshTqPxgWTPpXD3FRPZ1jhAxHIkBzdi8RCQDqTOtE:lFTObTPtDZ1NinBzdLvxW
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\-MKqyxYjc5JRno0_.xlsx.SKYSTARS 80.67 KB MD5: 884da9be89508297fe66137b41e990bd
SHA1: c0554d0db9d097509e149a10bf5d29e97d704161
SHA256: ab9b5953eff38eed259e4fe4739e023b88f8fe064b59578460b982c0d916f7a9
SSDeep: 1536:tTSR8d9n+x+Y4s5ZAGDjJXzAdneMI7hXw81VVMnQCU5oRl1d1Au3lulJo8eFF42V:hxEHF5MQMI7hXwSMYWlaEb8eFC2hb4a
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\4su2oko3I.odp.SKYSTARS 31.22 KB MD5: 79bf71f320d7a7f3eb8711049f087a7a
SHA1: c52add05366b33f812ef664d13299840fe28ba22
SHA256: 57a96f583def188dd01084e30aa7f41b7f6ad2cb7610b5e284830acd402b59c4
SSDeep: 768:WXRp42whXgRtqy4fnD2CbKAoqzv2SyUTblrhpWS46OP:MRpohwqymKAD2c5rhsS3OP
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\76hRSKD790-L.pptx.SKYSTARS 14.08 KB MD5: be79e03ddcb4c53c919bc211e59f373c
SHA1: ed3759a4c52a3e66ec30e79fa6ca578249729ed1
SHA256: 60f985199bd7dabb514b2de3ab18eb2c1bfa9d7af5cdd10fe8e9af9f251cee0f
SSDeep: 384:ofL5fxlbs46CKiyNPtXTmHCGxug1yOkMqM6GGsdwFB0LA:ofLh+CByNPtXTiuWzkMLGsScLA
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\9Vfajx59Z9Z5.docx.SKYSTARS 74.72 KB MD5: 29b3d36f41bc5cd7eac574716671afaa
SHA1: c8b29424c6192bab9cb699ae08eb95afadd29154
SHA256: 54b07f8dc10d9272582df8d91aae23364acaa30e794851d2889ccd5f49bd5929
SSDeep: 1536:KKBkK1HDlPdsh35zzdiJNJjtvzl17J26pS1JYfSG8QNDdPZJ8:KKNJ1G35zIJTtvrJ2+S1CJ5hPZ6
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\aajrkz KC.doc.SKYSTARS 17.05 KB MD5: 1df5b4492ebeaee781c96303d322db91
SHA1: 01c9ca09406c4578580aef4cc405cad2d5b2bf4f
SHA256: b4a29c1e2f6a4d2795641bc4a00f5bd43a9f3a781adf2a86a5671a20fbbe5e1c
SSDeep: 384:mt6wzx8cWvXg0V9pWEaF8E9jAwzv5wEsqwmsCjDrLqxUIliA:m4exCfHHpWEW9McBdsqlvrJA
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\axiblyMnDJq6wybsV.docx.SKYSTARS 82.11 KB MD5: 16961b9c258b6f4a4949fc41b2d3d19f
SHA1: 92dafdb2dcb58dc3321076452c35b57e2b3d176c
SHA256: 9943ea1aebc4126ffb806a05faf7cc5febb9aebfb226f28175853a6c6adf04e5
SSDeep: 1536:kpfCsB9wOykt1GYsjfQx5jyyrsIwGi/Y6jkD9DKkO3KQ7IH8LaRan2SNscQ:kpf/wOL1GYuQOgsI6/Yuki4/SN2
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\BEthdv.xlsx.SKYSTARS 9.55 KB MD5: 38a387d9c7f566fb893420a1fcb90b7e
SHA1: 9ff432585de9b3282b97e7e37cebff0f9ab114fd
SHA256: 4391dcd2563f40ac31c65457482751a336ba27a49560d7f783723f0aef490b2c
SSDeep: 192:APWwGq8hFbNryGT2q1OLnlCsI5UK8lvQ6B7GxJpxJrgY8oms:APDD8hFbVyBgRRhv6BU1Hvms
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\desktop.ini.SKYSTARS 408 bytes MD5: f6c40fb870c09b1e9cb3400a93149659
SHA1: 7e189faf2deb342732f87684804cc9532a913b33
SHA256: 26d89e56e9a91e31f8485e5cac647956e422200c4e2e74eb8580ed52b82b30b4
SSDeep: 12:XSoHZpmrYkhYI5GOthhp0kZaeTryUwVn1t1t0r6q2SVr6:CfNhYI5GONzIKryUAn1tu6Gu
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\E5dSTIR0F62ceIRi.xlsx.SKYSTARS 52.30 KB MD5: 84cc75833457cbe2a8b803c04bac1a1a
SHA1: 179ffc60a96b999685efc13dd2819a547740729d
SHA256: 1c6654969067c2e5f9ba5f77b3c66d8ed850d7436fc0f5edfa2d7ae6467a1c83
SSDeep: 1536:PZIxVC/NadXsY55YsuO0TuVQ7eSm9C7xDU59bu:B0VC/NssiYBuVQ7eMx4Xu
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\eDeJvIUF8LXYojXe.xls.SKYSTARS 27.03 KB MD5: 5fd1f01e2a791bc569844dd2b48840e6
SHA1: d78a6d0126304d060d5837222a49a793df133f50
SHA256: f7d356016c72dc69cddd8f9217658c0ec4d0e466568e3123bc2557deb10ab020
SSDeep: 768:X7vbQPdbjDe+qswTmI1jBQ2E0SxrWfXPMzy:X7biHe+g6Is2Enwvke
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\k8AKeCkuzc4HIIi.xlsx.SKYSTARS 59.20 KB MD5: fa958936afc4b05cb1ded80ddcb59d0b
SHA1: 38b27accddc27ea4e30615ef496bf1a181d51f7b
SHA256: 7c39fdcbd89b5ed802fe75bfafb2e86e8cae195e4eadfefa810ff94443fc1528
SSDeep: 1536:oXr/vW3XeuknTanzpGre9SYJRxQCkLJFxs5E:yG3XennTazpMY1xQxLJFxsm
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\KczBX1JhveWm.xlsx.SKYSTARS 47.48 KB MD5: 90e436760d7afb72a2b63cf018922570
SHA1: 82e66d506ba3396e0261fb250260b3f66b33dd9b
SHA256: 1d8ce1492f895295e08136521ab84fd8f29c99b9c03687c93c53e5242de6a053
SSDeep: 768:Asd6xKpfd3TLkLPt5PTMI7ifpEy6Z999nyvZde4ibB/htvS3+JQk+SA:v6xMOzYIC1EnyBiB/LW+J3+z
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\OXwvMzo7VU4DQ.ods.SKYSTARS 1.12 KB MD5: 5ed6e013efbd093574977addacf67407
SHA1: 05d5637683a3bd70fc0fe680f99c40609a81b23d
SHA256: a08e0693c8e8394909a217e38bbe45eb67ef6e469f5bd2d0b9b2d92d11aca02c
SSDeep: 24:rOx2ubRdm0CQJh3vDbNM1Ex4pi1nsgF+WlfUqpQGi+BJ4liRmvLxk:KwIdrC0v3NM1Ex4pi1nsgcWlfgGiAJAy
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\PyIsTigOF966Nu_K.csv.SKYSTARS 10.32 KB MD5: 248ce8f7caa9b01bbd36a4e3a2873e51
SHA1: 4660625b0a959c271a210cce68fe717b902832fe
SHA256: bed9f7244aadcc352ce9409416fcbff074704d351eba581cd488fc01b88107d1
SSDeep: 192:YLtbt/3Dlq4mqmGoIdI4WMX+ZIRU8NOia/vCYLCFV8y2+D3kHH82I:WBBTlqbqmqI4l+CqmBYm99kHHm
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\rF_ok6UvUojb.xlsx.SKYSTARS 72.82 KB MD5: 726c7ccf89d26091f3b450afdc076d58
SHA1: 4ab084cd017842d4a4f6cc55fdfb9cee7b14299f
SHA256: fa62f7e2da56070c4e3d5dc8f07b771e0c83bb9cf99d2c22c1119eea2b67b32e
SSDeep: 1536:v1ZLfDscmh/e5dn6B3o12STvct9BKegtrsgugWDWay4Vqd:3L4lh/e5VKo1X7clKnZWq14Yd
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\RIHbvM5AACGsvn9b3.docx.SKYSTARS 74.02 KB MD5: 48bb449156bf5710f30014ba3407bf99
SHA1: 88938e3f76289d5a0f3ef792dfaade59ef450abd
SHA256: 3c4fa8276e4aaf7aab5b9d100a43633ea358d0b4107e15a06b16bc67ea72b4da
SSDeep: 1536:UcZDaxdh/ZOcIC80YCq7vtInYdiTtSmOzwDNhSofKmpOfoX7Vw:Uc5axX/6C8XCqoY6tS6ockoZw
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\ThsCTAWGPdf6ip5.pptx.SKYSTARS 10.70 KB MD5: d85ec6f284fe4d6b8c8c090bc6bab2b0
SHA1: b97457d38785d7a11b632308dc1c53beb596e117
SHA256: c25f0f7902c51fa640a969f03c6a88fd388f8ac210a8eb609b6d9708ca95621f
SSDeep: 192:0/IWwfalYAHEC4lLv5ndzMdkG+W/JUFyCs76JhA5rabAhRt88H/0pEGK2Tskq2Wc:GIWIaqqE3lLv5dzLYJPehZbAhDH/0pE+
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\wt3HXsmzIUggPP_.docx.SKYSTARS 12.84 KB MD5: a19b446a8eaff7f3f140519b1af45578
SHA1: 88931b57b6a74f5402fd0d7098558ed3a576680f
SHA256: 34bdf3135e937c80fdcb230979039199641a0e9c00a127353877964489019739
SSDeep: 384:3P4rwsUowTpRhmY/995XGfEK92KLxitMSzgZpy:3grPAZma95SEK92WYz/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\1SVv3QXnp1AD4QB.doc.SKYSTARS 49.37 KB MD5: b380daf8525882ca15ef9219f29dceca
SHA1: 8bcb59c20823f2c3c273378c8b9dbd4b6a792474
SHA256: 873a73671d561245f83e6d39eda3e80c02406a6968795861877ea14d4f2e28dd
SSDeep: 768:GyYuDS+Xm4s1fV/cxkB3r6y12bSsXdiu78l0+FwPdpVSmye9M669f/88ZmESye6I:uuPK/cxkt6yUpN2wFSmyEMbCOEuI
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\7GRcqO09RMPUte99-j.docx.SKYSTARS 33.05 KB MD5: c48938e4cd937ad343ec04fd706daef6
SHA1: d4083b635540b6eedeac0af339d9952583ddfad6
SHA256: 655b9d7381067caea94cc3e3a2f58d51550dd9e6a6fdcb22fad95bd5412d724b
SSDeep: 768:T4Aem08y8chcRYUgrDiq0vOPfWQKvir/EHuY8AryaSQprjYA:TNemXynhcRYUgrDZ0kfhvArLrjd
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\hap-mdvd.xls.SKYSTARS 68.39 KB MD5: 649e9fe3831e61282e0435ee2abc0b71
SHA1: 931abc6349ce476b49b4864726c5aa51030c2f05
SHA256: b6e065c9218b707e87ad4f725c7450275a164cbde121be402734fa6c79703a80
SSDeep: 1536:6mEQiIk2ikxh5aLJDiprigbiRj/amG+79oc7ZibP4yjEpkO4:6ml5EpSiRjyd2ocqP5t
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\p2v55AVj.ppt.SKYSTARS 12.24 KB MD5: 84a4bd3d63fd2c53b7d370cd0283aed9
SHA1: 4667e8be36c97412cf02066f8353b4b121de2cb2
SHA256: 3dfe21a3724ebfa19f471cf7b33a783aaea3359743a4bb826ca10d03c4bdb453
SSDeep: 192:EcF4ppNNNR7c7U0dF/YB6+RbzAE1BOwASNPyizwSh/slL9ccSNKvulYyzKfksQkf:h4pp30dqB6+FRDO+/zbklRccSoBksi4r
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\Rj1_r3.docx.SKYSTARS 31.15 KB MD5: 899f48e233317b7f9a2b799efe533cc6
SHA1: 62ce6fbd95a9001ffdae536503c89c883cf19277
SHA256: 55a700df3ec02bf299758635a2259ba07229f8f12a9015f0059f3303124063d9
SSDeep: 768:xsekiW7vq0jspjc1YUud4kdVjPRO67pulneC3rQiUnxvdNe:xsninwsX/d/dxfulneyrQxre
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\sLz-Qn.pps.SKYSTARS 50.53 KB MD5: ee0d704c1f69bef4e75ce75755381025
SHA1: 73695f566cd2e47078ea3f2ae43ff27ca7fffb7d
SHA256: 87de7a832ec6ee783b474dfb0e4096a9a6036d139e981086c0d54a85d39bbb7f
SSDeep: 1536:2O2qIoQcg4OUwRtXIB1/g38olB+dRr/QNHNh1O:2O7vQcxwHXu/g3GdJIh1O
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\ZwQr6.pdf.SKYSTARS 85.88 KB MD5: d96b4fec77f20f460a14ed1e680c2e4e
SHA1: 4f89ff7c730274b2c07819ec00141cbd1235ccfa
SHA256: e1d66eefe3aca3a6043ebc0edc4311bf1c3445c00505943645a3ac8d43b3f2bb
SSDeep: 1536:bXZTTShanq1P6M+Mif5uxwX2ft6kLLUBHCc+lLkDE2P3BfJuuFAfuVEwtP+uBzv:Awnq1P6QyGftlLLUBHolwwa3BLIwtPrj
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\ah1cMF2z.rtf.SKYSTARS 77.13 KB MD5: fd9137c97764e8ecf89e475e0280c305
SHA1: 71acab9b18725a952ef8c61e6d706a8f650a3795
SHA256: 7cda1360b44e3338a2a94baa34597bc0a4454242f60210c8d7282f9fb88104ee
SSDeep: 1536:Y5FP8vxETFpDEwN3JMFC60L1yjnsmBRTvzUY4DHMO3MVMD+JQe0dqkV:YYaN9xqCxjGRP0YOiMuQeGd
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YBis7kkv5pT8UqO.odt.SKYSTARS 71.68 KB MD5: ccb8919a05af4ef402a3a0b07eff7505
SHA1: b5ebb0353e71574df7f032f3f2c8edd45e0be327
SHA256: 2edb52b1781b3b3269c02e96a91abfdccbebb46519193e6187a0313dbdab2dbf
SSDeep: 1536:qDjJ/BF/AGGfdsDum4pIkRdcQCjlXXikrvfdx0/YIWc/ERqT:qZ/B1AGGamIWcQylXhHd/IJyqT
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YitNJanVQcH2FO.odt.SKYSTARS 72.49 KB MD5: 477e4baf246403b8f19fa1d32102ea26
SHA1: 5676a172816db90fe27b5e4ff5a2f82d1760a27f
SHA256: c50eaed7ea7bf439e09636e28501183b53a3098031c7ea7e9d0177341e775e40
SSDeep: 1536:6VuNhz2TjulUPkflOvjWcDx20kACnR3RJZBLiQ:V92TqtUWcDvkACR7ZBWQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\_private\folder.ico.SKYSTARS 29.23 KB MD5: 5589c01dbe92f84721ab96b3aa449a86
SHA1: 53bb9a64d3171e2b6ff8ed1a05eea4226d312148
SHA256: 69776e4950029310aaa9a472dea544cb4c70fc9ac2f90a1ef870e63094d44d2e
SSDeep: 768:WES5rXwPD0gxrojyX4pum1d9SzLIIWx7qtBe:WES5LwvpayX4pum1D+L0We
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\Outlook Files\voeimd@djhreuu.uhd.pst.SKYSTARS 265.01 KB MD5: a178a938314632b08204218b97f016b5
SHA1: 7e6951ccdc2b62de03b469df1c098a92a34c9206
SHA256: d617933a4e1844a129dbb88d399ff165a7a9c6f86e2998bb7a3e87c59d3ccb74
SSDeep: 1536:QhbVK+aAIRXss5EjvDNrtZDqmkfWdlXwAi9+0GjIo7OQSUO/Wg:eK+JIRbWvNrtxqmqWXwAi9+XjIo0/H
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ky0CNsBAgguhn.pptx.SKYSTARS 38.98 KB MD5: 820161f72f4631883df4f2acac5655e4
SHA1: 4a8859d99235c7806075a129259f21facb02edaf
SHA256: 07e8f2cae4bff75d6fad63d250f58821a6cda99645d780e01be84fb1e65a6ba6
SSDeep: 768:vAXgdkMkRhLCVBp3FWpLgiaEGWYYvWHlKPu4evuFo3wzei16OCPm:oXgdkMkRhWXp3UsQ3vXPu4yu63wvC+
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\w7j NA8Fc2Fqu.odt.SKYSTARS 87.25 KB MD5: 4dbf3807a644ad0041a287e2e294733f
SHA1: 084fed1747ebe59a9d6352272f95df7322c71f16
SHA256: f4f47d711b2d0b744c8b4a901e17ca8f04a8b200d60efb457daeb0cef1d9be7f
SSDeep: 1536:9acG/KvufYADHxHO0zC/lPnD/yGLnbehpcx9AGrGDuZID7d6g7bqSAGoTJMiCTDZ:ocGyvufP5zC/lPD/zehq9x6DVL2dMDT1
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\-uMN xl8k6N90pMRQ.mp3.SKYSTARS 93.43 KB MD5: 1d6144731d3a7bdc60bcf3f11b4a5dbd
SHA1: 753c90f33fa66db9ea41028758a5053858630d28
SHA256: e96c1ffdd7dd6f6bbbd86c2b38eaf603376899a134b5a99a6acda0e685196ac9
SSDeep: 1536:y61Tni4AvOkbv7IoAlZuRPzIBD6HvgXO6ECi6FDVR9M4Jm6N7voRAqXpKxds+Kx3:yufojnALuxeD6Pt6vFJbn1N7oRBkdFK1
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\1.exe.SKYSTARS 168.01 KB MD5: 15f189fa2b7c5fee97bccdc79afb233f
SHA1: 8e0a81e2c1ef6857071c8008879849146d14b6a6
SHA256: fd3fd274ec5b0f0c7e515a805a2e2c6fcb4487f7a556ae43abd7154202674e21
SSDeep: 3072:QWNsbNjldjNvEiXsRF8DAZSISfax2YOAnEvD:QtNj3cDWAZvSCxer
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\2LoErBDNL.flv.SKYSTARS 6.02 KB MD5: b5b4fa79d1dcf0891991514b81f79942
SHA1: 0b49fd004377423536b4812cf98f6406fad7f050
SHA256: eca1849ae5daa84d7ad43a70d4f880eacf69ecbedabf9c5b750b709e177dfa47
SSDeep: 192:Jn9e5edC9Vx5IQO4IC+/SafBpGHo5/H1vK8HYmBa090:JnA+C9Vx5IQOF1PfBSofC8HE0O
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\6GPQLrb9z.png.SKYSTARS 9.90 KB MD5: 7de74f6a3b892a505598d98b2facff8a
SHA1: 620904ede35ce764b887a4ffe061bed4f5a52a00
SHA256: acd6315a3dab86672b684d2a4f9471cf50486bf290cfa0c151afc68f5e0c8845
SSDeep: 192:cAnchnkkzSX7ukzPNCNfB+f07ka8942k0NeavGGiyXz9Ww8mhYqL5c:cKJSO7ukzPNCNfBePNrNVnXzSm5c
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9H9uiT4RQS.bmp.SKYSTARS 53.83 KB MD5: 1574a5b783f97f3d9a24a07887c5cf0d
SHA1: ac88d79cd65646ac96284da042197b5779c5d193
SHA256: 6f8f935ac4657a7822ebcb1589c3b7fc64669ef23d6d0f6a3a3b35c14863ce88
SSDeep: 768:yul5MIrjMJ2WED5TBWl0F3Vaws1aIszvPMEoPK6v7Mz8sakz7n+He1UeYpEhvCWR:yodgJATJVaBsIr3v7MoxkPKwhq/FV3gt
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9IYI59Ta.jpg.SKYSTARS 47.30 KB MD5: 5560494694707d7af12fafdff33a3086
SHA1: 569fee3f75cc46464b0ef59d6916389b05e8cd58
SHA256: 74fa9525e3f62af70c0535090bbfadc63f8737e311f11ead707aaa40dad2e01b
SSDeep: 768:LxUp6JzUtIOo6TkYHaC+mfVr9t5RgpFkpb1TsqT6AhTVma23Tg/AzXteGeVt2RnO:LqAgIOo6TXPr19bCnGhIqT7hm53FzXtU
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\Auw4sdsTepKYeu356.ppt.SKYSTARS 98.23 KB MD5: 7194a681102e53cc675fadbf319d7cb6
SHA1: b9e1c0ba66942005340f58c3f11deecbbe09c97e
SHA256: cb09f464cd639cebc59cf142a08506183d8fda0d1d90d0a957f7bad354fdcf11
SSDeep: 1536:VP84nS5PZKRUKDouGmLDw/6vifP0sIR8bQzKSezr9jh3EXDMDCRJTHNnhCqn8Yts:VtnQBVe1LDw/x0sIiPJF+R7hCqj9Q
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cV435fL13v.jpg.SKYSTARS 24.13 KB MD5: 6848b939a3e1421063b2565b445f8085
SHA1: 30aba843784ddf6c80d10ef3509b416f0f88c85e
SHA256: 81b767c4c90fde7766a1dfbded0c5097dbd6b7bb47203b5cf4d4097e334467da
SSDeep: 768:mvABPxT9uMrx7h2hXZTUpnAaC1UzPnbZAwSk:mor9uM97hOXZIpnC18bZ9Sk
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cyqPND.wav.SKYSTARS 47.54 KB MD5: 33138d770ff2a1c20c9ed72aafb1331a
SHA1: 316ef9824745e2ceb6f64517bf41837edac54b61
SHA256: 3b810b85e4cc0c3ab51e289b7b1bb5a96ee0da59fe4721d1f942aebc796277f7
SSDeep: 768:UwsFCSz92sw1Ah70b7JOQGV7rWy49Zv9GOSCDPLSWFxKuSkHmFaR5kUHH:a1R2s8M70vJGVCp9Zv9GwDPxKuugR1H
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\GwN9jYVw.bmp.SKYSTARS 57.09 KB MD5: 127ec073a4457c00b1d441b4cd191035
SHA1: f98db26181dcc06af013ef46035272d27684bc1c
SHA256: 10bd2461158404e043479232ebf8514f9e29f8bbab73e6d408a6fca3979b2469
SSDeep: 1536:XqdG+35+zX1zMa2xeQ9LfYsHUI7G7GfosFIdgO6j:6dG+3s1zMp97jS7Gf7F3j
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IL_OG8.avi.SKYSTARS 21.35 KB MD5: b434ca7aef0a0c58e01cc667159f37ff
SHA1: 97700988296741db218cfebf46ced3ea5b298860
SHA256: f74bc3bddeb4751b1337736f84e17a956fa5c8b15544406ece2b6a98d129f87c
SSDeep: 384:ROSJ2rYK+JgWFX5i6orfweq/E/3CilWE4BQN6KEbvz4i64vpQl1CEjR:SN+JgWdI6uweQENlX4SNhi69l1CE
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\L4u6PoFiCYyO.png.SKYSTARS 65.56 KB MD5: 8304710e0e0d0d380a5e1d8f21f16b3f
SHA1: 4ad181edb0b7f8b1b4a8f8f282adf00f3e266788
SHA256: de9aade5f6f06c06f917b3d92a492a9aafeb509164197be81c55cd3492cc1b53
SSDeep: 1536:IZ8STNCdW+GkhL1WgBXX56PDRubTuT7gCfue+9RUZzVNNahgOkoX:pq6C21XoPDAbGgvUZz8hgO1
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\LbU4hyLoWMMWQlqFMMj.m4a.SKYSTARS 95.36 KB MD5: 6cf5afd9ae118ff51e58d09e6359e6d8
SHA1: ad9f75783434cd279b666c6b661175b3a2f1b85b
SHA256: 689574d37f48e286a1bd46c0b4b5dd6458a9e84df0f8c84c182d578828707c32
SSDeep: 1536:CeEBrUiZJ14Bm6p7GhIP64081b4v8IuncABSOIC+T/fTes/c2TCkodeO8n46gmU6:CeEN34RGGzT1b4vJ0fSOUfTvcWCVQhgY
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\NJ0nkkjXO-jifKg04a.wav.SKYSTARS 66.07 KB MD5: f213fb8b331e8cc92dddbbf6ac8e4fab
SHA1: bb8d46002696f25493ca4cb2e67bf99b3e36fbcd
SHA256: aa1c099c38887d140ce4e268b04bd0488090be21ff7c9bdddb8aae58776d0286
SSDeep: 1536:+KnSPKb3iGxaHrh1IdmQ5+Hf1mv+zBGlhJKzN+bCNSAlx:yPKuGeI2kv+NGZKzQbyhL
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\PQjPiQ-k5UaAunXcyp.jpg.SKYSTARS 97.22 KB MD5: ad22d1c220a9b623f625f667368ac526
SHA1: 2bc97ee93d7f8c37cfd30a292559d0f3a0b079ff
SHA256: dc259d930103e43745cb03fd538fd0ee4d5e5ab759a9c98d0f297df6bd4171ff
SSDeep: 3072:uYB3cC2FPsEwa9BT/UPYzTRhUwF1RsYO3:ugcCE99t/TRpF1Rsr3
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\QpTBIG9 owV873iL.wav.SKYSTARS 22.87 KB MD5: f6a8c7337c8cd7a58e3b294b64d7a619
SHA1: 019dbd5a106893007800922dc91e78bade174239
SHA256: d1c4cf1be2d90bcf2eb443f7c5ac00642d0cadf4c6979d47bb21488885e5e898
SSDeep: 384:rLXuLiGgzhen8VJPYDsiY8YRhqKN586c2s5Lg8Zja52KeFaT99AWB7g6/IqJ8qoV:GuGd8VJPYDwdHq8BHMF2t3p07qJ8F+Up
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\VVWQOJivCiw.ots.SKYSTARS 1.94 KB MD5: 53175ba54f6429b73dd4bf4c576ab106
SHA1: c081ea109332e0d5c8d6c92389aa34d1a8298b0e
SHA256: 590747f97dfb1d0ddc5cf3ab3d9ee49706ddd8a57a4f07f04960fe3b85652d91
SSDeep: 48:SHm7vIg+D5/OBUHurLKgwCKsXOn8h0e4NhlMvAtEht:Wg+/5CPe8h0egg
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w RjCfDLyWOGuuuBV9.wav.SKYSTARS 98.87 KB MD5: 03401d7e0356cef874c8c2fdd72499a6
SHA1: f79f1dc3d5ad0aa6416cddc19799b05b0eae2b9e
SHA256: 9854dc8e2fc4fa46f2a4d48c75278f706d5ec683694829dcb9dcb7d09bc2a0ae
SSDeep: 1536:LDBHaR8pCyWAlrpy6DLGBfc1HhJQs+UQIA43FYzU95smTu0eIGaiwR7611kVwQvq:N08vWAlrP2+12sAh2s8iICwlY8AHayZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YMN7La I9lBJZO.m4a.SKYSTARS 60.25 KB MD5: 6d2332677c234687bcf4c7fcfdf3bc8c
SHA1: fd81187567a2af2cb2b725971fe70873766477bf
SHA256: 652c79a473e6bd9415c43e798f8ece9cbcfd279605b00a012c621b99e4b2bca7
SSDeep: 1536:bNaA5g2qAqQ+sGBk61ZKf08yjskLZymWSvx/ZSR:bNaH297KkcUf0hLMm1xe
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YqrvAc.rtf.SKYSTARS 55.38 KB MD5: 8c125f0d8819877d2305145559ed2699
SHA1: a8ebd4cb2319b37688ea12af9920c84ce4834b8d
SHA256: c7f83d7751fedf220445aec761a64c1e13e542474645570c6d11d166d5a07886
SSDeep: 1536:K9MZpiuJijQJuPsE8lKnkwkvUlC225BUiVrGSXjXxOP7W:1mjQJ+Vx+Ul9KVVr8Pq
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\DB4Pt MG-kRMN5PaImf6.png.SKYSTARS 19.62 KB MD5: c6f5c01b3a932b549e6946ea24395d1c
SHA1: abc736af7d19829d15b641493aff0b1bc2472ada
SHA256: e7a9f78fb14274bfe73104286b687b289de1544d093dfcb6ff4e225870abf51f
SSDeep: 384:MjXnl4d0QXB+Nhs7XvG1BGR7iK7GQe5ot8re4rUkGJIk5kd+iki/+:MjXuJx+oXmGBJ7Gz55frUfIUk0T
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\SS_0.doc.SKYSTARS 39.88 KB MD5: 927c388fc86d955d9204d252b283020a
SHA1: 738f9f48039e50ecb82f4a91526d8a08e41cdf5b
SHA256: 8c633019097dac3a15936795d7e1d362454beb2b63a3254737911083d292efbc
SSDeep: 768:8P6+oALPH3tSpvxIN3lup55Mc6Ihfr6toDfXLPtjPVtGGxVsyzMK1iK:8P6+vPH3tqvxklup55Mc6Ih2toDPxjtL
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\xzSJ7.doc.SKYSTARS 77.70 KB MD5: e1a411a0453f4a8c28be42ae142094bb
SHA1: 3a9cdf50d819b8707e6227ba4f79283c01887c38
SHA256: 0ddfeb8e9c8c87667934926799e6d6e4f6d3530f003e012b9d9c4217b98a783d
SSDeep: 1536:IBtdDV+cMmngsGAWKfgv/4pUN4IpmGKneuF5WvEI3lSjuvnMhGBml:I/ZjGAWKfsfNNKnGvEI3lSjUnUGBW
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\YuGi.wav.SKYSTARS 46.37 KB MD5: 31ae7d6a01c113b0e97ffe0269bde4fa
SHA1: 5fa53762a2cd404091715fdbefde488e66aa81ee
SHA256: 8736e059f807cd576239d9299f201bb37e136e3385f02d39d1b6ba335a4e95a5
SSDeep: 768:GUULcky8hS0aHxCv3tpe9TNrSteD6UX6p6AqjOThlROob1yWGXkoeCaGUgMYYs:bkd/xv3ne9TNhRXE6AjThPOoT2feGUqv
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\0R8VZmxctZ1GX1QI5rL.jpg.SKYSTARS 23.05 KB MD5: 4d02cda8ba75ee32f42aa6fc7dbe29e7
SHA1: ec2980d733bfbfda297fb69941ce4a544cf74e5c
SHA256: 5438393dc26e2ab1745c702d58af65699d58afbcd5a86c4268761f764e4b17aa
SSDeep: 384:IKJCDviaeuFv76WwuSt/EDFZC3rH3rm58O3CVFD1GSCR/:SZ76WwuStcDFZC3rH3rm5J0FhW/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\SBBTIRRJYRwtk_6hA.swf.SKYSTARS 54.45 KB MD5: 2dfd81961bb35982fe99d45b48917903
SHA1: 53b2e19586e63e5e2b36f1c418ed6d5637d4dd55
SHA256: 5e465ff4c9a97a4ce72fa9133e009169a5380dd019776f7cb93fe9be72aa88b3
SSDeep: 1536:8g1YVFXpinbpA4aQemM86KgdYgN9x3MtHM:8CYV5pijyOxVgN9x3oM
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\T4nvE0-PZS_fB.jpg.SKYSTARS 63.17 KB MD5: e6824f04f3b4ae3382d2e731c8ba4d43
SHA1: a963824a218551984a1af39a82fb053d77623ab1
SHA256: f5f12f3bd782dd7202e7012aa0420c935aeca1d274e2974a7aafb6203ef4ec91
SSDeep: 1536:HAR6fjl46KezQd0lniAqXTLQxB081lCbVFLK1RYatyWd+:VO2Qd9X3QxB08ubVFLK1RYat6
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\siXuQ8hvAO01ox4.csv.SKYSTARS 17.91 KB MD5: 6bf70e2fe9872f4da7bf3a98c9408b11
SHA1: 62341f1a821ae51d9eda417f2d0af1c14f990b2e
SHA256: 3e645ca921fe4ae34cde463f570139981074df2d7a339d61c57fb5ec6d59017c
SSDeep: 384:IXEbKL7e5aJEZTd1xImW4esYMSGHK6ChCgWRYrYOJAsp9Dz:JbsE+ElS4BYMsrQBMD/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\TDPtbCn5uV9.png.SKYSTARS 2.39 KB MD5: cc07dfb1cfd0f618bcc1a00d467c5e82
SHA1: fab4773aa6c64bdf9252d8dcd20c44d4ff116c45
SHA256: 4817381270219169eb32f1be28b6486cf74c88e5ecc9a11c1d0970f239bd2fe7
SSDeep: 48:rdAf6r8AygJd4dLlpnZwPBZjN/Y2+af/OP/ICrv4Aszpfh376a9tYCk2:uCr8A2d+JZ1Y2+af/O3ICD4Xfh3z9tYO
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\C 8INbgLqg8.mkv.SKYSTARS 53.11 KB MD5: 4c8f698f636b0b1068c4550a23ced902
SHA1: 9a6f128b0c04939ddfa9b4399f9b00a44fe36448
SHA256: 0939d5fc6a96156dbc77c55659a814a4a458215c48fc44679f7c13b954d899dd
SSDeep: 1536:faCU7HUgfKwe3J4R6Oll1eMrrENMdvNysw5yw1ESgHzC:96fKz3J4oO1E8v0J5R1fS2
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\KcjGX0 W5p_j5 Xn.m4a.SKYSTARS 27.49 KB MD5: 5247025870cc746ed88b010ffd948979
SHA1: 83e76ff51e614eb2324fc3f647993a9eb9351123
SHA256: 0530b1b64e7c8943f83ca508d79b34cf3acdb9d35cdc46cfddebcf1ff9fc61d7
SSDeep: 768:/IUtV/PWo6aJBkECi7i+bmUGaiVg2FBuwDYVx96SDeP:/rtpPPkEz5xPkYVm
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\oP55.swf.SKYSTARS 50.89 KB MD5: 22f7e0cbe3d456fb17f7bae625064296
SHA1: fb95fe514ba464c1b7d8c842a1d4549b2200abc0
SHA256: 3fd5fb4dd8945ea401387efc31995c0c16293b68d99289e72342fe8b7c057f2d
SSDeep: 1536:TIV15CE8v39F6NPo2qlyFXPuCEGDJ0BAKQy0WweKX96PMi:Tw10vNsNPoVYYCEWJ0eKuX9mMi
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\POP8pfc9QmIhWOQhe.avi.SKYSTARS 80.95 KB MD5: 57118798852e2c81381a0a8f1fb1f630
SHA1: 9fa87f73bd125b0eacc1627033fd7467bf1fc851
SHA256: 9298226f62540b9cdf8fc5234171a3bcf43ced8ae8c05f22136144f3175a40ef
SSDeep: 1536:7fY58WFXSpNJsOpnd6zYPvGK/ZqVGSKHlmO+974e+Z5ixH/63qACOUqo1s:r1rNNH683GK/fSElgCh4xf63qACOo1s
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\-IJUXNcRg2PG0aCimvIX.m4a.SKYSTARS 16.96 KB MD5: 96fd3e3c0dcda6226500d14219628759
SHA1: 93403e4fafcb09c97c0cdd65f511357470cc6acd
SHA256: 67956a7f1605428a810de8dac21ad578630529defea09a0e321d9ae87d3830b7
SSDeep: 384:9b2X+U+48CrmFJe5yI7lHIxclvBmb2e7Mo:JE+zUis3hHQm5mb2uMo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\5-OIo.csv.SKYSTARS 78.77 KB MD5: 38935acccdc8726dd04947a54d9d826b
SHA1: b0b6e78f38a4bdfd3265f137a2b5daa403ac582d
SHA256: eaa82241dd57b4e6138fe3a400e4848b3c97ef9d36b6e3b79aea0d7921618882
SSDeep: 1536:wkTtwEGtwTC/xOwvS3Oeei/McvX/8zXXoxFtqCBSv9FvGxC30dCxUFUDI9JkpkD6:wkTtwlgCc3OPidXvqUSvrYC30dCxUkbV
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7fgzkGfed5cplNOCn.gif.SKYSTARS 15.59 KB MD5: 3347bf6538f58c97c2fcc60ad29fd15c
SHA1: 0d52e72876c8fd5c162a6a4a4091246646455eb1
SHA256: 40093154aae6bbe291d93e0389021d347f0e8b2680743abd6e039de6dccf061f
SSDeep: 384:xCfEoQeP/maBnhbK7vRQxedhQ1LqVhpC3R44/yX:xCnQeXmaBnhbCWxe4BqpqRZyX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\9rfr3g.ods.SKYSTARS 44.97 KB MD5: fa697665219db3333cd3e32495a49800
SHA1: 392a30b704394359a898f2d4abce276836b22bed
SHA256: b4872844906a331853b32ac60b54f349b17d4be451ec7415fff5d799578ae6a5
SSDeep: 768:C0MGc//swnH00GYUQ+SBKtrShia0EotK1TsXv2Uic/ymDdqWahVa:MH1GTQ+iKtrShirtK1TseUH/DktLa
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\b1Al6ru.mkv.SKYSTARS 39.16 KB MD5: d62de6ea8a1d5bba190c2a5d1d1af968
SHA1: e52831d4495d0fe602f7f9898d337f2894a563da
SHA256: 946046d200b6099dc4afd8b1b08b2b7314f41dbeb8fa55dfca67ee5decf2b3ab
SSDeep: 768:J2S0haERByZscwPbKBu4roTLgytyxL9gVyvDhf/dbmZY:J9OagcscEKBuLTLXyjgULhndbmZY
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\ETUq1TsefE.wav.SKYSTARS 28.21 KB MD5: 772d407b959e77150f832c3be8475eaf
SHA1: 08c4d095bfbd397a040cdd0ac70896b8d7aeae2f
SHA256: 5f7b19caf830dfee735a4a0a1add779e861e5306947f70eeca2157e6bec341fb
SSDeep: 384:s/v2iujxzDsyJk+sAXhWoie2hqazWbojbdXYPgQu9pcVq+AuECK+zaplKrM:PLRRJk+tso95aCabdXyuLEqmhzaplKrM
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\eYRSDHH9d.mp3.SKYSTARS 86.68 KB MD5: 2eeb22f0973e2bf5310277ce321e4009
SHA1: 3dd5beac42b557352746a42c373471b7fd14d7fa
SHA256: 625e0b1a08d44b832f2f2ceea3e1502d614c174212c9213e92902571a6a1ce1b
SSDeep: 1536:UsVpMoOrx6PmV1COho4KKFFlpwg/uV7ASxrA6gGdtjuOyQyMxSavJzWDc:Usva6PM1q4K2wgmTAfiuOnxS4zn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\fpkLEmTA.rtf.SKYSTARS 76.38 KB MD5: 36ad4f0d373fc182cda09e5263f9c431
SHA1: 285d1cd6af5913ff0fb24f78546ec05b68fbf316
SHA256: 1bc55f5a334c02974c0c5c44bff7dd510ee188b2b683a1c5d02476da6557f0dd
SSDeep: 1536:BYGVTCv6JF1/Lil6n2h2mq9QChQKlf8FqlJDIBQ54O6qD4sf7uIT:uro/zilcjKuvlaBQcq0iDT
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\HDB0GdLUiySD7s83WAzQ.pptx.SKYSTARS 8.52 KB MD5: 5f2d16436a8155f5b3b9e0fab824e8fb
SHA1: 26efa3f027d5e092a5dca697e339ed9b5973a99a
SHA256: 6f4d76825541f99b758f3df4990ca120a3c8390e9b66b05c6b4511e23bce97ec
SSDeep: 192:LPsO2NBRvfJaBj/ymHwA+bTMl+viBvGDMaDC7AvkOndFU3KE+Lx:7sjjRfJaBj6m5TBvywAvkGAaB
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\koSBvQEvpYLBX86IlR C.mp4.SKYSTARS 90.89 KB MD5: a85a4c68e2970ecb227fe2690ba9b0e6
SHA1: 13d6e280349f6d28dd4c554d1591327826c0af7f
SHA256: 3352efbd7056aecdb5d0019832a953f7086367d0c2c501810e962202d19ca488
SSDeep: 1536:O9Fk0D3oYrvvMnxzvLPzSWqImRVMOUrMkuhnBk92+FhqvXAYfzjiHmJUCLdESAS9:Ok0PvEnxfPWWVKWOyMkuh2EIYfzjuqUK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\K_ahl0R.swf.SKYSTARS 85.37 KB MD5: dac344c85f4b7109c6c3464668a31e8d
SHA1: f0ccdeacad9a0df1981ec9497a9b9f63da9aecf9
SHA256: 4ca250290c922b919aa7e7686e0747821870baaa4abe5ea9289a4fe7032d5e77
SSDeep: 1536:vh24tye5yHCTnMHtPH3tM/KE4jZWTLdbtN2xRHDolml1uTR7YPbjM5n6wA1LY4Td:A4D/TMZHdMyHj+fNOMlmbuTyC6/1LrDV
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\lE3JQhfZrFvsQUDm.pps.SKYSTARS 78.63 KB MD5: ae74d95084a766ad455aa381f9f9d1a7
SHA1: 631c7ebc41ed181db6e314cd43c533b9e99aeb6e
SHA256: 90728635c4888ace9ede7a23e0a83aae2b4358d31305bd0745b4c2edf438175e
SSDeep: 1536:O7GFXYS25SGaa7Y9XeTAT0fxZWMSQ3BZmDYEJi9BNkQwB3WnqRlAjkaaCFovRO:OQXYS29aa89u0uZ3SQz4bGqRe4lFRO
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\nBYfGQWP20W1fBYymA.wav.SKYSTARS 55.80 KB MD5: 97442b6749b7fd4f7c5cfd1485b49742
SHA1: 1149b88393dfe8257dacae79b1fd417ec2548e00
SHA256: 4ac57c69abd049c36c557876cc378874e41e15cadfa60ce568f1438131a04e13
SSDeep: 1536:ilpyF3KTOsZ1+1ArMowfEaf0KtRSrKDviXCPRCI:ilpmbsYmMTfEafFBDviXCoI
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\OItGubAn-.bmp.SKYSTARS 47.96 KB MD5: 781407d6e63b915fe71f90df7e0bb94a
SHA1: 8ff5bb4da0c1c9068f6f29cda7af6f53cb524b00
SHA256: 2a1ec0b3dcbea40420fa819d1d5f56bbe0ae62e70fba6d041126666903770b15
SSDeep: 768:8RqIB+ZzBJL4odKpeI5Cuo5HD8LIEc0ZKP/GuAPfrlrquB28N1OocG8P4g9jVs:HIB+LJL4P5Cuo5j8LIKZKP8ncuyocG8y
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oOeIcMMwhOI.ppt.SKYSTARS 68.84 KB MD5: 1ad64fe7cb40953def266998c98ffa09
SHA1: b192199dc3130f8e4b0ff1a81cbd391eb41786c1
SHA256: 38dfe09cbeb7380ed0091430c32ef659b2bce3dbab3f177dd4189cf4a9538d76
SSDeep: 1536:ZZHP1OnC8XhUVxH/c9hd6C6mtHRLrHrGoYX:nv1OC8RU/fc9hdFtxLvGNX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oX7qYv9qTw54L.mp3.SKYSTARS 36.58 KB MD5: b346ef8628dac66067be0322440d47dc
SHA1: 4b51b2ce9c7b6334c4f971ad5dce5a69e950be5c
SHA256: 35b8c4957d0e5c50368b445f2269257af88e9746295b966c527585d076dae3b0
SSDeep: 768:O/Xxb7RnyW6jdiL8BH3oLv93jWh/ZR1nkJwb2CBnMxC6Nm1zlt:0Fy3joL81YLv9zo8y2CdG1NmJb
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r9fxrCjn_fvX0.flv.SKYSTARS 47.97 KB MD5: 01d69b5ed8af47b3a8114f8692f21401
SHA1: 0256c8b38b2316e0112a3afd0ead55cb704591f1
SHA256: 957a837cadcaa4a86ffcae17a5485d7412fc17bd79842f7e93dd6acd7d0e7b96
SSDeep: 768:NGoKWQiC9vIsFJICXXQob+eHFdoPDuObabddggo/mG1aOBLEhTBc5IO5AQS/3AtQ:NG2QrQuOCXJb+IFy6O2bd9oO9waIIWn4
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\RgphzL-7QJRwXkj.avi.SKYSTARS 31.73 KB MD5: fb5bcb96a89f85572d8ea59ec5e9946d
SHA1: 8c5640429e49ed52e484fc331bca63d4b46cd752
SHA256: 5885cc1d1e48a5bc5a05519fa810cbfa59b345a81693ce5335a4306957860be7
SSDeep: 768:lT/+jzfDGc3C7ml8eIURLjfx6MqJVpQFmYVv:lTG/fDGc29eHJjkMqrpEVv
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\tefEtu9q3KkgFxvT.ods.SKYSTARS 20.73 KB MD5: 2e459fa58047c5c4b225645ba8976ca3
SHA1: 738cbc3c6aea569424d36325900a37f0ed9d9cee
SHA256: f351962941a85d4bde059da9e262d8016da5a71e111ab17556a4d9f950b30896
SSDeep: 384:Fk+ylmqRoa45nyTBHB3j8ilvs0LxkaoSTnJcQ3XS0ewXXeWulo:YlmqRK5nyTn34ilvskoSLJcYDPmo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UbpxQyPEL.avi.SKYSTARS 56.25 KB MD5: fee84ed1feccd69b6d375551a3bcf359
SHA1: c4b1fef1d8568468360d8b00f8df7f4caa520769
SHA256: 1d7537d21a2d9d79d73f9dafed338e5f9dd5c30ab4c9d091b734a202124d5f9f
SSDeep: 1536:FHt6JrSHg9655HhUo0U8ERb7MANzNuLYNjUGfofyIc:6sTqo0zS3DNzNxZ28
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UTcXL9zykuS.mp4.SKYSTARS 22.46 KB MD5: 9f3d7b4949b38183066c30fef69ebf1d
SHA1: 326af8fca13deae91f0a4aa59682ad27772c2f6f
SHA256: 4efd643389d9387c9e6cb6bd2b37d91cb178426ff24f3a8bb65a4a5a2ee6589b
SSDeep: 384:/rc2UvqCg2TUG+U7rTvPkzqEo/3WB0HwiHmzEqzgRb94cYbJdFxcyCA8BZNQWYk+:/kZg3G1zIqDvFwimzdOR4tJdkyWYk+
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\w0Ctkj.gif.SKYSTARS 99.66 KB MD5: eeb5ae7da26b3fc526981ae8896bc146
SHA1: 51edad0012ae666b5c636925f6b940f6ac30d05e
SHA256: 17f5ad7f29b6b60671c64a3c6dfeca6e09faf2a755f89e95b1258a32d271d695
SSDeep: 1536:MF50S1GAxVfFxg4o/8sibmDjFHhkBOIpoQYDHbGpYJ1BFExmNJmDUijTRNTgEwiY:MF5D1GgxguHAid63T4zjVegY
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.SKYSTARS 16 bytes MD5: d393bc85a40e9a812de243d49b0b8534
SHA1: d317e186ddc6ce454b522f947203d175b91c4d7c
SHA256: 0676e9e8abe3cd115ad53955bbfc5b484b6939f2d13b833fe03d76c44622d90f
SSDeep: 3:0Da4n:0O4
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\addressbook.acrodata.SKYSTARS 5.28 KB MD5: 831c981b65f822a376b6ff2d24b7fada
SHA1: ced9feda385514a2111505c0aa3636344347d1b7
SHA256: 32e5bbee897516963c90480b71be75c162b700dac28c9d79224e78cfc6b8257e
SSDeep: 96:ug9+RupWjqEq5hYS9dRMDovg+iTWjenrJRgMlO/YWcMdUwF4mROi3O:xsZejpaAGTmeVRZprVwFpvO
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.SKYSTARS 944 bytes MD5: 5555f7df8fdf9ad9cf5b1358e9bbbf08
SHA1: 0ff600005fad21baa4e1194c15bdadea97f74f96
SHA256: 9a189b7ee2a917fe888fc5eaea55f1d699844bf75b82ac7328dd763e34224cda
SSDeep: 24:nf1MEGV/hJ1VuHDDy7G20ig0Fznor/A7uRTauBIRWaSXHdoxuV:fuEGV/h4uGxUzaQwTP+F+B
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.SKYSTARS 36.83 KB MD5: c8890b9237563225c3a1893c1ae1719a
SHA1: aa1940c929fc8f7689b9fa4e54a83abf10b332bc
SHA256: f8f0a6f731793a02f1dfb9f5496eb516d731bbca3937ed36e24b7f25181c4850
SSDeep: 768:iSYfRFJAC6LkqvVy+pXnJywLwB3IUh2AGomJufFzvnfTMh9RwZw:iSwLA/LFVxp3kwMSUAGmJCrnfgnn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.SKYSTARS 480 bytes MD5: c8a1876e61d4a41b39385fea4197bc41
SHA1: b7003f8df98991dad731156935127d776502a614
SHA256: a9edf2b47476a8468caa7648032ba0043427ca2847532afc592ef77beee8a1d2
SSDeep: 12:TutwEe6pKuWzKcefdPjqbAVIhY99BMKIikGR:s46pjcaWA+GOKIHG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS 72 bytes MD5: 482eb95dbd9586bab54dc37b5ffe3aae
SHA1: 3cdf5986232b814a7b4b7d6d49f59b09e6d29a32
SHA256: 288e9eab6ad0dfc465045ede8fc8fd88c21609dd96e8ca2fa88c79b54cc52800
SSDeep: 3:Qd9F1VGQ1VGQ1VGKKWfGnTpGNZXZR:QdJgsGsGSfuTpaZJR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini.SKYSTARS 232 bytes MD5: e3efa31b443b789a2e15a0c2cce3440b
SHA1: 00e041b66baedfb747b7042fb2d32778f0f044a1
SHA256: a88d50f8bfe1aa85b9384c888c6447e876e473b0d211716f68ce4f0958597b99
SSDeep: 6:JyB3u5WHuBurCHFXtRfJ3WhIBhWCQdqkgs1bn:gI7srCHFTR3UiWrgw
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk.SKYSTARS 2.23 KB MD5: 386959e987303a48f2019149b7a8c9a3
SHA1: beff9183f03718026763da0406ac220855750220
SHA256: 99994b62889c29d7a1cfa40f76c8d9181f7f596b07e3d7e81efc6624fb3d6a3f
SSDeep: 24:6HlliTT8j77wLlhSG35aE3yDrWDdMuuEtOOEteZFfVVseq9tIz0YzWi6qDhtg:MllY8j77KXSolCDaRMfDOdZFbsYz0FA0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk.SKYSTARS 296 bytes MD5: f81d9bc27fe99806514188a0dd7ae063
SHA1: 46df2787c60ecc7f61d386a614c2f6c6048ce243
SHA256: ed5f5ba83fdd1aa26bfaff621e8e4d477a06a25cc07e8954c849b03d321c359e
SSDeep: 6:4fbe2y8JsGsGbbep0k/mBdmi6weTrMq+fDy4GJvcyZean9df6GPbDnkGR:4f1y8JRRFk/mX36weTrMqoDy4GJvcKeo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk.SKYSTARS 280 bytes MD5: 95c8661534197f07981b74f07499ebd3
SHA1: 020ffb99fc1e7fb1dc0f268cd18459dfe6ea717b
SHA256: d77950f9d394a348c53252dcd2f89688169b70a9ac980379c7f61e465bfe7cf5
SSDeep: 6:Oce2y8JsGsGJvj0n1+dmi6weTrMq+fDy4GK+bvK3VspJlFDMwcSgsGR:OQy8JRRRAna36weTrMqoDy4GKkilYlFK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini.SKYSTARS 416 bytes MD5: 5bd17c467d86ab33af829b8accd4c506
SHA1: bc0e924fdf243403c6f1fa6d38976705072100c5
SHA256: 7da721f59394839934d99f827ade5acea85b302bb0d306c2792315ad1231929c
SSDeep: 12:NTLP5Zxy3neFTR3EAMrreeLJObIWfc6/d:NTLFy3ARUAveLJObIkc0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk.SKYSTARS 2.23 KB MD5: a6cd735e5c2d10ac083c4b0e55918967
SHA1: 082a4bd657a389fc9d6c83a26e57b62395c17f0a
SHA256: 2c9d6710a00a2cbbd0f730f24c6a740dc6e6cfb9d26a78e3057f11b61294c8e3
SSDeep: 48:glne6x7KXSolCDaRNKXh0dQZNuKhLnUcpdMY:7u2GmRN4h0dQZN9/jD
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk.SKYSTARS 1.42 KB MD5: 85c327bb034791897bcd39bc2e407219
SHA1: 80f884e60034d16cd7ab7af3cd4666ba10c2d612
SHA256: c141fa94b4b0b5d2e4553912d72fc60dac26054df5c705073339bf657c65200b
SSDeep: 24:Vz8RNDZrUgsh11RIs+utrJRl1wnrmPH7BNthjXLNiaFchuYAyV8IYm0:Vz8RND9t3u5JLWKHfbNiochuYAyH0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk.SKYSTARS 1.15 KB MD5: a3fa94952615c622d08a3f4321220d5e
SHA1: 31a06b533932b1f07b18642461cd1ecf1e79f453
SHA256: 5bd4f39e0cba382dc906b0566017d3e7edbf256eb16ae534097ad29322c9cf36
SSDeep: 24:bKTgFj+qdeYFg7qmFrdPeVSjRIsKFlaThW0JKGF/+9RwrPr5C/+:eTgFjhDFg+mTbeXOTQ04wiwbr5CW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk.SKYSTARS 1.52 KB MD5: 4faeb8118b792826438dfa5733ba4c0d
SHA1: 6ef0afc1664fa13c1527839b36e0fd1bb28388a2
SHA256: 5bc80df911d43be8c830ef2f3b8764a6ab122ba646156ac11415d48a6b297420
SSDeep: 12:cOP7gO9rXIULFnq/RPX2NehQx3FC4frfU2FAMrNgRRRRRRRRRRRRRRRRRRRRRRRd:BrZUZXHhU1CInAs7Udb2MwOZAr6m9HW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\MS Project\14\1033\Global.MPT.SKYSTARS 381.51 KB MD5: 4af8e464143ea2585c49f43572574f51
SHA1: 0bf9d08e72795f1cc777985576f4bcb56f631b65
SHA256: 491f7cd36f89afea1deb9e6f172c6e3a9751c8e0944f771f7f982d58d17ea901
SSDeep: 6144:+rKPKfntk0SiObwbzc1oQosHD2fIRBJySM5:+rosn6iObwbzc1HKwnJM5
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\MSO1033.acl.SKYSTARS 36.88 KB MD5: 5c4919589f27bc26170df9f3bc1bdc8c
SHA1: 9e2147bfd97f41ac88b7027161fa61975ff88cd0
SHA256: c38bc5dc27e3f39a323a6a30f3877d8ea34f8df3126ddebff6fd2d37f9a5c6fe
SSDeep: 768:oJfmOqYl7qTMpg2W9NQdsO7i7U/vbWLS0ftqng6P6/WH2coH:oJuOF1TrCNYsOMuCCng6y/WHWH
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\index.dat.SKYSTARS 56 bytes MD5: a0a9e7d9e6a23b59567f524d3c18da98
SHA1: 8c31e0e58902bf04ee67d1e6a3807af434f6f463
SHA256: 96a5444517c1144bc94800ef52eab272ee8ccdced75b4e8c26f303a34426f4ac
SSDeep: 3:ZqMwCvpJ67R5+2CRY:VwCv67R5+jRY
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.xml.SKYSTARS 2.41 KB MD5: 565ef04c78c961fd351c46beea845773
SHA1: 1de9d4915bc830fe83fdd5e1678f0d0fc294ae3e
SHA256: 9375bdba0048392ddf99b992c7e833b73097ac8dbaee886a1cc1bea5145fc683
SSDeep: 48:K5vTaKSp8+7UzshddmsVKugYTkdKipSFTl8nxJV+uKULknGQM2OIhwqhhT:S7aVvB0sVK62JTRuGQhOIhwchT
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\CREDHIST.SKYSTARS 320 bytes MD5: e69cf28c8d31cb09a63b8d680c1f770e
SHA1: 1cbe9f81c07920655ebc605d611b888e9bb130d1
SHA256: 51f8d7c804af0a24f4390110752c681d6d419963577ced110562bc4b8f994f1b
SSDeep: 6:MWX5pwrcjWpnrqvVC6SfwfKV6hz6IA0zrcIHDpv2VsPTn49CJUJ+1Q7:MWJpwrxpnrMC6ieKVG6IA0zrvQVsr4yq
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\SYNCHIST.SKYSTARS 80 bytes MD5: 329a06eb5dd503391e45310d01dfb0fd
SHA1: 8ab223951ad141df757945b7f9e3489d7871d5cd
SHA256: e4f53ffd7f7427afd37b17e4426332264650c9874108cd5d631f7eb7153b68fc
SSDeep: 3:4hQjlnAivsz6YVdWmJrnQxrN2kmrs:sQjZAAsz6Y3WmJrkrtmg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\0e15476d-d8fe-46ca-8099-ebdcf80f637c.SKYSTARS 472 bytes MD5: 6cb0cc99bdab5d852902a3ddd387b6af
SHA1: 27d8532499274d024979604aa627aa583a20a358
SHA256: 8bcd17348dcc4f13e49705d650394f42f54a15ed1d81542b7b9deccf6b405b8f
SSDeep: 12:+engylLrVNKgHSd7vmspttCxDobE5HkCqK9huQGId:eufTtwXvtCxobEHkCqErVd
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\102a7bc8-3f85-4bb4-840a-38257d2965d2.SKYSTARS 472 bytes MD5: f83979fcc37c3fba1b634d1b9007e3a4
SHA1: 77cfbcc036f40e084965f0fdd9c8b398d3490274
SHA256: 629d6c8db6b2a7b47067219578d97b2942b0c8ec23c6e04ea9e144e0349e79a4
SSDeep: 12:+enLNEzJrVNKgzxlr7lGNqHNMXmHcT7aTZ7faId:wTtzx/GNqHNM2HcT7+fBd
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.SKYSTARS 472 bytes MD5: 9c4103454fc7a798c6cc1c1893a5e478
SHA1: 66a837596029752d377a9ff72786d631552d85a7
SHA256: 618f12285c78679a7e62ac27bd6b1ce21e0c1bc354e8dd726b4b2152482d6a2f
SSDeep: 12:+en2vyPbcmrVNKg2PocsOFER1blW9+ECIHq0RQ+Efmx8Bii+BzGugId:RbxTt2PdvKpECBiQFmx8BWBz5Ld
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.SKYSTARS 472 bytes MD5: d1d0332b972eb08c6b40dcf75148c5e1
SHA1: 6a822798f4054316a13777b708b6c07a1f143a8b
SHA256: 6bd98096481a406bdf66481a1ff296e7ca0d5d5b2cb9bb743434e30d6d030cfc
SSDeep: 12:+enfLdmAntrVNKgsZmqM6xZOe9HCbnO6D4GKunimId:FLBTtPqMu9ibnf4GK8i1d
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred.SKYSTARS 32 bytes MD5: 074a76f16d004b4700d1b55c7c51cbae
SHA1: 0ffd6682bc56619ea6958dba63f6e46354713fce
SHA256: 9a40b4fe122dccaeab533e09be71562346303745fc91b8d2f1e95d9a66fcb6bc
SSDeep: 3:G1UqXBhVn:GuAvVn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Templates\Normal.dotm.SKYSTARS 20.16 KB MD5: 323ff8b5e8ffaae5c8a4e105bfbcc21c
SHA1: 691036041b84aaccfa0bafb5570ea91d6584376a
SHA256: af992409d2a440fcba55198886f23aebf5bd3c3b98859de90ef3fe403bc30ebd
SSDeep: 384:qI+QrUNKBpWC0HCMl5LfkKh4BIADcq6a0lps+uJAh5L//8CoaJBkXIA8BWGl8Cu:UQrjWCgr1MKyBIoSak3uKh5AnaU4b7i
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\UProof\CUSTOM.DIC.SKYSTARS 8 bytes MD5: b0d3981e16fad007c43640b2db7b9206
SHA1: c26e573420e668250a6bd6af80423429aad4adea
SHA256: 5c7c317c04c79ff6600a39570446717b02686b159f32725e604088f240d5e653
SSDeep: 3:MuoW:MuoW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.SKYSTARS 560 bytes MD5: 5e964469639bb3dce43fa1a500adc092
SHA1: 0fba89461d8b71c8ca53fb036d50f7cdd4444be3
SHA256: a963cdd3e036a61f9cf09a30a204839d4c771889315c7f5071a888db11179b70
SSDeep: 12:CRMp+DnyKCdOh4NvSTAQLJMrfcgJRx3n4hqcCKkCPH:Cskyhg4VgAQLGRIhqcCKDH
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.SKYSTARS 248 bytes MD5: 6f7a3396587666495fc7575351a293ba
SHA1: d928f2c0f833513ce131ad43c184d385f29726d3
SHA256: 62247c2d3a5d995ba52d3daafdfb672c56a1e0be7047f337a378f006a8a61573
SSDeep: 6:KJey3fD9LpHjRK8MBqO7l+LTBeSZWVG8lD3YijZDUn:KJey3fDdpHMvlmTBewWVNlDIGGn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.SKYSTARS 120 bytes MD5: 730fadd8d37e1b9db75b2ffee2152e0f
SHA1: 5e5380266e9b6516527326a06ab85f5e373b11da
SHA256: 52dcb2c8ad1ba7ee25f62effa7dacb2ba50484c2c54b5a649f550cf84373f463
SSDeep: 3:nKB2RWWwDZZP7m1iklq9iY3Fs9WSdLjSxqgCRYO:KwRWtNZDicxYtJjgqHRYO
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.SKYSTARS 280 bytes MD5: 2e037d687ed48c66d43961b63df5608a
SHA1: 41cdf083fc3cbb436233ccdcf86c18499c032b76
SHA256: 22dae746175a3f24c457c518818c5da2b3275a82eab8976de34b9b593c2e2976
SSDeep: 6:TJ7J5Jwet4NKDpvxPcZ3bFIhZdTPRQw7RUq/gD/n:Tr6N6xPcZRIhjPRQOC8a/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.SKYSTARS 96 bytes MD5: c141c219fa55af4457deb8270d0c1410
SHA1: 6c0f961dae296c044467ee39f6b735724e492d1f
SHA256: 04a612837d46b3a258bb57034b4cc1524838763443fc7a69caa553b04fff687c
SSDeep: 3:YuEQs7ICpNBJ1YO+QwDSIUnqnO9VMEus:YuEQstBwDS5qO3MM
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.SKYSTARS 424 bytes MD5: 143d18bbc9abbb7a65a8ab43fc2c5cb6
SHA1: 961765e8761165b018c9ae1fdd71ed25f5abba38
SHA256: 77e3883b7ce78dff4feb1371d35d8a4f92608d8ac72eb3ad9148b950ac5914b3
SSDeep: 12:XvD0getu9DmyijQbOlBc+wHvjPh6J4ZhH:f4tKDmvUClBc+MNQ4z
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat.SKYSTARS 32.01 KB MD5: ca158bd873a044553119f996f5005daf
SHA1: bffc7614ba7c3ebd86c23a5b88de139cbd18e89f
SHA256: fe0fe909f4a8fadf026b90696ba07e514d77bfb8c4ebe9d9ca2c39b2848db852
SSDeep: 48:wGbz48SsY6L31DZTfXZTJEDiABq7iXxaxsCPpCof:pzoBYlDZrZOm9eXqRAof
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.SKYSTARS 104 bytes MD5: f51b14e6e72fa8bffed6e7518368b97d
SHA1: feb65a5a10c4cb4626c6bcc273c551baf1f90a3f
SHA256: b4c667d2f7b56e469d4c1af698508aeadcc3ad0d6716c8a697e0e6400172c98f
SSDeep: 3:reky2VIJCXo2/FDjvxRtsznbvXan:KSRd52bvqn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt.SKYSTARS 112 bytes MD5: a3328bb9eb10ab7ab8e63278a034209c
SHA1: 7439ffed721d0dc4574cdd434cf5b04689c7ccda
SHA256: 489756b54e294fa6d5e9d0532dd0f0122bbfc0101dfd27fd95468c44ee6c7941
SSDeep: 3:BBGGaJ3VqG/zW5kOGATYvirzNJ7VXN5rSJjGFobPyjn:aNofkOGATYvIhJB7LSbPan
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt.SKYSTARS 88 bytes MD5: 20104388057659fd79a798b82bf4ed0f
SHA1: e1de3f03677d51714aeff2cedc04057c080c66ac
SHA256: f79d8d6d0aaef3b170fbea6a46961a37275f70ab319d39216e191e14c56c7cca
SSDeep: 3:Ix8XgxoFP3N0UXugvZz5GFNatZ:vXgxmN6TFNoZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt.SKYSTARS 304 bytes MD5: ffb6b786f0c6a3f59f6820672620602a
SHA1: dcd65cf9deb189d353f3ed79828e3fde70632e6b
SHA256: 1c8fde7be876419b127debf11dcff27bb4179f1022fee03f507b2943112dc21f
SSDeep: 3:VYp2/p9fuJxiJyitPWs0PFJvU/7l0/E/WGiLH/iujm+iK28rb96BXSLp4D6JfpGc:9J8RswFxur/WGizIs22b9KSLE8Wut/n
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt.SKYSTARS 232 bytes MD5: 40f5e9b1f78f9f91a619cfec4deece5e
SHA1: 3754c5e72b0d970210a91e36e1679e2b33086414
SHA256: a3b6ecc88575ae3fddf33869b154447da45478219b657a5c431cd05537e80d3d
SSDeep: 6:C0dCti36q+p2DIPDHgqrqgJ/BCvk0eKetAKEOHMobPan:v+iqXggcqGgJ/BCvkZ3ttNPa
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.SKYSTARS 520 bytes MD5: 15b48321f49b5267d3fdf2e30987d365
SHA1: 9b6297275be54dedf376d8cd48bef7d6380cef51
SHA256: 327b02ab890a15eba951858396aa030bda3b0539d4b15e3bbeb0329550907dc1
SSDeep: 12:7+G8jM3jugYE84erJ94eF5euJss1deJrVofHBLin:7+O3jugZReSuJssfexGYn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt.SKYSTARS 464 bytes MD5: 01cccd51ef4f35883d961fcb98ea5e99
SHA1: 3a6e4cc180c1f948a6336648af5adad73a7fd1ba
SHA256: ea7751d27f648e37a835864ef5b412e1d1e2921a9ffce7b17930a9800ca47ed2
SSDeep: 12:1Kp1plQMNXO4kLqnCTYNX7KPAsyp7KPAsqgi:1KpDll8nuWYNXGqpGe
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt.SKYSTARS 136 bytes MD5: 605466e7283ad5bb597dadefcaeba216
SHA1: 043674ad3a19d0bc14ee6bc1646aabe3ade0b987
SHA256: d9365ceed74a11937c8eca57e55983383e5566749a624ff7d584c0ed59b3f93f
SSDeep: 3:jAzvD5gDdEKIK6AUXIw+gYrXesDBfqe0RqPb33pXX:StgDIKAXIw+ZrusDpDPLJX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.SKYSTARS 280 bytes MD5: 71e2e514f5b8fd4cf385b2caf8de2ba2
SHA1: bc6872c05d73d7fa60c3b949958aaa3ae508351e
SHA256: 550022d1361bbf2228fda4e857caffa8d5cca9c7aab4ea9cabab715d4b73e8f7
SSDeep: 6:MThZoeZsF1t7Kj6GIskfZLXWezrqU1PxySXxmmOTFpFVTBIOSrlcZgi:MThWPF1tM4v1maGU1fhmmOTjFV9INwgi
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt.SKYSTARS 200 bytes MD5: 11ef8842636cba074b6ded384c755a55
SHA1: 5797f5203460971eff23eddcd8e5c499ade984ef
SHA256: 54ff46ba4afcb59158fb6ac715dbbbdc4ff254e0d69e72277e7e51f3d132cd6b
SSDeep: 6:l+oDqg6Uam4A8xunchnwliWJ2NELtqrq9:coJ6RnA8onchw4aAG9
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt.SKYSTARS 552 bytes MD5: 5dff3ebb2e6c471dfe79a791dc676a7b
SHA1: 201dd7a2444142613e870aa0e3d01dd8a8411a27
SHA256: c528a638c865bb435c424d1df6ec85c57358c71c3f7918649568257cdcfc27a3
SSDeep: 12:PJKP0hUXXe2ZWjNOvdsd8jFwA6+8oTskUHd8jvqGTdl216qq:RKHe1MdFwA6+54evqGTOw
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.SKYSTARS 128 bytes MD5: 0c2c0629f3e1e976d3b5f051a8e0f71f
SHA1: cdd148ad8215f8d105f7a0d7dde369f185a39655
SHA256: a7198afa8cb5ac7938e947e1a7c5095e246688c4ceee11e9118daa00ea8adaed
SSDeep: 3:WSX1fRDNUkCrsh5k2Daavca9gNBJlLSIK4OJFcgSOV6s:rNRhU5rsh6Svca9IBzLSIK4i0c
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.SKYSTARS 216 bytes MD5: 545284f8d7f880d104328c905b74b85c
SHA1: af71a084ca8695ead25dd9e2e2735f3067d72176
SHA256: 0999e3d24a57b2884e404f3185ab2140a4d614364f6ba4d951827e5b2789a006
SSDeep: 3:XBr8n+6P4hYNXmmVKQwpLZZKDZeHh2aNBV0i1Fott10ucuoRvWkrzv4Sq5ilLqCy:XBr2FPsYHV2nmOF9FM0Tt4S5qp
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.SKYSTARS 112 bytes MD5: 9d4f96d9b713a00adcc133418aa1060a
SHA1: 943101e38b784a98910f166b0e18137a324cab2c
SHA256: a1256bad5286622ee185522cf7554cacaee86487792babf128a810f14d889457
SSDeep: 3:unoWOZiQib8Sqi6j+IkGpJrxm5HSy8BpN0U3uw8jAZK:uAcv8PiUPpJrxTew8z
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt.SKYSTARS 184 bytes MD5: b50d5586b29ac4a6f5c64c3aa87a79b4
SHA1: 260ae1b0e488ab3802131fffcfa1fc20c2623666
SHA256: 605268c3cbe136266e5a61c35df8b55c2414cb4e098cdd8ba1e0a0b06a7f3d2a
SSDeep: 3:NCNQ3hiYAGEQhUFP02XqqkLA7VEkr1euhehHptJJ/Jx5PcHS6BzYgCCL4eqGpXX:NC6sb82X93Auehtcy62gNU8X
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt.SKYSTARS 224 bytes MD5: 42e0376e8d220d845d3c01f10f8ca3fb
SHA1: b384343cfd86e82083578a8e6681848f4c75a736
SHA256: 607f9822bceacb73faf2291629d7f57cebd5ac58cf9621c30dbaab7905ac0293
SSDeep: 6:zpZ+oeQA8prqgJ/BCvkQmS4mg2Xp5kl2A:zhelyGgJ/BCvkQP4mjpeJ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.SKYSTARS 176 bytes MD5: d7d828506fe6ab893075c5dfddaa031a
SHA1: 6192e3d2114538143dc5d317824ba1370fbf1af7
SHA256: d62a707b93f32c84607bc37c4542d054896df2d34b543cb5fd629b9c387ba04a
SSDeep: 3:1mWcKWXgVhcyxXQK9gxwtqmiW2DocysKKGao3wg0WmCDgJc6k40nS/Mn:YWcKQgVKyRTiOliWaBysBGao3udCDgJa
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt.SKYSTARS 1.01 KB MD5: 6152586617b3b4d67572e4c6a274a6f0
SHA1: 0f5d743dec2ff120bb033d0f7745be376687442e
SHA256: 154c93797733268e2fa0ef5991c01acb2c615bdd24f63c698268b086826f9035
SSDeep: 24:KeQtUOwcFMIotE9Gtl794i5nI+TKCDGrBUiCmH/1:KhKOhFcrv2i5n0CDZh8
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\index.dat.SKYSTARS 256.01 KB MD5: 1a21df21e893ba8067bcc849cb84bf7f
SHA1: 5ba575c0fbcb19666c20c7074d7fda535c40709e
SHA256: 56b7fc20faa141c2ad89c771afed71cd152b41bd0d1a608fd92d860632dcd151
SSDeep: 384:NQnVxZDfiNkaSHsDDY1yDuwQnBbSearOCjVtDuaaEQ/WqM1y6F5E:NIVnD6BU127cov29M17e
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\desktop.ini.SKYSTARS 280 bytes MD5: 1a84733a16958c9da9230794842acb94
SHA1: 3f322f61536c05321439ddfa585f8dd49d576a16
SHA256: d8b769051f5e0f67239de537fb0c4826fd0987939b253b2e5c10696f724ac811
SSDeep: 6:ImldyFHJppBZRJhppaxudx8fYBiHbxywmstRfJ3CjC:ISGZRyGOABKx5jR3CjC
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Music.library-ms.SKYSTARS 3.51 KB MD5: 580ddbb69e585b692f8a26db6a96369f
SHA1: 9b42d1019c639267bd12fafd787f8f2a830a4ce1
SHA256: 393f3b0119b7b487972092ef51414c3570bab8b18e7385eac841d36adeed4158
SSDeep: 96:pufhlrnjK/U+THuKe14arDwylYW5W/QmZwP7dwfp0YrtKj:OhpjK/UvpdMY1oQnZwGKtKj
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Pictures.library-ms.SKYSTARS 3.54 KB MD5: 8f301aebc6172dcc27f7addcc3710d96
SHA1: 9afe7d8a0f8931f78b6853e19322a95b0a1c0092
SHA256: a83a5f73e8ef679639c7d8f2b3bd99dfdb11eb6e8295782957caffa1edae74fc
SSDeep: 96:nufhjrcp/U+niuKe1aOEztHLzViLDhOTuSnoYnCmHl6:shPy/UiphGLziwvnoGHl6
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Videos.library-ms.SKYSTARS 3.52 KB MD5: 07aaf951b8206e8ad8341f2cc883331b
SHA1: 5862dac87b94efc9d26a1fbc2568f3710dfb6e0a
SHA256: e72fa5b7d812ff96a0825b83d8de76c523c06630fe5aef78b1d6dc93b74f2df2
SSDeep: 96:5ufhPrcH/U+bFuKe11p+pmlK3na+zBk6uKe1mgy0X7tHLDgscu:ehjo/Upp3kmlK3aoAptXNLkscu
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\index.dat.SKYSTARS 32.01 KB MD5: f97f9be4c85902d34a11237d032690f4
SHA1: 13ba642375b839a64d67306c946bc83da401ffc3
SHA256: 4a143c4e282a314c27b16b26e3cc216b5facfddfbd72237d227ddd240b26155f
SSDeep: 96:nWGVzGbGKTooa9u/ckW879oMwK6MwK/jp:WGI7Uoeu/cuxWKEKrp
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-MKqyxYjc5JRno0_.lnk.SKYSTARS 2.62 KB MD5: efc38b0f6c0f5047058196cd795be189
SHA1: 4c4d3b8a597958a7907723773895eccd1937d6f4
SHA256: a9184f4b9592602764ee597d946b68ece00f9370aa6f15d304bd4cb20c617ed2
SSDeep: 48:1OS96+bto6xaWYPSS/5HisNLnjEnjoqPrxLlSF/opUMF+j1iq9fTBP5OG:1OSEWKRWYqShisNPEfPFLlSFApveTB4G
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-XGB.lnk.SKYSTARS 3.80 KB MD5: b449d6325a0a139e5c7b5f0b5445de9f
SHA1: 6096d13a77468b647eb2317fece9552e1a881f96
SHA256: 497c7efd3f91f6ff7ff15037ef335b90867806c703c5ec779d0fc3030ecc4280
SSDeep: 96:gKjw/A0CDztSDKj1XO42RWYO2np0BWM2eZ+FewG36+D9Yif50:gm7xSDopO5WYO2HMBMFewGqA9Ya0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0PhF0I.lnk.SKYSTARS 2.48 KB MD5: b6e3aa1400f148ef6b5869dab205e9ec
SHA1: d1caf85d774fa3b3c2fe4db0f2f1185151411a7e
SHA256: 42d97f46a03e5569dcc26b9fa23ff52ccbbb249e98695c2087b9a15163802f96
SSDeep: 48:GIjAx/B2PP0CDbftSKsK+q5F4odowdQRZ09PTOmqkJtsA9+qSKr:njw/A0CDztSDK+kF4EobkTekJtzfnr
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\3qeSyu.lnk.SKYSTARS 2.33 KB MD5: 53d42c3b3de687356ae67a7260601176
SHA1: c7548a66e8aa83354d0421049f385338d06df672
SHA256: b7429b5b2c769b004004e16fb3ac4d6cc513467136c96c549c9ca329bc9d2286
SSDeep: 48:1l+hES6xaWYPhTKJDVcFKlFVgPv6xaWYPhYw+KGQUP7vzyt:1lETRWYYJDVNFQvRWYb7YPvyt
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4eaJAvH8dt snU9W.flv.lnk.SKYSTARS 616 bytes MD5: 9a8d29f0f14d08c66f712b67c309bf16
SHA1: be9ccf194705b86671697fbac14d754111f977c9
SHA256: fbe6210a11eeb6d0925d0cd1163d3833dfb3065d95b3fc1c0629960d105ed2e4
SSDeep: 12:GCWYo8oOfbvC4hhecnhZXXwXRD1VfDK6+99Kj/4VGkA2p7WIc+AjbLWPWCGR:Hoj4hRhZXAXNGW/iGwKb+A2G
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4S7aUwFCgm0F2.lnk.SKYSTARS 3.87 KB MD5: 682df85f4bbb59c110edfd31df96f3de
SHA1: e985f96f35a48e841a7ee70d1e2e6912b581a358
SHA256: aedb7bc9152fa2073d8b88d2c5f4ae1fbac6e9b3c3f3b9d9d440a87ddf042900
SSDeep: 96:fSEWKRWYqShiW6FLiRWYChdA2BJMNkfRT6Pgg0N/QxOmOp:f1bWYqSzwIWYl2BJMSZToF0N/2OmOp
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4su2oko3I.lnk.SKYSTARS 2.54 KB MD5: 4768f5c48037cbbb0278bfc2ea7e5244
SHA1: 8f6545c86555cb07469a2eac55f7592ee36add98
SHA256: 75cf0df8a1af6d85fa46762b51d3048d73124159b3f7f4a1a16a2bbce05f3214
SSDeep: 48:zS96+bto6xaWYPSS/5HiLhJHnjoqJE9Vcf+ClDCC5OG:zSEWKRWYqShiLHfSXMGG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5-OIo.lnk.SKYSTARS 992 bytes MD5: 762205d81bbfef7ce2704a3885cf0d03
SHA1: 2390790672375eb2bea4ea1b2f861b218904deba
SHA256: 7e23aeb5dc783dbce750e589f388ba686ed2580ede7dabacf71fc8076667ed1d
SSDeep: 24:KI1AhO1RbuddnP04CoePtKWjBN6aZt34jdp+p0:K8AcRKdhbCoeVxVN6aT34jdp+p0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5IpCSj0.lnk.SKYSTARS 2.50 KB MD5: 2a7dcd24e47c9fe5f7055048b2ade9e7
SHA1: 853a2f1385b7cf0e6c90a139cb06cd7891b1f66f
SHA256: b2f017f0a2385b11914e81c904266ccce37ce5310bd65b7bae731d6dae18dc30
SSDeep: 48:pjAx/B2PP0CDbftSKsKJFzXVvJPwyRZ09PTiZcTwZ+cYAw+AM92gC7G:pjw/A0CDztSDKJFzXL/kTKcTwZ+cXus/
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5uCl6.lnk.SKYSTARS 2.51 KB MD5: 5c39a29a3523930cc4cccf9e2b99524a
SHA1: 29e13d3a2bd90fa771cb427f65123e4887e3f57b
SHA256: 0e0e1de854c43fa5238cb50ab030a64a935cb6b27ffc932907c02b35044d1104
SSDeep: 48:EfS96+bto6xaWYPSS/5HiIYDr6njoqKXF2+YlFoLm33:EfSEWKRWYqShiIG6fKXF4FoLC
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6CaRSI1gd4xA.lnk.SKYSTARS 2.45 KB MD5: 4ead48b58b3ff224adfacce3902c8c27
SHA1: 6ff5f7f150300807163d88fb8e63f64f90365c7b
SHA256: b95616188a40be0483ef6949b2c7f5c55089d437cf43e9262873bc1ff0a7ab3e
SSDeep: 48:nBS96+bto6xaWYPSS/5HiRah4oHP80Cy2TERIU5cEUI8u+ur0:nBSEWKRWYqShiRaN80CyWERIl4+z
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6fah5Apwpl8.lnk.SKYSTARS 3.80 KB MD5: 31101ab37adf52ef078f8adafc262008
SHA1: e7bc0c1f482a125a27d15a5c4ed5652bf5eda847
SHA256: 99df4a20232c86315fb92bfc15053500bbb9b50638567164d0e87565a25547cb
SSDeep: 96:ywSEWKRWYqShiRaN80CyWERIl612xfu0YEgI:r1bWYqSP8bERIls2xW0YEgI
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6zAa2BvVTWYN4.flv.lnk.SKYSTARS 3.72 KB MD5: d89d45e0a7fe66b4165b8d4d8d5f806c
SHA1: 32371e22bc532749b41b5b6eb18c74a01c3707a2
SHA256: adb18efe6bb58516d540fda02333208db73a203e837aa014b6a7adef44dfa06c
SSDeep: 96:ClETRWYYJUfUs0CqdERTgD5kYnkiJu+U+u2u7ybBL:ClQWYTssWERTalksu+U+u2u7ybBL
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7GRcqO09RMPUte99-j.lnk.SKYSTARS 3.90 KB MD5: 17d929e6c27de0282d5a7da8ee249a0c
SHA1: dd19bdac148f02b7a0f5caa3f7500c4efd253650
SHA256: 35683468541260f0c204f2a8e3a2ee2d86e59b8ee05a94c615de668957e1eb48
SSDeep: 96:WSEWKRWYqShiT0C6fNu6VYsHkfz+cY1+G:W1bWYqS2yfvYsE3w
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7_2Pm_o.lnk.SKYSTARS 1000 bytes MD5: c2b13e664d4ab9145c831bd204850d36
SHA1: 87f0946b9327d3c150a7099ca0059b83926bdabc
SHA256: bb60dd046f5569c816864da633eb5a9e4901317ba6295b62a6db4be5a6f194f5
SSDeep: 24:aZAhO1RbuddnP04CoePtWSEmvukA8D0KBP+AKG:aZAcRKdhbCoeVWS3U8IKBQG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8kcn2BrTvdA4FudkvK.lnk.SKYSTARS 3.66 KB MD5: e82bc05b86da21b30031f063a11246fd
SHA1: 06cc9517cea7082a61d35a0f0bcf5e1483aede1d
SHA256: a0e8d10113acba7f6829dc068502a7c4dfd386842080408fc3a0b84c60fe1af5
SSDeep: 96:sHlETRWYYJUfUs0CqdERToK0CqZNGR0lbz:sHlQWYTssWERToKwNGR0lv
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8RPUZRrEb-g13uY1.flv.lnk.SKYSTARS 1.02 KB MD5: 11f9a2dcdbae4589dbfdc2a95c1af8da
SHA1: b47fa65fb2345ca4c7016469ab414d03fe99869f
SHA256: dfbfba8091ceb6f38a5cbaf02ee67202a919448cd5c8d6c3a858d35e12870489
SSDeep: 24:cVuhO1RbuddnP04CoePtmSf9TNUxZp+Qm+tROPn4lFm8mXH/:zcRKdhbCoeVRJNuZp+SDOP0m3P
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9Vfajx59Z9Z5.lnk.SKYSTARS 2.59 KB MD5: 1a13c33e1de3caf1a73ac9c6013c6f95
SHA1: 76f8f2d15652dca248fb1d4ec4c2c1317723fbd3
SHA256: a1e6f9772afc24985ae0e3f4ee71d485f92e74eaabf20901a20d735268d5fbc3
SSDeep: 48:nI8pxS96+bto6xaWYPSS/5HiOfbVXnjoq2cNSmCvE7hw+N5x6+Kl6i/0:IwxSEWKRWYqShiUxfzSt87h/67kb
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\aajrkz KC.lnk.SKYSTARS 2.54 KB MD5: c1cb5c4ee93d71d5cf809b339cd0e0aa
SHA1: afc2386bb79188c50bb5e2b43330481ea3e0a392
SHA256: 14557b89b12f6b28c13ecca509b12e7e667ea4364df4b312f8ea52b7f9b5c1aa
SSDeep: 48:Z36S96+bto6xaWYPSS/5HiLhlwGeZYnjoq69VU9Vlf+cX05yG:Z36SEWKRWYqShiReuf69VUXPG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ah1cMF2z.lnk.SKYSTARS 3.77 KB MD5: ac1505e6560404dbdac423f9a96be786
SHA1: 87d3962ca2e297b06bca66e0e17319f11eb584a0
SHA256: 56afa0c9d532ad98056589c5fa5a9a5ef7f6dccbe404d2440d10a22a67471840
SSDeep: 96:4eSEWKRWYqShiRaN80CyWERIllJa+4kfcR3d5zv1aBm:4e1bWYqSP8bERIllJa+N0R7zF
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\akWullZV3EwuyRnw.lnk.SKYSTARS 2.62 KB MD5: 84306c84dbae79d7f513ce47f89341a4
SHA1: 06ba64f406ff04831e7c747986540396cff99da5
SHA256: 36d6974d27dc917940afe95d5bbe7391ce7246a9ef42abfaafa34118a84d36ad
SSDeep: 48:0/YkS96+bto6xaWYPSS/5HisqayCNknjoqgccJsp+PZdM+iq5mG:0/YkSEWKRWYqShisLypfgFJsp+POG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Auw4sdsTepKYeu356.lnk.SKYSTARS 624 bytes MD5: bf27b965e93a00292a4df450b2d0870f
SHA1: 0c32930b803c7717cdda6261de7d987c78661b32
SHA256: 48e1419a210ab5db1ab23dfc1a463399dd3e6300c94a2456020686a0289808a3
SSDeep: 12:8SauR3UGlomP4PgDv5iEHEOOwmZnnqZKLSggDnrfGy2yrGOYR:8f4HBv98ZnjLqnqy22GO8
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Azl-UDflFCdqTtxVRZ5.lnk.SKYSTARS 3.96 KB MD5: 70d318b0591a3448806947c079cb3fd1
SHA1: 8d8690fbd29a4ef5b4bce2130567156ecb80dbba
SHA256: 204749bd7b96cac4c0f9888823cf25d37412cfac166661018ce150df3e32d5b6
SSDeep: 96:pjw/A0CDztSDKj1XO42RWYO2np8wu28kTJfu6HdSytG:d7xSDopO5WYO2bu2BBu6Q7
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Ck73aG03huDrzd07UJ.lnk.SKYSTARS 3.88 KB MD5: 1ad61cd22eaa8703e08184d92d5020f6
SHA1: bbc6949ed44d9e33c24fad8dca6517a8e25b8e83
SHA256: f4821c0573f9da416efdbba30c05ed7143d979fb05b0eb9a482d12ad419e2f11
SSDeep: 96:ICFgSEWKRWYqShiRaN80CyWERIl5ehRfuGSfAPeACd+f:01bWYqSP8bERIl5ehRWGSAZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CPySWMll AnWU6bLZ9.lnk.SKYSTARS 2.65 KB MD5: 3a7518e9d8ab8f236e4b796e9b4fa45a
SHA1: d9aaa9fe213df5ad360d1d8b8d58a5c469ced149
SHA256: 0fedb533a5a06007f01d465c972050b19384ae217617f9936378270eb2a92469
SSDeep: 48:PHcgYIS96+bto6xaWYPSS/5HiGjcwPYRZ09P1E2A030ZEx7V+JEuTPJX5K:PHcoSEWKRWYqShiGjcwYkfAdEVKEmhQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\cV435fL13v.lnk.SKYSTARS 584 bytes MD5: f451891edc63fa0045e950b08707404d
SHA1: 3a97d9f6f2ec09231acd5d96455c89835558d880
SHA256: cc56d406fd17f1ad94df444020d97a907a7d4afcd0c73ac5787b63de896b809b
SSDeep: 12:Q0OVEYre9CkRdgzsAO9y/IFZKjZjjZoNwC+9xvlbZ42eV2n:bOu22Szsly/7jjZawC+9xvR5n
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\dFSJ.lnk.SKYSTARS 2.47 KB MD5: 46ea04b3fb62026e3b066bfbb6ebdeed
SHA1: c50d995aa3f139f019cfac4c7be4306364bbcf70
SHA256: ec8c1806be81c1a81648cdc6140c5b8cb4816bcaeeff5b740239f5b56f218eaf
SSDeep: 48:2jAx/B2PP0CDbftSKsKqmlNZnP3kE7bC6Gv+9A1m+ShTP6P+0:2jw/A0CDztSDKfl7MCbHGv+OISj
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\E5dSTIR0F62ceIRi.lnk.SKYSTARS 2.62 KB MD5: 91794db23771bd3a6890194f6969ec70
SHA1: d8c905d51c7c1d922edd6502968a72272af3cfa1
SHA256: e8c2396359dd1327ae95a6d7544e09f42053aa306de05900dcfc238b7b3dfb4a
SSDeep: 48:niS96+bto6xaWYPSS/5HisQu8o8njoqGJUqwgopv+iUEaI5KG:iSEWKRWYqShisLp8fGOpdUpG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eDeJvIUF8LXYojXe.lnk.SKYSTARS 2.62 KB MD5: a1815695613c1cf4b37773d43c004a4c
SHA1: fbad3f59984c8004901b4d4542c75f0b1f3e7751
SHA256: 043c4c56ccba1d91ebb88019a88927e780ff3ca96c3ab416fe671ca946dbcb90
SSDeep: 48:ndTOS96+bto6xaWYPSS/5Hih7nWvPNrmnjoq/aHxtb1gfoRAYyt:nZOSEWKRWYqShih7cgfSbhAYyt
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDgV-s2v0.mkv.lnk.SKYSTARS 2.46 KB MD5: ec33d8ca64aecf61b1fbbac9c7214b12
SHA1: a7232996c072ed8ea0f454fe275c92347a9851b0
SHA256: d73be3983216d8c2d7791e1141bbba92de0c925d9976cb50467ef2cbbd53144f
SSDeep: 48:H2Bl+hES6xaWYPhTKJC0EY+3upnptbZjRsCQ0NDi0:WBlETRWYYJCFPQnZCCQUL
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDxoaq8Iw18ul.lnk.SKYSTARS 600 bytes MD5: 5398391438a48573cd4c015711392d79
SHA1: 58fba25ead17db195bcdc1f51643e42980c569df
SHA256: ad12ede7587a7f1032fea77020d40ca29b7ed4aa083efb245fa938d7f90238a2
SSDeep: 12:mpMkSFY0+RDqhC59TOOabfZKuLrY470OiRmLIHA3Hr:a7Mr+jerguLrRLSyt
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fDaXSi7d38rWdnWNf.lnk.SKYSTARS 3.94 KB MD5: 5b12241bcd3854223f47d4c012d14336
SHA1: db21a108d5bb29ef8e21d8a7633d0a5b95ae201d
SHA256: 8975e78cb5e08ad4121190bfec4d5d383b4c999923b3641b54711e400db60f7f
SSDeep: 96:wJjw/A0CDztSDKj1XO42RWYO2npqoGM2eZMLvXM+DtFvh+H:07xSDopO5WYO20oGMBE8AtFvh+H
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fpkLEmTA.lnk.SKYSTARS 1008 bytes MD5: 5c0ba079ba3f43f0f1c2e890ae339f94
SHA1: a652d43835ac67c06ebfa0e4ec652287029b4f93
SHA256: 0f10c3c8b78c3d9ecd9827719981e68a05c2d8a0d730afb87c9a4b56780fb616
SSDeep: 24:UwnCDDhO1RbuddnP04CoePtECXm+7BSdPQ/OPn4lFm8mXl9:dnCXcRKdhbCoeVBXm+wNgOP0m3z
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\GwN9jYVw.lnk.SKYSTARS 576 bytes MD5: 867a3547109942e45135dbd329c3c2c7
SHA1: e816ee6b3cf66e9a217a96fce011975e99055f81
SHA256: 0f8ed9de6c77d162434833112fb52fd7ceaadf7164e97cdbdd0dcf65d1749b95
SSDeep: 12:IzyGmYdsWmEqDpfGA9XcD1VfDKNOX19Kj/wBbGk0p7WIc+Ajb4W8WCGR:IzhEWmE6fGsX0GNOXI/w9GkYKb+AGG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hap-mdvd.lnk.SKYSTARS 3.78 KB MD5: ad5bd65151f9ab368c702ef6ef24ad4b
SHA1: b4347fb415ac89b18b08f6f2a53981eda9f1c56c
SHA256: 67795f5621620ea4fb0a6d5fcf49643e91882cefa2ac7383934d130acc5611e4
SSDeep: 96:+VESEWKRWYqShiT0C6fNu6sr5Cfflc1kcvpwk:ME1bWYqS2yf2r5Ce1Rvpwk
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iJAd4NLQA5m2_U7sFDwi.lnk.SKYSTARS 2.67 KB MD5: a87613eee4acc91b79888f7e25577977
SHA1: 534b3a2f0087a1a2afb03b7ad4e30a0970f2ce09
SHA256: a1e8445bd3f9c210c26dc10da7f75bb6be0cc3e1471a4b3a7c36b44f605dc67e
SSDeep: 48:4mRS96+bto6xaWYPSS/5HiP2AmAbnjoq/OCXC3d5++P5IOqKl6zG0:lSEWKRWYqShieALfW/3d5jkf
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\imF1N2GKr.lnk.SKYSTARS 584 bytes MD5: 58fe73b881d94756e5f0b6996252500a
SHA1: 9431e9cfc8c014d2ecf9a2862276b2891ebeb9ec
SHA256: 0260591148455958e798c91225272ef176dbc05e410467053716ccaba2708991
SSDeep: 12:s63n9C5zdiWqVPgcHOOis9nqZKLNhPo7tfGy2yrGZ5R:WduTuLijLNZmgy22GZP
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iqVhjJhZSIBuxl.lnk.SKYSTARS 3.62 KB MD5: dca4fcd7f14d01a9d68786178f147acb
SHA1: 7b524d81c083ec665130623ca1a1717367a7b20b
SHA256: 73ce825d0f465cd303910f3500207f9f7672c108741be629a0e6d15f248aba42
SSDeep: 96:plETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcK0G:plQWYTssWERTUNwOykohKv
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IvQM2Pg89mN43.lnk.SKYSTARS 2.56 KB MD5: 4ab295ee431f31fef870636b381f9914
SHA1: 0f726e00b16e680d8e134957dcd46839e0f6ec38
SHA256: 077793364b52a9b1fa9717fa3a1d8d630a678a6c8ee20681d9abfae5e3e7b5e2
SSDeep: 48:9u2jAx/B2PP0CDbftSKsKGUgsbJnP3kkW4eMxNA8I+iiPZ9dm3L:9u2jw/A0CDztSDKrdMA6Pe9d2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\jCl699k6cnu.lnk.SKYSTARS 3.84 KB MD5: 01f9fb3c7c13f2cbbe63a0a60195dcee
SHA1: c52ce2a545f56c2d93add67b3e0e451e47c8d1ae
SHA256: 5f429d1d0b9ebf5fbe97f24d6219e7a1b11445fde49b3b0808a44591fdfdcdd7
SSDeep: 96:k/SEWKRWYqShiW6FLiRWYChdA28FnufzTCdPvxt2YggtNC:U1bWYqSzwIWYl2YungMYFtNC
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\JYJ IrXH7S7J4lrI7c.lnk.SKYSTARS 2.62 KB MD5: 48f4223d54a5cd4eb161cdc51173314a
SHA1: 9c3093e077c704f4b601b586c0cbb0b11c1bc84b
SHA256: 78df177b25da899e24dd6add1f9e020855a322a35e3aee02fa07f82ca9be0375
SSDeep: 48:1jAx/B2PP0CDbftSKsKd37ZnqwyRZ09PTmEceXp+1IhaGbKI8f:1jw/A0CDztSDKd37ZnqfkTmEjp+a4DIe
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KczBX1JhveWm.lnk.SKYSTARS 2.59 KB MD5: 6188b6e0b88b33ff419d819f100837e6
SHA1: 298fafac95506339696d7b39e945dbb0543b1405
SHA256: 7c0928d687190e874c6bb317c76bd34f701d8d17507e913568516bea972b3d1d
SSDeep: 48:9xS96+bto6xaWYPSS/5HiZM/VXnjoqJz/qcjuvE7Aw+x5cXPKl6Q10:9xSEWKRWYqShi4xfJDqp87ACXCkD
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KlwMfLBW.mkv.lnk.SKYSTARS 5.05 KB MD5: a55124d4813c2725ccae823350c87ecf
SHA1: 26c60c4cca137af00cec897099a78795b9e36a55
SHA256: 88ed82b80c40439ddac8f64be24486700ef0456fda8b70d02d9ec8b31fb324bf
SSDeep: 96:2lETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcWBFk7PImnurRyyl:2lQWYTssWERTUNwOykohWBq7PIeurRy6
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ky0CNsBAgguhn.lnk.SKYSTARS 3.87 KB MD5: f249b16d51309d9401e350f3c1983222
SHA1: 686d896461ae24ac7aa4957f6de3f8b3265ae997
SHA256: 4fedc3a2538e39f0121207144f9a4603e9822174eeb849047a4bc5885fe8f056
SSDeep: 96:XSEWKRWYqShiW6FLiRWYChdA2ytdNkfRL2Aggp2jtH1:X1bWYqSzwIWYl2OdSZqAFsjtH1
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\L8JGos.lnk.SKYSTARS 2.48 KB MD5: 6a4e2371ebfb45af36edc2e826b83728
SHA1: 67356856c76c241cdf7e55d3fb3b2de91e2d2cca
SHA256: face411db77daec48130404b3fa94f94e9696db11eb888e93a68b99b2fe5e3e9
SSDeep: 48:NeFBAsIjAx/B2PP0CDbftSKsK+q5FHv2IFwdQRZ09PTNyFGftoDQA9+bIKP:0aljw/A0CDztSDK+kFHv2ubkTNyctozw
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\LdyKq sH.lnk.SKYSTARS 2.54 KB MD5: 3641ee76ae699f0c0541d11c84483e7d
SHA1: 3c11cda24ab17e1bfa1017568af2080a43b5a320
SHA256: 7b8dfbd58ab3736acca1b67492c3c3b36e485a846947d5b7b62969a78e617737
SSDeep: 48:lS96+bto6xaWYPSS/5HiLOZMnjoqr9MOs9VtFf+UnFR56LTG:lSEWKRWYqShiyufr9MHXBsG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\lE3JQhfZrFvsQUDm.lnk.SKYSTARS 1.02 KB MD5: 6d7c0fba7d9d1174ebc524d68b189b36
SHA1: b0496094c75d4f32ee81889e75f984e078f5c06b
SHA256: 73ac5ecdb7e62713541967a06e1241a8eeea7155af6fef5fe673bf7566222f90
SSDeep: 24:9PuhO1RbuddnP04CoePtuS+MNu3YlOPn4lFm8mXL4Le:9WcRKdhbCoeVD+cwYlOP0m3P
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mJO8uMF6Tat.lnk.SKYSTARS 2.54 KB MD5: 873ac041298fea8fba2e277979f1b645
SHA1: b8de766e2a7e5c58ba9fd1be90c3f415bae43f0a
SHA256: e787c799f9250e9dfb289404e0cdcf51a3e4667de2c10a10c6e25c3c65cc5303
SSDeep: 48:4jAx/B2PP0CDbftSKsKUSDcuwGRZ09PT6Dlyrp+yA4++Zn8oyN:4jw/A0CDztSDKjdHkT6sN+pYn8oyN
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mwGRgJsn.flv.lnk.SKYSTARS 5.05 KB MD5: 34219f0d4285063971a161ec00a5f88c
SHA1: f9beb0bcebeeb44c3fd9e21e31563ec745553d3b
SHA256: 938978d0e764792f4336c287f3a1a2310f12d7e366344ffccec9624fd3332bb4
SSDeep: 96:qFlETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcaWOFkdvrWnusMByyJ:WlQWYTssWERTUNwOykohaWOqJausMByW
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Music.lnk.SKYSTARS 1.30 KB MD5: 67a20f2728c3cf4084ec393ad0ab4fad
SHA1: ec52dbdabf4baf52ad025a1761f8ecba6989ad5a
SHA256: 1164027370a3a707f15e9a89b62423f9a6d8897f20c88cf55e4ce9b79aaee0df
SSDeep: 24:DWoUH6zi4qNUu+wAdzgAe6F/jap8vwC+ROBgZkvC22KMDUxgojeqyzou:kuoUu+hE16xaWYP0BCKkUaoSqyzou
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Pictures.lnk.SKYSTARS 1.34 KB MD5: 5c4c8b8e28b59c5fbc7efe91730b6afc
SHA1: e29a2cc1f4626786bd747929a56fd06d60962b02
SHA256: 78d4594fd1fe125559937b33d0258e474775d539d6777d0c9211634ae21c451a
SSDeep: 24:gVX3kjAd+4wEB2PLceFkbCXqqbfY08IAKsKMH/Nq:kEjAx/B2PP0CDbftSKsKMlq
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Videos.lnk.SKYSTARS 1.31 KB MD5: 9c275f6d2970f16b0de83c97f3d833ef
SHA1: d32ee68e392f949d2f123ea0f402c43d1d77777a
SHA256: 648235310ccd30160750e3f779f1fec8d3fcbf7a96f65402f9263a65e23a5158
SSDeep: 24:c+/lJ5kl+wAdzgS6F/jap8vwC+BP/UDlgKqQnFb42Ah:5Gl+hES6xaWYPhTKJt4
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\niS1LNMjpLd63RldlE.lnk.SKYSTARS 2.49 KB MD5: 97e335b9010abb907b30b310733402f9
SHA1: 57d4b4ace80d23d11f33b4bea76ad4e4b92f3a5c
SHA256: 5c7d78ddc44593fa3a114a981fde3484ea3b6090775b69ba9525d42765b1992f
SSDeep: 48:/jAx/B2PP0CDbftSKsKBt1XdK/4a96xaWYPW2UNIARKamAGFRGFm3/:/jw/A0CDztSDKj1XO42RWYO2np77GFS
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oaNX t.lnk.SKYSTARS 2.48 KB MD5: 4bd5aba99dac3e45139bd2dddae5ed5c
SHA1: ac98bf28638bd56ae07339e0b43e985aa92b50b0
SHA256: 44a4e1e79ddc56e746aed59acc690586704ce7b07dd2a3df07e2b04b370312c5
SSDeep: 48:UIjAx/B2PP0CDbftSKsK+q5FNnJFwdQRZ09PTEKSctVA9+4Kn:djw/A0CDztSDK+kFJJFbkTJSct2Kn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\okSd1.lnk.SKYSTARS 664 bytes MD5: 32ab67db09f7758ce3da7367cadf7191
SHA1: d9ce8cab0f2cfd89ad622c63def0f0073ab0ac19
SHA256: 2b9e67dbcd655edecb6b5997458e3a31b99dbd5058e7dd6840c97e6fc577c192
SSDeep: 12:0Wsv6I+q6AYfkaQEafgzyl9pn39Vis/SmMYZKuB6GnrLR7ffG1elFNcSgbzYm2aX:0WsCI7i8RX9pNcs/SmMVuB6GnrLQ1elo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oOeIcMMwhOI.lnk.SKYSTARS 1.00 KB MD5: 07d760021d8b7ab4ba0654d600d2e0bc
SHA1: 4b31be9a65d931fc3fc721afff961cc8d4d31982
SHA256: 8c5961421ce43be793dd828988d7aea0e955670c9ea487457cd203cf9864aca3
SSDeep: 24:hB4yhO1RbuddnP04CoePtSv/cutoL6dkpbCBbH/q:hB4ycRKdhbCoeVSXWL6duCBbi
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OPn7B_oStEDZG-Z.lnk.SKYSTARS 512 bytes MD5: 98fa2fe950c63a9186b91edfa3681dbc
SHA1: 38203d342d186caa3835919bb2ca06d786061157
SHA256: ad621eab434541733054a0b64fe09d83afcdfc8dca2ef668fb746f5e0606e70d
SSDeep: 12:vBNT+sAej6nLguKqMtwpOOCIGKDenqfYfuQJlFNcSgbzYm2af8afNkGR:pl+sZj6nHMbBIGfmYfPJlFm8mXfxfx
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p1IDCpnxsoIZs5eLNz.lnk.SKYSTARS 3.91 KB MD5: 862ecc91864b0fd15d7ae6579c23dde4
SHA1: a62e55bd6a442884acceaf0b9f71c78ad12e4f06
SHA256: d9f2efe937f443e5bc6262ef53df9bcce0f142c8c23359fef8bd3e3f3226f297
SSDeep: 96:BSEWKRWYqShiW6FLiRWYChdA2bmNf8/nLeQ:B1bWYqSzwIWYl2bmNESQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p7HLkCBt6lrk.lnk.SKYSTARS 2.55 KB MD5: 42b1ee7f1e81f2865a1ee2ed8537edd1
SHA1: 1bd38c51104e3fb9f851eaffad1b231b936804dd
SHA256: 88a59cb4602cfef288156152a076b981ba07f4a634b6fc26de4c56529b24dea0
SSDeep: 48:mky4T+jAx/B2PP0CDbftSKsK1rxSnP3kLE06m4poPpDh+SIhCh0G:mkyS+jw/A0CDztSDK19SMw3oPeZCh0G
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\pXbnvbUkulG.lnk.SKYSTARS 488 bytes MD5: 4b4d3180ef72ab17fe1fa7503a1d9c57
SHA1: 295831c6241065074bc47d1abb5dbb257dd646f8
SHA256: 70d7c100251c8ebcc8310b3387c4c00f20221addd551201f967306fa251ae83c
SSDeep: 12:7cF4tmA8hOYYPReyzPkfszGOO9OcxnqZK7vuOsa13PYSfa5Sg:4utmbOLPLzskvexjaOsenyMg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PyIsTigOF966Nu_K.lnk.SKYSTARS 2.62 KB MD5: 6d7b97bfdfad896b609b2167ce576d15
SHA1: 4d2d782005414fe199fa2ff0a4fe43e1c32b880c
SHA256: fe69c900dac9277ba42c2d46d8252b5e080075d15f0171593009482d7a7e38d3
SSDeep: 48:ndCS96+bto6xaWYPSS/5Hih7yPcnjoq5xFeDfb13to1AYyB:n8SEWKRWYqShih7yPcf5uDV2AYyB
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\qli3XF0tWwDGKFecggK7.mkv.lnk.SKYSTARS 5.18 KB MD5: a916bff267e0ee92a132c7470504cff2
SHA1: 18c06aad80f3cc9a0a9b4db0478437b63d7269e5
SHA256: 392bc64b6d8f82fd600a919892b34a77dcd69bf35d4e232ae6f3050807a09f69
SSDeep: 96:0n9lETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcLix7Zvok1wE6CukZmjYADGMZ4:wlQWYTssWERTUNwOykohLix7Zv9yEzua
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R19lpaVKOfq7YVANQ.lnk.SKYSTARS 3.94 KB MD5: cee71c9dd2acf27fe213dbe1cf65c207
SHA1: 596b3106380ba60b6469d5cead4608a7b64bd75a
SHA256: e9e9a6b6d9f8f3c2f077027e48bdca06a8882b33b4fbf17e99a8381a8c2c9980
SSDeep: 96:SJjw/A0CDztSDKj1XO42RWYO2npqy3GM2eZCMmM+D53IFX:67xSDopO5WYO20y3GMBVRA53IX
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\r9fxrCjn_fvX0.flv.lnk.SKYSTARS 1.01 KB MD5: 015b59fc05140ad045f822032949b4f5
SHA1: de7dd9e8135b1be383c28215c02186a4667584fa
SHA256: b65b5190607dfe6bea70971610a43c8572d66198f95bfeb940b02f08d2e7927a
SSDeep: 24:9jC2EV2hO1RbuddnP04CoePt1ftbXUIUixXsOTaAg5KBP+AuG:9jCEcRKdhbCoeVTTRIOTLwKBcG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\rF_ok6UvUojb.lnk.SKYSTARS 2.59 KB MD5: cfcd5290d33361ba08adcdddcc1f856b
SHA1: 8b88edf7a73419f28b8d83d55b407abc854c196d
SHA256: 69648cdb83b1312e40b0fa5858cb6461815693ae3b09c7426e5588494693137e
SSDeep: 48:hxS96+bto6xaWYPSS/5Hi/fgNVXnjoqMXzN3juvE7Lw+b5wNTPKl6f+0:hxSEWKRWYqShi/axfM887L8NTCkT
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RgozBY-.lnk.SKYSTARS 2.31 KB MD5: a866dfb463d597bbc674212fce8be03d
SHA1: ba4bde0c83da28d0e94cfcf207deea40a8cebe9f
SHA256: 2a88e91fe10acf198436c66b779ee511d136cc7c29499844e9b3074d54eb03ac
SSDeep: 48:DoUu+hE16xaWYP0BCKkUBkk0mk0CwkSoo6KfLUPSrSRyZ:DoUuEkRWYMBXrBps0CjawPSyyZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RIHbvM5AACGsvn9b3.lnk.SKYSTARS 2.63 KB MD5: 06d13b1a2b3055b5108e1d03502219ad
SHA1: db4380acb4e96dd39726db88795ffe0541e3195a
SHA256: e957c4057544fbe0855f98f8ed124a59133f46d1885112727b64a7a5d13aa6f1
SSDeep: 48:gS96+bto6xaWYPSS/5HiR45uEAjnjoqb4MW6Cx8jqUC/4+wDoWs3yOseQ:gSEWKRWYqShiR4cjfb7W6XmU+YE3Z4
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Roaming.lnk.SKYSTARS 776 bytes MD5: 6a838579b0f0998890fa88870429c9ae
SHA1: 881ce344794cc95a5d9cdbc79922fb59e1fe0d96
SHA256: 2a61569c5ac5462ffa990078c06d751af2c9f10ecb17528c2571df60338fc275
SSDeep: 24:0cTkfRuhO1RbuddnP04CoePtBKv+6M9Jhn:0cAfRucRKdhbCoeVBr6Mx
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sHSDSkZ0g_NoboxW.lnk.SKYSTARS 3.86 KB MD5: 9d822de78fa138cf3469c23fd68b8556
SHA1: 0c838844ce42dfa15c6b4c6d7bb81faabf717845
SHA256: f096a17725588972d718b002cdf61f807952af1732f8b2d8b98f1d047ee1d2df
SSDeep: 96:IKSEWKRWYqShiRaN80CyWERIlBWF7+uNkfc+PTD939L/:IK1bWYqSP8bERIlg7+uS0+bD99
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\siXuQ8hvAO01ox4.lnk.SKYSTARS 984 bytes MD5: f9e78029bb6ce9be06ca8ac8fe9b4552
SHA1: 50133d4a9d88930de0871a205ffd13bd816c7dbf
SHA256: 7ceca1210c4b064e6a0c0ca903ea28c7a6642d85a743e8bef7d1d6082818a43c
SSDeep: 24:x8AGGw6n6As0F2XJ0ZFBIG6jLhPWa1hXy2tMtL:x8AGGz6AyJUfqTyA+L
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tf9tO-.lnk.SKYSTARS 3.83 KB MD5: 242fe87d28dc4476bd373b1aa286c1a6
SHA1: a03a7b7ff8321e184402cba3c49395468333c08f
SHA256: 2d68e7c713bf0cbd48190206c7910c8cf73a583dc876213a68535ec87f1ff5c6
SSDeep: 96:Sqjw/A0CDztSDKj1XO42RWYO2np48FlmRTkTJiqn+D9SvfPEV:l7xSDopO5WYO2OamRg7A9SfEV
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ThsCTAWGPdf6ip5.lnk.SKYSTARS 2.62 KB MD5: 7c9baaffd74142816cb09d9993f3c393
SHA1: a1d7380c6bef0b0883929255b7f9912f67323082
SHA256: f2ac910adb17c605c5d71ffcba00ad70d054db229ff27db153155ea8d0e1f74b
SSDeep: 48:mWS96+bto6xaWYPSS/5Hiu6/dJ+mpwmRZ09P1E2aUFPtUiHfY+Z2hPBqziR:mWSEWKRWYqShiXH+mpLkfaUFtUiHniPR
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tNxjHi4dfeQcdL.mkv.lnk.SKYSTARS 3.63 KB MD5: 2eeb3622ce71cc1aba3b90f4ba12a61a
SHA1: bc7398fe8095098a402595d2f42d9d8914b20caf
SHA256: c1888f30b018dce87ff8c8b7f0b91f4420e26fef376843e366b347d3590baf12
SSDeep: 96:V5ElETRWYYJDVNFQvRWYb7Y409HiME+rC1:V5ElQWYiEWYb8409HiG2
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\T_P_-SNfCBkG8Aq2jj.lnk.SKYSTARS 3.88 KB MD5: 951bb117d555b89c663a52a8b2f430ef
SHA1: d3165fb69dc90a2d2a2f37be0db1a9535db13363
SHA256: b8bd4d412d045ff1916646ec03b48d6ff005e5eb2ce4f4eef3ebf078a8f3dddf
SSDeep: 96:5gSEWKRWYqShiRaN80CyWERIl5g7OqQfuE2XLwRCCd+HB1:W1bWYqSP8bERIl5+nQWpbHB1
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8CGw8 qXyI_TQhqAida.lnk.SKYSTARS 3.58 KB MD5: 03cd4ebe75c6d82506f4beada02a8ae8
SHA1: 2bb929890e41eb7402bc791051e613614af6490f
SHA256: 3ec9923c31a6c652324541085be4eeee23db8d589a80fe3ede5c9dd59b5a35db
SSDeep: 96:InoUuEkRWYMBXrBps0Cjawcs7WRWYMtbiXwryPaKNZRUrMsfr:AO/WYM5BubNhoWYMtbikezy
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8FNPSsnCaar3G.mkv.lnk.SKYSTARS 5.11 KB MD5: 6703b2cc69a5bb6b6aecf699c82ade62
SHA1: 9cf4b7c8d9e2d5b3f77c8fef1c682e3027363e6c
SHA256: e7c105dccd0ae15c124b1574af7c272640bdb355cbac67a607f6f871be502ec2
SSDeep: 96:ylETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcR/Fs5t8bmw:ylQWYTssWERTUNwOykohR/FsL8yw
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VBGVmC8I55cDkr.lnk.SKYSTARS 2.46 KB MD5: 57f00e355b393a2b782dc1b47a3b75bf
SHA1: 5eca34b73324bb10d36e18a1cde6f2af26d136db
SHA256: 1fc283dbe59f57f9d66ef1bda95b749b40177e974acdc53701aa3d0a53ebbf26
SSDeep: 48:DYcJS96+bto6xaWYPSS/5Hi93U6NKuSOi6xaWYP6hlpEKl6VU768YP:D7JSEWKRWYqShiW6FLiRWYChdA2O8YP
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\vuD7hrqb3Qw4jb.lnk.SKYSTARS 3.91 KB MD5: 730c5976e04ac43b597b615f12d302cf
SHA1: 5d612d3bda24f795a17d83e701ff019021591783
SHA256: e1926c735ce2dcbc02b12362e52ee8da3a3722a9ff381da5888be0814c60b47d
SSDeep: 96:Wmjw/A0CDztSDKj1XO42RWYO2npjGndWkTJPO0+D4pyfhV:WK7xSDopO5WYO2ZCd7Y0A4KV
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w0Ctkj.lnk.SKYSTARS 992 bytes MD5: 35e624b815c6bd86bc9307e86aec5bdf
SHA1: 9f4fd3cf1ab492694fa12caa358780292f253e72
SHA256: a6ee74db5b839dbc631bd4b9ae574865259b58b129de130817eec7cc97ec6787
SSDeep: 24:bzrA5hO1RbuddnP04CoePtxdi+23XUIUjwA2xDZOseSH:bz8cRKdhbCoeVxdi+2nRGuOseg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w7j NA8Fc2Fqu.lnk.SKYSTARS 3.85 KB MD5: f6a3fab1d38ee8168520579e0f41b38f
SHA1: 012cef4cb3d8927d3010493fe5b0226282676b95
SHA256: 3eb4b4d8f718cda266f5ed3e25dccccebce4aa77cda6223a58f0c621fb1313c0
SSDeep: 96:USEWKRWYqShiW6FLiRWYChdA2GAIdykfR/WctggyexkUU:U1bWYqSzwIWYl2GAIdXZVtFXxkUU
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WKgBkja.lnk.SKYSTARS 672 bytes MD5: 708ae196ba19a66cdb60e664ff541e69
SHA1: 0364f6968dd78cf4fc89b07aa5b7408c7fadeff8
SHA256: 826ffc6ba3844f5fbee1b05a1742a3851b88f63f53fe5c58022fa50d1f750618
SSDeep: 12:E2OPAYfkaS6kvTuBzy7fj9gSDeeHAtZ60VH/0U9FJoNwC+9n5jZMaatAR:YYi2X+U9z7HAtLHhnJawC+95jZ3u0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wt3HXsmzIUggPP_.lnk.SKYSTARS 2.62 KB MD5: 23a5405084f1c02a9293d78550a6e1b9
SHA1: 0b53841714b3553579478b6a6c6576ab87ec24fa
SHA256: d78c8ef99ff8290942c4205fba6e1f32b117bb6c4d2578a53c141bb717cb31a4
SSDeep: 48:GwWS96+bto6xaWYPSS/5HiuHyBSYwmRZ09P1E2j2zUEHyQ+0bqiqzYf:dWSEWKRWYqShikGSYLkfWUEHxdf
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WU-9paSh0TSA.lnk.SKYSTARS 2.39 KB MD5: e981f89765ad78a269f81db35b866c15
SHA1: 65c699ee37211ce26714eb587d2d9b80759dc67d
SHA256: cfb51db1873d5bb5b1095c327685725394b486bfac92c27fc331182e07f980ae
SSDeep: 48:uAl+hES6xaWYPhTKJUQuBSs0CYjK4ERMUYDQVOse4:uAlETRWYYJUfUs0CqdERTYUkg
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wvisDVGwhMu ffvUh.lnk.SKYSTARS 3.94 KB MD5: bd0d92f5b74cc88646f3385c6d2810a3
SHA1: c13e1af78c9306d87448005d0b1fe6433dd7278e
SHA256: 219c2c9fb7029cc233bc94cba5157658beeb9ddf18c48f4f38e66b0e540ec916
SSDeep: 96:YJjw/A0CDztSDKj1XO42RWYO2npqg3bGM2eZ4C/M+Dage+n:M7xSDopO5WYO20YGMB6xAaghn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w_MGGU cdFd.flv.lnk.SKYSTARS 592 bytes MD5: 2ac303b0bb95f5fb2b9d03125d5bcb3a
SHA1: 0c806a142e138a62d47b782acdbaf9040665f976
SHA256: ccf265c839de94dd7c395d83319e936c7e94034cadf5fa86e664f6a2ced11af6
SSDeep: 12:Y21WR487vduRDdLrSOU++eewNnqZKGI0f4cCAyW2YnlFNcSgbzYm2a4aZkGR:c4mduPSv+C+jR0Qq2YnlFm8mXl9
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\X4gIJecgSY-_.lnk.SKYSTARS 2.55 KB MD5: 117ba68e0613e300ee4ca116ff69913d
SHA1: 60c1ad1ddb0ab8d2b9383913df0c03bfa1629bf5
SHA256: 40f7176bc039db17e804201d988a47a6c030998413eb275c8764ca9006b14eab
SSDeep: 48:mkRjAx/B2PP0CDbftSKsKbSnP3kLtc3YUVy/pDhBaHChIG:mkRjw/A0CDztSDKbSMq3YO0h2ChIG
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xF rEYVMCXzUTbMksZVb.mkv.lnk.SKYSTARS 5.18 KB MD5: 6381b024e049609a087d77be795a65f9
SHA1: e5bf4a5a9c5a4340304457f83c975928cd4407f3
SHA256: 589d31782f07306def3ec81ddd9b4e516e84e11adbeb1fe9d531222528bb4ef1
SSDeep: 96:qk9lETRWYYJUfUs0CqdERTUNw0Cqhhyd2oWcToovokepcCut1gyDc7:blQWYTssWERTUNwOykohToov9epJut1k
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YBis7kkv5pT8UqO.lnk.SKYSTARS 3.84 KB MD5: e4e1bd664d25ec020de34efee039c187
SHA1: 39b86403cbcd5382af5f4d1bdfdaa6ec4b1dc5ff
SHA256: 09838d0c07e14f897de75d172dac9b1ce106aac49f3d118faa880546d6fc7fdf
SSDeep: 96:jSEWKRWYqShiRaN80CyWERIl9UfuBt8GjOFi:j1bWYqSP8bERIlCWBt8sOFi
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms.SKYSTARS 53.51 KB MD5: a3589bcf0cd9b93a4a6e08a7ed26bc12
SHA1: d65963b155c035ab42a7930219b82eb6b163c2db
SHA256: 5594f547554cfbb31208a44afcdd8a7b2d192be87f1719adbf388fdbc645e65c
SSDeep: 1536:8TXWctWcJWaj1Xl9WR+WcWAWSRrxWSRSW5WRRLWnWSR9AZWcZWgo4:8TZNHVjHfVy+QUdKF3p
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\eb282ead62b4db87.automaticDestinations-ms.SKYSTARS 3.51 KB MD5: 2d682b4dd4aa723f074e6f0571dea56c
SHA1: 28fc79fd85ce136cde8305d6f9cc25611afc18d2
SHA256: 4190062f5f1135f1f02a50098ebbd252bcdafab046504a5037ca06b1cfe39373
SSDeep: 48:Qvp+z9H4ahlv0QWnEoQB3yOq5ivUU80rZp:QvuFhlv0Q2U1kOZp
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\1b4dd67f29cb1962.customDestinations-ms.SKYSTARS 32 bytes MD5: eb3033497e04ba7932af245160261f7e
SHA1: f8a9eb29d7059dc9e83ca1583bbbd57877c27404
SHA256: 76406b5738f829e9f1777b5ef84158b680ec332f145535988066b8d7a5815dc6
SSDeep: 3:YECmPD/FB0+IZ7rn:YE/FB0+IJn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms.SKYSTARS 7.86 KB MD5: 6b16d55fbee74fdea7e16087279e8757
SHA1: d8cabe1209f56ea645457eef4c69c9f9a5979fce
SHA256: 77f52beb32dbfe88db27268984dc343d335a3cdfad66d6a3ab31ab3931875811
SSDeep: 192:6n1XiCvXJjx9S+6fw5PS3UBdwMS9kKVopzOCQ60:6ZzL9S+6fwVS3UBdw6KVWjQ60
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms.SKYSTARS 5.96 KB MD5: 57a1a23e7cd4d9fc08458e4f6fd48150
SHA1: 46772e64fecab13b73125f6ab3bee422e37240c3
SHA256: b56cda729714c879e95fa86b3a2ee84652816fb44f3494c1bd6deda4d46bbd79
SSDeep: 96:K1C+IA1UcNboNy0ZC+IA1UcNboNJ6zAEu2GmRMdoZ33y8JJnGfkZN9yXv:K3JUqCn7JUqCJuAESpdYy8bGfkZN9yXv
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\7e4dca80246863e3.customDestinations-ms.SKYSTARS 32 bytes MD5: ba0ed0eab6fd576cc8fa7a41b12dac5a
SHA1: 2806e2e7d99f5cd9187438060b3cc4d7d495544c
SHA256: 55fd042cf3a41c48e5538df1de0fe937da9af9415eebb85fd1dd926eb918a3c3
SSDeep: 3:YECmPD/DRE5qu6Jn:YE/DeYjJn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\be71009ff8bb02a2.customDestinations-ms.SKYSTARS 9.01 KB MD5: 8935ad93294b61223efed165c25fd01e
SHA1: 05729cb1f7894ec70444f5748d9386798dbf5873
SHA256: 1b76b3c3fdc97fcd5acaeb860ed32ea375e63913b7b3c4632d1ba3b3b09f7b48
SSDeep: 192:+RvA4TCnQxcL5Vn5RvAqVq7uieoyDlqHemy:+RvArQxELnfvAduBFJqk
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms.SKYSTARS 7.86 KB MD5: 0b36ff905a9163f6db7adc2cb130683f
SHA1: 373f06b27453754ec2a605109fd0817170f0b917
SHA256: 4ef074d228a8f124199f9110abfa54209d08923ff8b23ffb1ddf9854684a8b1a
SSDeep: 192:6n1XiCvXJjx9S+6fw5PkURiwMS9kD6opzOCQ60:6ZzL9S+6fwVkUMw6D6WjQ60
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink.SKYSTARS 16 bytes MD5: 2dc9a115df5626b6937f51ec19d4737b
SHA1: acfa41ee1acc34e4fb78e7a954937ddd14e55f71
SHA256: df5dd963f41cab0e5ef6cd45d680f5ae8e2d0620e58b127f8648ade13e22f952
SSDeep: 3:emYIxt0n:emYIxt0
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini.SKYSTARS 568 bytes MD5: dc0b92e3efb32bd517f577d24bf39558
SHA1: 2d538d7249b35809ff4fb13c6eb94e4a0874e43e
SHA256: 4fa635e4b7363dd8a6724683eae8d98939570f9f6b5c2b4168e5c93fa5c20cf7
SSDeep: 12:05ufnnkz3X+UWFSPbPYjSmuCTk1y4GiBVKq3F8anwRVRYIvcZnm:05mkz3XEUQj4CTQy4ZB4Q8a8bvem
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail.SKYSTARS 8 bytes MD5: e3cbe434b83ad3a1bdec97c0f88675bc
SHA1: 068e883802b283cd7512ecedca30295d90174d46
SHA256: ffe9d12fcd5af6e7633ffeb13d701c33cd50ef335ba5fdb2eaac6497b45a2da8
SSDeep: 3:dg+:e+
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini.SKYSTARS 184 bytes MD5: dca6b4e34343e65733b90c33c039eaaa
SHA1: 69502d18044bb635488e149f7b002bdfd42c572f
SHA256: 7a56fb65507d6b5e522f7a3b9a279145cab274e512d110401b01689bec8bd578
SSDeep: 3:RZmLM+kKfEmnvjaWnp3QPdLiTqrYkWgV6W3WR0VIP4VMLaA1orIVjKVdvm9N7CbS:/8Mefvjtp3QPsTqrYkhYqW0qP43IBOdo
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini.SKYSTARS 480 bytes MD5: c0f2d34bd5b4fee328924f0696c07e58
SHA1: 0d2a2f367c30b5bdcc914e3c4c7aeb20fbef06a5
SHA256: 6f50ea5ca822d6d7ff7030f85db997aa134eae6f368309aeeca351a463304b6d
SSDeep: 12:0t1eHZpmrYkhYI5GOtDqnr9q5uml2OC3KfrK+zO329kL9Kk:0pNhYI5GONt7s2rK+zr49P
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk.SKYSTARS 1.26 KB MD5: 9df2c536e68324ace8394493964aea3d
SHA1: 3e24ffa8cca9b5a27b92000c3e624eb482d282e1
SHA256: 4342e92ef04a817137acd5cdb54857ea87758f8465c8a5d8214028e16416e229
SSDeep: 12:Htt95jhezLr62rMqojqZKunqZKuZnbeXtSa9M5S9OsaWFgRRRRRRRRRRRRRRRRRQ:H7O62r6ujuZn6Q+MM9Osvoy7X3
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini.SKYSTARS 688 bytes MD5: 3373d343cd888c8991ae0820462779ad
SHA1: 03ab8594f7ea7bc988a5d338dd5b7e89cf6c685c
SHA256: 629448fbe1c0cd89fc6cdce88633286e8d7ba5d36b48a0f3c65ddb1a4159cc75
SSDeep: 12:EMUYloRAfBmYufXNJW5ejz4n0D5GOJzVmeTrMqoU841t1t0r6q7+9CN80D5GOJzs:EWs8mYoNcwg+5GOJz0KrXxtu6P9oB5Gt
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk.SKYSTARS 1.28 KB MD5: c166d3906e50c0370594b1da35e0349d
SHA1: 07ca4b35bce5b75598006406704a7a954e645301
SHA256: 5c3539dbe802ba804f09faf67b5301d08adf0320f9a07a854c0f5ab690df7637
SSDeep: 12:/6PMlu1Ap96weTrrGBtfcjZKunqZKuZnbeXcdncxdReOsaWFPWXpRRRRRRRRRRRN:/Psg96wKrrGLujuZn62uReOsvsyVQZP
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk.SKYSTARS 272 bytes MD5: 44625df94670f3b2e900857f75a8bae0
SHA1: 50d748486e81efc21c5a8bc62a15995000c50979
SHA256: dc42a200df3cbd81df5a6958e1541e5ee5a84a33b72f9a54fdc09ae0b345e059
SSDeep: 6:2L2y8JsGsGVBbp0dPnuEhBD3ANKn0WXOe9kr62rMq+fakgcJ8ybVGsGR:1y8JRRVBbqRuErEKJeemr62rMqoau2yC
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer (2).lnk.SKYSTARS 1.20 KB MD5: 81610e516de1b0b1f6ae88ee420b05d7
SHA1: ca862126f94d86126a3d74ab3968e3b3cb9493af
SHA256: c7651432d508434aab0ced20999b562b20f3684b74b82096d511fb3103a4478f
SSDeep: 24:wV96wKrrGXdjuju8zlFmsPdnCAZC3Axd3AH:g8FrGNii83msPdCAZLxuH
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk.SKYSTARS 1.34 KB MD5: 29e5c854731178919a9e037fd871e6bb
SHA1: 13646f48544d9e6e3078837c92f486aedec8db81
SHA256: 38f69b0f6bd79562b99a159e6170587a3f70bbf2ef78787991006818494b0b19
SSDeep: 24:OGZzTfkl62rY9HgjujO+rSTq4Wg842/PRN:OYnfGqgiCUShC/Pj
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk.SKYSTARS 1.23 KB MD5: 939dbcdffe563eaf29e7879e2efcce0c
SHA1: abc7ba3606d4900fd321a7df8ea3ff90d5a6c264
SHA256: 03755d9561ef5f7cf5c41f78f18d77bc6fba5e153d0378d32ca6a7067f629367
SSDeep: 12:jpF642zLr62rMqozHsqZKunqZKunqZvyDxqMr62rira2yljQRRRRRRRRRRRRRRR2:7w62rCMjujuWexz62riO2CjImzr
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk.SKYSTARS 1.24 KB MD5: f9f9d13585b31568c2bf7b8184128c74
SHA1: 7c3ef130652b691774decf641207d38a3b0617e6
SHA256: e800763a036c6a4649e58886bcc9413c208cfec65ba04ac4d027d365cc8a6ea6
SSDeep: 12:9Km76uzLr62rMqo5MZKunqZKunqZvyxs5qFIO9kibIeTDGRRRRRRRRRRRRRRRRRp:4dA62rOujuWkEbO9ki8OO9gERN
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk.SKYSTARS 1.23 KB MD5: c7fc658193e010a7dcc49a3c23e58cc9
SHA1: 95d26a1d16296f93c568aff2060255823a8f54bd
SHA256: 9fd0df1edd1319b017569bb0fe39bf1dd9c49f3f7509a9f2bef4850066adf7eb
SSDeep: 12:tLyEYp96weTrMqoedqZKunqZKunqZvyhqGeHr62rWa2yl/QNgRRRRRRRRRRRRRRb:tGEY96wKrdRujuWjl62rV2C/QN5Hc3cQ
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini.SKYSTARS 744 bytes MD5: 94e9a3488e1fe901d06a893b7f790f77
SHA1: 7142fdc8391c6fa55bceb8bd4656434ceb3f3e6a
SHA256: d493dc72339974720efc2b531d8dc0306b6eec41b9821867e17371d48bf83c22
SSDeep: 12:xUYloRAfB6WufYQN2t1t0r6q82tPrt1t0r6qj1++YVrt1t0r6q7N3aOC3KfrK+zv:Ns86WAN2tu652tjtu6KKrtu6Q342rK+b
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini.SKYSTARS 184 bytes MD5: a75c0f45f821d0d8511a8df72fb42935
SHA1: f170953594dbf3dfd7682e0bda569db323f1111f
SHA256: 11a4025cdb55de8d94fb6a863e26e82155de6e04cf192e42b6ca8de81414798b
SSDeep: 3:RZmLM+kKfEmnvjaWnp3QPdLiTqrYkWgV6W3WR0VIP4VMLaA1orIVjKVdvm7vetpm:/8Mefvjtp3QPsTqrYkhYqW0qP43IBOdM
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk.SKYSTARS 272 bytes MD5: 4fe38b57d8d9fda22d299759ea7603c0
SHA1: c82a5c85b6a4eeb46beaee74f5942a68e7119e5a
SHA256: c7c705415a18b7012a66eeaa53d226fba7377d41aed67c6ba541ead89090e387
SSDeep: 6:2L2y8JsGsGEQNHdp0x8FuEhBD3ANKn0Wbkr62rMq+fakgcJ8ybVGsGR:1y8JRRE+HYxAuErEKJ4r62rMqoau2yc3
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.SKYSTARS 184 bytes MD5: c3bb96bfca00125ca775c0167633b480
SHA1: 15b220834549d326960c5d86b48b7f99537c436e
SHA256: 41cb3f0985f8e8cf34c3898c99ed5ad1139964f879dbc35844c58be6ae4ce468
SSDeep: 3:RZmLM+kKfEmnvjaWnp3QPdLiTqrYkWgV6W3WR0VIP4VMLaA1orIVjKVdvmYLWbi3:/8Mefvjtp3QPsTqrYkhYqW0qP43IBOd3
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Themes\TranscodedWallpaper.jpg.SKYSTARS 627.92 KB MD5: 35ea171e0c3c0486a3d6cc38b4228f2f
SHA1: 85540fa932e50b54c9a53047ecd74f220a7ed7e1
SHA256: 4d261ee78039330496edc9f6eb344f0a7bb507101152ff88a0b7cd64d18749a6
SSDeep: 12288:pEHGLtveUJyFYZOrF1pTFOEsnNzhky+7XApcn7+iAUz8RWhPC5UEXi:LLtvpJyFYZQ1pTwfNzhQXzyUz8RWqhy
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\profiles.ini.SKYSTARS 120 bytes MD5: 4de841f45beb54f95b6409d32e843b1e
SHA1: 15eef9ab7fdc4af03659613bfdba2764d69c04ef
SHA256: d77b2a50907b61fafc9e918458eb47a86e72e15615ee544d82c925a4b5c938e9
SSDeep: 3:pXLTy1qv5+BS/fg/6pq+Zndiv3UAVDViFSlxn:9bh+sfg9+ZnoJDVicx
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.SKYSTARS 16 bytes MD5: 61536fd236994337ccb754a9dccb1fec
SHA1: 3daabd5b7e6f02bf0f7c4baf93dd841139e6af46
SHA256: 6cf0af1bd7b239ef16ec85052f3a661ee6bb99ca856bb7661c5db8f2a8bb2996
SSDeep: 3:6YQuay:ZQY
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db.SKYSTARS 64.01 KB MD5: ab50365a9c27d664d8b1400ad436b946
SHA1: 79557b48802443d32200bf2b7d44cd81cca626ce
SHA256: 36f542fcec642ef88255478886e7137f5d5a8963fa4a6ea3e72eee04be7f716f
SSDeep: 384:ZiPa7HKTY3l8uPeI7mStJ5w2aYcUsiR/5r3:UPa7H9V8uPZmStJ5naYcUsmr3
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite.SKYSTARS 224.01 KB MD5: 13a8cdbdec0fc9c3f7a9c5e25d9d8266
SHA1: f88d9fc9650685cf91b21c345fc259743eabb9a6
SHA256: d8daa0361ca5407c930654e5047ad87602b9bf4ed7556a852b89844768002b2a
SSDeep: 24:rndRjd+bwbh8gkXLL3H+LYRutypULVfqihIHpihP:rnH0b8hILri1cULwjJe
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.SKYSTARS 512.01 KB MD5: 113fc9cca6697d29c898ecccdce1c016
SHA1: e1020254b415b186693a0a9bfb4dc9f2b97322f4
SHA256: 8704c1e40f73e4dae1e1a2230635c5c00044f3490e9d2a3727b134c7db1fad34
SSDeep: 48:RAg8s0Nitt35k45CidOjrBh5RKAl5IlZfEl585f4Slmn+gp360o4mWY:RF8+tteedclh5RKcF5Afm+j4/Y
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite.SKYSTARS 96.01 KB MD5: 54baf211e29a3272fb5c32083a29cb8d
SHA1: 535864ccf176204752aa1aefc94f2b7f11f538b6
SHA256: c3f4a176e48db4cff964b5c87996083ffb003360ad973e9a2f7b95db7636a0d3
SSDeep: 12:cF9YRR8EkGRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRb:daUB2YWa+aSq81/84nSP3bPSX1+HMle
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini.SKYSTARS 152 bytes MD5: 23a65fec5c1cf0d32aab10fd6c7e0aec
SHA1: 9f63519229dcdda62159a9ca925c46fc9e6d2da0
SHA256: 800eee2ff28997008c05a401adcea09d6a7df06f713f504b356c877e07c2ff88
SSDeep: 3:l1xxKfJaELwVbcpV0SPq8/Amu2a6owtMgZ9Fi0eEK0Uyrp57RgMqn:l7QQEPV0H8/AC3MgZ+lEXb7RJqn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf.SKYSTARS 1.26 KB MD5: b87391ae768cd86d3089d16ee073910a
SHA1: fc7d4d3cfd736ecd5ac4f743b6e43af52c9a2832
SHA256: c312b0f084d2bc6eb09f320fd919b3354939ec0f53d1aa44afb372603e4f6913
SSDeep: 24:fZDTPW6TpM4vLIgPlyjVfu7fWjg5y4tWzZDnGhwYV8xUbx6gnGqxr3+jMG6TpMf7:xDK6bTIgPlWF/g5y4tmDLYOxgnGsrCvD
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf.SKYSTARS 3.74 KB MD5: edc9f58ebec7eb462abd8476fa706077
SHA1: 4cfb4ca4de09a47015da301c5470e71b37c9dd8f
SHA256: 6b0465d7f407a520c78d8dd695596975201f295717ae009fa466f3cc6131def6
SSDeep: 96:JP7doOI/21yPKq/oDcKutIkOcKrtK3tXTNPkdgjMaAi:1doOI/GyPz/JCkvx3Pkox
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite.SKYSTARS 64.01 KB MD5: 2a4714099da911c3c11ad1b95dbfab4a
SHA1: 6cbf2284fd8b027b8545ca216ccd2a2a18e637b8
SHA256: 185c55c7f7f19802f29f4f037d6431afaa82e0f7cec6c6b33da5389293a71ea9
SSDeep: 12:G+xR9YJRRw4l9RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRd:TxNKSrLYqMtZ921zBJ6hpNVwTccCqdK
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat.SKYSTARS 3.52 KB MD5: 2926fb84bcfa85598a7a071c4fc5fabd
SHA1: 289735b116c64620ebc8f2fd9c3cd454eae4d550
SHA256: c45d657ee9649afb8216cd4863f0562afd75df0cf06a1935e6ccb7425b36c928
SSDeep: 96:bIv2/KuCbBLSY/Vz518P56lfQ92I5lSzj6Tw:jCuClLSYtWuP5nn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak.SKYSTARS 992 bytes MD5: 957a5d8a3fb6c95e470a2a2a1a2a0a05
SHA1: b3b2b9cd226948b77f51c2927d287f61153ed56a
SHA256: 344d302611f3e4b084a223d5c8af2e423a8a6d8a088c6a6b2f439a4ebcb020d7
SSDeep: 24:05m5xqz+UkXXi35ByCF+1uMCiGKreWuCZ8goUCp:Dqz+1Xo5ByCFCuMGg7pZLCp
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js.SKYSTARS 2.95 KB MD5: d9e2279188417318b85ad7f537e11590
SHA1: 6f7b2e069e6a3b7d2a6c14a8b26d6ded1637f440
SHA256: 8a44eeda6cca8f313170c6e7b190fabd05d4df24116a68cb0d1b4e38d6ba7602
SSDeep: 48:s89fCqWixpzThy6L50CmXmbI4htjk9OdeI2PzxhJL59HuMzyhCYf94v:pNCgFn50CRbIGFEIOVhJ7z+1f94v
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\times.json.SKYSTARS 40 bytes MD5: 0002ea02a8780d680e31d75e0906b243
SHA1: 727f52d2dc8ec9aabfbf81447a4457e572a26962
SHA256: d703cc8b72c9e365c9e384f34f99eaaced6c8492111a1a1c99657639a8b3a669
SSDeep: 3:lDY4mGdDG3n:lzdyn
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite.SKYSTARS 96.01 KB MD5: 4ee81d36dd2fb143febf15c92db771bd
SHA1: e8d8e08e7d438c69cbbc3ef7dea4671f259ae02e
SHA256: f676297adabf6ca3765bd0aec80a8b3249d8e4d7979b1d57825f92c0513adc83
SSDeep: 12:y0We9rRRRqZcRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRZ:sZAAgdu52bUQ/wHI
False
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json.SKYSTARS 8 bytes MD5: 570d45d59988c8c7496884d88000ce06
SHA1: c3cb739e7d5fbaff934849a3a7a814b3b50cb275
SHA256: c610fd33388aa0aca4df27f9cf57b81e3f53ca3e673e50367ed5f1794f1b50ea
SSDeep: 3:4:4
False
C:\BOOTSECT.BAK.SKYSTARS 8.01 KB MD5: f598aaa42dc3f82a226452042d779321
SHA1: 0fe6abfb170e7d7d562aa948300af4c5c51a7c32
SHA256: fdb66729381dcc48d272a6662191d6db5ada39d6f666420b0b102539ac4a9dc7
SSDeep: 96:iaM+R2XOIClTnyrDD+kym1eiKFag8UWXY6nRwVSRDck61wb:nM+R2+ICl7yr2kyliKvVWXY6nRGSRhjb
False
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.SKYSTARS 136 bytes MD5: 7556c609b7184e0edcfa3fcf8e276126
SHA1: 2eb44c9a5db043e2943ad9760ed9b1f7a643e9d4
SHA256: a9a683bc33f2ba45e92f6454407d9a0201225a503891e4936e62bddfa1ab7015
SSDeep: 3:a6T1J4ldq0YUo3jEaYobdy57AZ/PFqRDebNtRf5H3l5ueGEn:aweldqCYEai+ZHF8eptRfJ3mq
False
C:\Boot\memtest.exe.SKYSTARS 474.38 KB MD5: 2fda2d98b2b589c3c0dcfa84a8317319
SHA1: 3fbfc59d97e65b54505c5caf45be32a6b61253e8
SHA256: afa199843d9cd25693b4415d88b7a2adaf24750fa34de0e46e3cd2e562795e12
SSDeep: 12288:+O2dfkeT54yuRZkXIBoASQAc6lSwAYgEnTWdctCGX9/0:I4yekY+X0JJ+V9/0
False
C:\Boot\cs-CZ\bootmgr.exe.mui.SKYSTARS 87.09 KB MD5: bc22ac2259e5ea5ed3a27aa7558b942e
SHA1: 078ee482073e1164116c7d793986acb606c1579c
SHA256: 432c278449d55a8dc89bad5758eafed6c33e5cf9036a60248857cbf8038bb055
SSDeep: 1536:OmMINh/R6s+ke8wWC44jkLIGzsZad+I1l:O2NhL+C/UYIVZaxn
False
C:\Boot\da-DK\bootmgr.exe.mui.SKYSTARS 85.57 KB MD5: 0c95241c08e7132a2bf4184a89e63fdc
SHA1: 98168482aea81b9daa0626e7a8a6ecf22c58c022
SHA256: fe3377ecf4824faa300f0eee234b1c642e139c25fa32e69929b7c1cdabc1de10
SSDeep: 768:Kr1/t8HI113FhnFC0//Z3Fk3FFl4iTW2gVho4ukmanJ2I+3h7QnRa8lWWpCGNpmZ:xM52Qo4uvGWWpCGNENpJx0tmoVWYQ
False
C:\Boot\de-DE\bootmgr.exe.mui.SKYSTARS 89.57 KB MD5: 1ab49f8e7c7061b9dae1750c299782cb
SHA1: 5ecf578cc3978e8b8e35fdb16cc9eb7ba2930f47
SHA256: c060c81c6f4c3733f60dd6f46a710781cc4c073639229bb3371f991540d69059
SSDeep: 1536:JuHL2zcBcEpBqG1UYqJkcG97JODkKbetmoVWU:kHLVn1CEOoKbe4U
False
C:\Boot\el-GR\bootmgr.exe.mui.SKYSTARS 92.59 KB MD5: f59b17bacf78f52a6839653db7ade8e2
SHA1: a1d065d347dc180f336da095734f98d4ef05bd69
SHA256: fdc37c49d7f70723d618363ce438164f60b3136b275d979fd99abfa214f4238b
SSDeep: 1536:5ALVxC1xVuIHP0yG8k96TO47NjBP0fOsSd+r:KLHCnYu0Klfpq
False
C:\Boot\en-US\bootmgr.exe.mui.SKYSTARS 83.07 KB MD5: 54d0c01bef01880e35a4d27d403c9bc5
SHA1: 506905db617f9adcadbf1b33e9729a9fecbcf788
SHA256: 20f39679f56b13d5bc96ab8ac6cd84ea0a89965d91117e3323d545ce588a0d53
SSDeep: 1536:gjbebNtUPXz/0PyYnh2CizFStRkNI41etmoVWzB:gjbebNtAj/2izwtRy1e4l
False
C:\Boot\en-US\memtest.exe.mui.SKYSTARS 42.59 KB MD5: 67cfa614aa1d0da992ec048d0936a1de
SHA1: f83635ed6b1e0cd919efa508d39275cd23870e9c
SHA256: a68df40a913f5023f2289595e2775e535375446822a2b13d6631c0c9818fb560
SSDeep: 768:ep+0Qw0Lr47RbV8ddA4773XjM7uvIBUX2DzPEDqoTzYd+9S9a:r0V0HyRZ4/MdGm3MDid+v
False
C:\Boot\es-ES\bootmgr.exe.mui.SKYSTARS 88.09 KB MD5: 1c2d7114b3ce66b98ef3d76ca1c802d7
SHA1: 25486b7bc851b1e62f8e85c8d21bc70e2bd3c66f
SHA256: 94b10aaba37fbdf7fdcfe80083c9f2d5a01e7d5411e094463ad4245209d060a1
SSDeep: 1536:oEBVbVHVt+5auDAbAq+srE4yeIby4d+G5:/V1sqqle4y49
False
C:\Boot\Fonts\chs_boot.ttf.SKYSTARS 3.52 MB MD5: f25540175753b907483e9247bed17cad
SHA1: 5180ddd64eaff466acb74ec4576ed0835feb1631
SHA256: eea7bb8e8cd23db9121beb4fc8ec4a503c39b71551ad579ef6c38d031badd625
SSDeep: 98304:eV9RnaFa4UpuJtUKEaxnlq+xyNfVEsC/17o7DV9u:C+McJ1xnlq+xay17o72
False
C:\Boot\Fonts\cht_boot.ttf.SKYSTARS 3.70 MB MD5: 5683c375ec8a95aed1e5b5e748c33195
SHA1: 504f99ffb97d3f73d7e8be550f3d2053538f5fbc
SHA256: 1fc08986fd0f7bd5a760e7a544998f48291534cfddf05a93a7c99cb81717329e
SSDeep: 98304:yVAvoSOUdRcSa5qJx8jQbjGuQVh8htYes:c+RcS4CjWL83Zs
False
C:\Boot\Fonts\jpn_boot.ttf.SKYSTARS 1.89 MB MD5: 7e3ce84a02740c8522042b0e5a5bf39a
SHA1: 3be0766c56728e232ba5d3d32a8192fcf0fb24c8
SHA256: 2d98cc8e38c3c732c7149395185e4151e309c11edb0e8a3f74fa941a381616c2
SSDeep: 49152:c5br5jTABDIcUu/AyHnftS9riyOElcyTMdfpm:25jWDIcUu1HnfsNOA4dE
False
C:\Boot\Fonts\kor_boot.ttf.SKYSTARS 2.26 MB MD5: 23c117232f84387d3b63efb775843bcc
SHA1: 1339c1fe1ed7bbd4618634897fadee13bb0f034c
SHA256: 55a832c1942a0a1942aef9140cb5ea4b8d932f6a33916ecd38b0a002a45969ef
SSDeep: 49152:EO0i+C3WipZfIOjbudSsuHiJO9QLVoSO/Q0CIsvbtDLVGZg:EqWuIO28sPY9kVfO/tsvpfoO
False
C:\Boot\Fonts\wgl4_boot.ttf.SKYSTARS 46.34 KB MD5: cbfd5c7ec2f3f61f1bed39bc79757c98
SHA1: 0615256289b38a9c85d79061d56818d5745f89fb
SHA256: 23f94ce89f68a6dd1a39bbd31e8629550fa50d85d753932747d0caf0fb2955b2
SSDeep: 768:3zeZ27sNJUaHriVb2cQ/PLG9CISYo9Dn9Weaj+DN9lSheMJ:3CZqsNJdLiVb2cQ/j2CIyVn9WRu34t
False
C:\Boot\fr-FR\bootmgr.exe.mui.SKYSTARS 91.07 KB MD5: 23ac2402bd0fdbb156e2395905a6c372
SHA1: e71b6bb59a39853e7056fea504cc7c9c20eb1426
SHA256: 6f033de85a7e22a2636325c91e6f18f1b94a48b1904a589633f14e4f95ee1323
SSDeep: 768:MUjAfu1hm23FGn3FeeFcmhR+EHiWCj2+rwjF+Bzda/nbojOy7i+2g8iIX9Glrh/q:Rsu1hmZ83njR5unRLA3Dlw3tmoVWM
False
C:\Boot\hu-HU\bootmgr.exe.mui.SKYSTARS 88.57 KB MD5: eaf3f0019ad028adbfbba28a5b4f5146
SHA1: 4ba07045c159763a861ae72046f65ef68dcb6045
SHA256: e0cc0b2a94611f2dfb4405bb20b2422b98908a0f632728d862fd65c5dfeb1008
SSDeep: 1536:7bsh1hgHQ3SqGHyg07IHtpdQRdS3MMocjgDtmoVWH:7bXHIpAyRdS3MMocjgD4H
False
C:\Boot\ja-JP\bootmgr.exe.mui.SKYSTARS 74.57 KB MD5: 7708195590b3237253b7099a86d3a98e
SHA1: 12b61e3c708ca4788196e39f67457b57f53f8a55
SHA256: 4961f518f05ef8e8cce454759ef8b969ce2808cf79cfe2e58d9f32c62127ffae
SSDeep: 1536:mqzIiZtA2Ue/rquTZlXNXzmnX+SV+dqR/ZtmoVW3:mqzIi4Ve/rqAlXBzPEf/Z43
False
C:\Boot\ko-KR\bootmgr.exe.mui.SKYSTARS 73.59 KB MD5: 87199cf7284bde2a65b295cd1445e10e
SHA1: d38f41b472f937600366b7609f69e374b4d8cf77
SHA256: 3e8b36472a09f1c224e6ba00c639006dc3d1f6fa297943026f096aeb58681237
SSDeep: 768:kpA13Fhn33FhOPjbR3FhIQYE3FhiJaXJcFhXEoTHVFhiO6nYPTFVi+kBXgB9fBGi:sAEPWmsEo8D4EwTABQNd+s
False
C:\Boot\nb-NO\bootmgr.exe.mui.SKYSTARS 86.09 KB MD5: da79dd016386858d842f7fb3064f6bd8
SHA1: 738b3015655545f20f89c93e79fe9264218565e8
SHA256: e2bfa39aa27b770c33cfcf5dbbcf669c2717cd72820fd3e45e3b0241659ca8d4
SSDeep: 768:ZZ4PZbz1C98gJzF0tUt96JzF86i0bn8kPFu7+I3FS5Dze2TzjUsrYJwPcuCcnMtK:u1CVJ6496JiBkHIUDsFJSrP/d+S
False
C:\Boot\pl-PL\bootmgr.exe.mui.SKYSTARS 88.59 KB MD5: beb213a9d2920ab4b105608f0b94aa0b
SHA1: a9ce2f774bf8b30d4c08ae0c9e8686a1e31fc1a7
SHA256: aac8837ab8ad24de2c89fc91f25434fbb1b67cf4c9d69821e2330ff62a481d00
SSDeep: 768:K3dH8ky3FMk3FMYWkO7RRDGIRipjjVx7FwyCWnfo/vGp8QVQiCKMGrg8d0BAIKb0:qNgODMVBx6WfTp8eTkro1id+wV
False
C:\Boot\pt-BR\bootmgr.exe.mui.SKYSTARS 88.07 KB MD5: 3b4e57cb5bfee01a0d3f253f9f57378e
SHA1: 83719f1c3a94df044d4c76d46fcd40a765f4cd6a
SHA256: 37b57eb531fdae6483fb99ece69b0b29798429ff7e15e3255defd43a8c0f2178
SSDeep: 768:3ELaVkt6z3F13FeAT3F2KnAz3FolCS3Fm3FdxsJtnEhZAFI6jP7JWTiyl8TwMV75:UCkgVgjcEqP7cC/9UftmoVW7
False
C:\Boot\pt-PT\bootmgr.exe.mui.SKYSTARS 87.57 KB MD5: 83ac54371e5075a2116545119137a59a
SHA1: 2a312e2ba394aa7f5dd832c030eac1b8904c6b3e
SHA256: 3cfafbfa07c70904c9256b9a0d7c31e982d0d25c0dec2827496107840f4fdf38
SSDeep: 768:7yzDj6TNZ3FYTO8G3FR8HiTBTPWTl3FXF+zy13F/qTt7TY3FXPxli7xxliWC4F/H:ezDW5YYDYc7VySlmQtmoVWi
False
C:\Boot\sv-SE\bootmgr.exe.mui.SKYSTARS 85.57 KB MD5: c18220e428ab6692dc7f562b9f3ac891
SHA1: 0136eab5019a11cc60d403cad90b3faa26b9927a
SHA256: 3d32ffc25aada672fb1b150b9860f09f9504334a74c4d8aacd9128c4be5f12e8
SSDeep: 1536:5nHBI9WdXBdr8j/uTU6bK9lqCsPtmoVWADA:+fjEK3qCsP4ADA
False
C:\Boot\tr-TR\bootmgr.exe.mui.SKYSTARS 85.07 KB MD5: de9f5bf1deb400a76ec83743a8a72753
SHA1: ddc2b933f41c05b97ecd655b240d8ba2ee76b881
SHA256: 1be3840e7e32ce5b5637360e87e4badb0b2deb2ee72ed51ff8aff41b9e461d27
SSDeep: 768:Cv8pgKTbqg13Fh8gG3FhE57RC3Fh3LFhQgxt9pG2gA/Fh23Fh6h+iUYoFhwOV7N7:8HKafc5aYUpxJE12eDZigtNshctmoVWk
False
C:\Boot\zh-HK\bootmgr.exe.mui.SKYSTARS 68.59 KB MD5: 1bcb793512b435fc7c970d2a85819165
SHA1: 846e5445a03e1256baf489c017b5e7aeb4742600
SHA256: 69025921681ffdab3ec6bb1b4c1b1b7ebbe514d675f03b71511b35332ec02ba0
SSDeep: 768:0DTL3FhKi87n8G3FhJ4oCL13Fh+bV48XvnqrSpkSMBVWlNNEm07R3ZywiGjISfow:uqHnVCL0R48CrSySKOjYECCfd+V
False
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.SKYSTARS 16.19 MB MD5: 3d163cd75f3da06ff78c86e047b4e2b3
SHA1: 78ac2c3087bb3492eca087c5d9d8335d293c34f7
SHA256: 169ef788c3b537152a33c9d4a8a29e439df6bd54a5b351b1bfa652c278cd0f70
SSDeep: 196608:PYfnbG4Q+G4xT+zdail3nS6UsNMwANK4/5Wscsv8NylTnfkymUToK:PY/bG4LG4xT+z8il3nDHMwANK4hWscs1
False
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.SKYSTARS 2.39 MB MD5: 6569899cddd87fb5741e42401088046f
SHA1: e48dcf7292a9cc60ad504f2acf60e3c93ef4d985
SHA256: 369681733c466445fffe1498a78af41f86d9710218e1ce0ce541b347b219b4c0
SSDeep: 49152:/rAmIK39mx5Jgcr8p+3F37B6j1CusXCA7tYMro1JXGQox9:jAmb9i2vK8Is1Vgx9
False
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.SKYSTARS 1.54 KB MD5: 65f22e127f5d0bb8f0d0d610c3e6d22c
SHA1: 588c8af2a61c969f3eee34a1df7cf0d865f6cc74
SHA256: 72528f8c3a8cf0d2f9a2cee9c64cc01f2b97eebb73f94ec7ded80b3faecbe0a5
SSDeep: 48:HRozFQBk7ajz3hkzR7kj3cSMBa3lBKdVvikaaE:H0i2mjSnSaQHavC
False
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.SKYSTARS 2.39 MB MD5: fc180a93e6d15799fe02368fe7c3416e
SHA1: 9d89aa0b5917a2256170b71b388c19554fb8117c
SHA256: 8a802610670820a1fd927e8bc8bdf0e6df7215e2c0c2b466d14e72e8ddac7db2
SSDeep: 49152:drAmIK39mx5Jgcr8p+3F37B6j1CusXCA7tYMro1JXGqwA9o:hAmb9i2vK8Is1V5wA9o
False
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.SKYSTARS 1.42 KB MD5: fb0f73c030ef7ef505fcc0643b76bb8b
SHA1: 349a565d22de7130f90000042c17bda0b83da7f6
SHA256: 36d89aa8f2cc00af967f02d80f6f254ab53e3b84948522a2ad00164b53dc538d
SSDeep: 24:h25z1p/BmatMHZ80fu1mq0+9hEeDNGNzhB9rp96x7dgtiUGvZoi/KkYH4xUKSFLN:hizPty580foe+7EIGNzPTwfMiU9iCixK
False
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.SKYSTARS 67.10 MB MD5: 3ce9b62a45e693566c2277725226d6b1
SHA1: cfadee2d28a30a0844802e126b5d3bba15241caf
SHA256: a10a4ef28c0224335f90e541e9fb1a84883bb3ca5aed04feb1692ee5b3014e31
SSDeep: 196608:BPmxBFVioqkHFqK5WldhibNvL0S4ARxZECRuWakWztJMfVC0rgSSg3TtE:8HTbqkHFqPkBzyAK0uWakcvEVC0cx8Ti
False
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS 1.85 KB MD5: d4ae8e1a6bf1a4bd16e9e309dd3d7af2
SHA1: f957b1b55efd3665106e48fe7b58e70f5e52038c
SHA256: 9159cde0796d01ac7be625b3c28e87c751259329a470490aaca6ff2ccdf7cab8
SSDeep: 48:Yzf36q2QTRT+AgmALHpKGogpwTJftPA1CpXp420C99XA:6SQTRT+NmqogpwTPPAQpXy2bU
False
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.SKYSTARS 2.40 MB MD5: f26d78b6f9ee39f67d01d33e2007f708
SHA1: 9d17006d46e7a759e1d56cac98e41dd384d69205
SHA256: 70ab9e54c205d57d0a159cb751675e23c04bb80777a5ae3a1b25ad96ac7a3eb8
SSDeep: 49152:BrAmIK39mx5Jgcr8p+3F37B6j1CusXCA7tYMro1JXGttS:dAmb9i2vK8Is1V+tS
False
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.SKYSTARS 1.42 KB MD5: eed50f4f563e2c0ce79c199be17df8b3
SHA1: 1309574d61fcd4eaa3542f714a27a1a13be5d130
SHA256: e7a7b4ce44055b603e8b43268e8c679767b3e49391bd0000bd957ec5a452d74c
SSDeep: 24:h25z1x0QjyBgbw8p4rkkGGHEcO7rlVsbhfXgJhd3zqzhFUOJhZAFwYSFLU4MVlRa:hizY4Qmw88hGgEcO7rqhfqbqzzbAi1hn
False
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.SKYSTARS 9.50 MB MD5: 5123b05e39c53bfd682f36aa7a8a6d91
SHA1: 1327d6a4b41f77f8893fd9d028dc0dc6709c1ecd
SHA256: 38224563892bcee493e0da05ee66a3ce88fbf590548a061c8147436e26c187e3
SSDeep: 196608:xxFPy7H4d26buxFa07dX4OgK3lyV+1X2+XqXWgJK:9aI26KaopI5agY
False
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.SKYSTARS 14.13 MB MD5: 943edf9a60cedac4940fe0f6f689be7a
SHA1: e13b305ad426e6c74c2923f5750e5729b9fa8a05
SHA256: 1607ae081ba4080f75541d790820322805b467f3b429aa5d7f7ee3382d7084f8
SSDeep: 196608:cHnagBgPZU0X1QE6cA3DIg5TZ1U9Jl6GzE73xZeG36/Ct2HFxhp3pQh:yYPZb1QbTTPUHl9IDVqk2lxhp5Qh
False
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.SKYSTARS 2.73 MB MD5: 8495350570fc42ffeb319b81aadc8aa7
SHA1: 490e77b478124672a53d7ed127f5388ecddcc6ce
SHA256: d09a8c379d103fb4d7aa3e3873603071714e61bdab5da553646c110efa4bd41a
SSDeep: 49152:4rdEISLHCp5J3aSNveo9XeV0VK36X1CWsjxD1tlMre1n0GdunjD:qdEfHWhxvL9J90F10munjD
False
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.SKYSTARS 3.12 KB MD5: 273f0f42d9042a2c7233924ee15bb92a
SHA1: 353cb3473689d8f868525c33ace43fb1f43b1b15
SHA256: 09aa2e543264ed50542d7e8b6f7588ecdea36198acc4756ab60944972f06cb23
SSDeep: 96:XmVbMmTBD5qyCfMare2O8uyJ+gNmSnRb7aPbyuvhifdlxR:2rf3Eh+KdpePv5ilXR
False
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS 4.12 KB MD5: d1afe54e11a6ac684677b62e13a07514
SHA1: c904d134f3305480ffbf8275029de588fed9a984
SHA256: 2dd9a64c4a23fcfc6487118d8b2b96062ab1a17b2da048246135689c870a8fa1
SSDeep: 96:84LzeS4kqSD98TAELFr1DRsfKJGF4ur077sW/x:Ls9f7RFturSs2
False
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.SKYSTARS 41.78 MB MD5: 3d736832956e5a3f23cd19b090c69977
SHA1: 91c65461dcb1cc8b16704f8a09c6f670aff9ec12
SHA256: 41eb7b4f2ae2efdcf01ffaec8ac7d183aff140d708e203c08c5ecbdc215ebf17
SSDeep: 196608:5xjfs/Q9GkNwPUxWO31AZgwRirfDb4v8vaM9v1NKHbH1wUoo:3Bj6+lccj4vQ9OHbH1wUr
False
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.SKYSTARS 2.41 MB MD5: 58928b4447a48456bbd8dfdc099c1c4a
SHA1: 1bc736dc5260a4599b63f045d38c1020461a99b0
SHA256: 99f1a4f47e952b1a6ae4cd2f8b29d03087e4556baaf093037da475d132f7e61e
SSDeep: 24576:fOgg4/UM6CQ7Iy6eV99Oo9zAos5G69gbne9KCqXpXkLG6Sw3XfOjLkPcpc8o7w6Z:GrAmIK39mx5Jgcr8p+3F3l
False
Host Behavior
File (8915)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\-MKqyxYjc5JRno0_.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\-MKqyxYjc5JRno0_.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\4su2oko3I.odp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\4su2oko3I.odp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\5uCl6.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\5uCl6.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\76hRSKD790-L.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\76hRSKD790-L.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\9Vfajx59Z9Z5.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\9Vfajx59Z9Z5.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\aajrkz KC.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\aajrkz KC.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\akWullZV3EwuyRnw.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\akWullZV3EwuyRnw.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\axiblyMnDJq6wybsV.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\axiblyMnDJq6wybsV.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\BEthdv.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\BEthdv.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\CPySWMll AnWU6bLZ9.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\CPySWMll AnWU6bLZ9.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\E5dSTIR0F62ceIRi.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\E5dSTIR0F62ceIRi.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\eDeJvIUF8LXYojXe.xls desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\eDeJvIUF8LXYojXe.xls.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\iJAd4NLQA5m2_U7sFDwi.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\iJAd4NLQA5m2_U7sFDwi.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\k8AKeCkuzc4HIIi.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\k8AKeCkuzc4HIIi.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\KczBX1JhveWm.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\KczBX1JhveWm.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\LdyKq sH.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\LdyKq sH.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\OXwvMzo7VU4DQ.ods desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\OXwvMzo7VU4DQ.ods.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\PyIsTigOF966Nu_K.csv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\PyIsTigOF966Nu_K.csv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\rF_ok6UvUojb.xlsx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\rF_ok6UvUojb.xlsx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\RIHbvM5AACGsvn9b3.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\RIHbvM5AACGsvn9b3.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\ThsCTAWGPdf6ip5.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\ThsCTAWGPdf6ip5.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\wt3HXsmzIUggPP_.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\wt3HXsmzIUggPP_.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\1SVv3QXnp1AD4QB.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\1SVv3QXnp1AD4QB.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\7GRcqO09RMPUte99-j.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\7GRcqO09RMPUte99-j.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\8qE80HJgAQ4T-05.ots desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\8qE80HJgAQ4T-05.ots.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\hap-mdvd.xls desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\hap-mdvd.xls.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\p2v55AVj.ppt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\p2v55AVj.ppt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\Rj1_r3.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\Rj1_r3.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\sLz-Qn.pps desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\sLz-Qn.pps.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\ZwQr6.pdf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6b 5xTdqcrCQ2\ZwQr6.pdf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\6fah5Apwpl8.odp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\6fah5Apwpl8.odp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\ah1cMF2z.rtf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\ah1cMF2z.rtf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\Ck73aG03huDrzd07UJ.pps desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\Ck73aG03huDrzd07UJ.pps.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\sHSDSkZ0g_NoboxW.odp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\sHSDSkZ0g_NoboxW.odp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\T_P_-SNfCBkG8Aq2jj.xls desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\T_P_-SNfCBkG8Aq2jj.xls.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YBis7kkv5pT8UqO.odt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YBis7kkv5pT8UqO.odt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YitNJanVQcH2FO.odt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\6CaRSI1gd4xA\YitNJanVQcH2FO.odt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\Favorites.vss desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\Favorites.vss.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\_private\folder.ico desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\_private\folder.ico.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\Outlook Files\voeimd@djhreuu.uhd.pst desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\Outlook Files\voeimd@djhreuu.uhd.pst.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\4S7aUwFCgm0F2.docx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\4S7aUwFCgm0F2.docx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\jCl699k6cnu.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\jCl699k6cnu.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ky0CNsBAgguhn.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ky0CNsBAgguhn.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ojzwNs9.pps desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\ojzwNs9.pps.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\p1IDCpnxsoIZs5eLNz.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\p1IDCpnxsoIZs5eLNz.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\w7j NA8Fc2Fqu.odt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\VBGVmC8I55cDkr\w7j NA8Fc2Fqu.odt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\-uMN xl8k6N90pMRQ.mp3 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\-uMN xl8k6N90pMRQ.mp3.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\1.exe desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\1.exe.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\2LoErBDNL.flv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\2LoErBDNL.flv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\4eaJAvH8dt snU9W.flv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\4eaJAvH8dt snU9W.flv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\6GPQLrb9z.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\6GPQLrb9z.png.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\7IfjlEOaKqm-B.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\7IfjlEOaKqm-B.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9H9uiT4RQS.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9H9uiT4RQS.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9IYI59Ta.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\9IYI59Ta.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\Auw4sdsTepKYeu356.ppt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\Auw4sdsTepKYeu356.ppt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cV435fL13v.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cV435fL13v.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cyqPND.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\cyqPND.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\EDxoaq8Iw18ul.gif desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\EDxoaq8Iw18ul.gif.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\GwN9jYVw.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\GwN9jYVw.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IL_OG8.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IL_OG8.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\imF1N2GKr.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\imF1N2GKr.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IpQ3E_cZPa8PdDey.ots desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\IpQ3E_cZPa8PdDey.ots.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\L4u6PoFiCYyO.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\L4u6PoFiCYyO.png.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\LbU4hyLoWMMWQlqFMMj.m4a desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\LbU4hyLoWMMWQlqFMMj.m4a.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\NJ0nkkjXO-jifKg04a.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\NJ0nkkjXO-jifKg04a.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\PQjPiQ-k5UaAunXcyp.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\PQjPiQ-k5UaAunXcyp.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\QpTBIG9 owV873iL.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\QpTBIG9 owV873iL.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\umeQAnzpGAKM.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\umeQAnzpGAKM.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\VVWQOJivCiw.ots desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\VVWQOJivCiw.ots.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w RjCfDLyWOGuuuBV9.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w RjCfDLyWOGuuuBV9.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w_MGGU cdFd.flv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\w_MGGU cdFd.flv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YMN7La I9lBJZO.m4a desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YMN7La I9lBJZO.m4a.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YqrvAc.rtf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\YqrvAc.rtf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\DB4Pt MG-kRMN5PaImf6.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\DB4Pt MG-kRMN5PaImf6.png.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\okSd1.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\okSd1.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\SS_0.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\SS_0.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\WKgBkja.ods desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\WKgBkja.ods.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\xzSJ7.doc desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\xzSJ7.doc.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\YuGi.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\i4dQ\YuGi.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\0R8VZmxctZ1GX1QI5rL.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\0R8VZmxctZ1GX1QI5rL.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\Q1gx-EumCFr8hNVa8.mp4 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\Q1gx-EumCFr8hNVa8.mp4.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\SBBTIRRJYRwtk_6hA.swf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\SBBTIRRJYRwtk_6hA.swf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\T4nvE0-PZS_fB.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\T4nvE0-PZS_fB.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\siXuQ8hvAO01ox4.csv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\siXuQ8hvAO01ox4.csv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\TDPtbCn5uV9.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\ESHHI8tKuSTh9Xs1d\TDPtbCn5uV9.png.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\C 8INbgLqg8.mkv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\C 8INbgLqg8.mkv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\jq8VxXCnWlEayHpw6D.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\OPn7B_oStEDZG-Z\H938whtrhk\jq8VxXCnWlEayHpw6D.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\KcjGX0 W5p_j5 Xn.m4a desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\KcjGX0 W5p_j5 Xn.m4a.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\kFSjmyF-KmWxxu h.swf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\kFSjmyF-KmWxxu h.swf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\oP55.swf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\oP55.swf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\POP8pfc9QmIhWOQhe.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\pXbnvbUkulG\POP8pfc9QmIhWOQhe.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\-IJUXNcRg2PG0aCimvIX.m4a desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\-IJUXNcRg2PG0aCimvIX.m4a.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\197VZVbvdT s2CUJs.mp3 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\197VZVbvdT s2CUJs.mp3.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\5-OIo.csv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\5-OIo.csv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7fgzkGfed5cplNOCn.gif desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7fgzkGfed5cplNOCn.gif.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7_2Pm_o.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\7_2Pm_o.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\8RPUZRrEb-g13uY1.flv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\8RPUZRrEb-g13uY1.flv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\9rfr3g.ods desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\9rfr3g.ods.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\aK8F9M7.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\aK8F9M7.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\b1Al6ru.mkv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\b1Al6ru.mkv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\DlRKCMr1kuUs99ccD.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\DlRKCMr1kuUs99ccD.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\ETUq1TsefE.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\ETUq1TsefE.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\eYRSDHH9d.mp3 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\eYRSDHH9d.mp3.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\fpkLEmTA.rtf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\fpkLEmTA.rtf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\HDB0GdLUiySD7s83WAzQ.pptx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\HDB0GdLUiySD7s83WAzQ.pptx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Hp9uEm2qgDx9.mp4 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Hp9uEm2qgDx9.mp4.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\hYLZvHOHq.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\hYLZvHOHq.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\koSBvQEvpYLBX86IlR C.mp4 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\koSBvQEvpYLBX86IlR C.mp4.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\K_ahl0R.swf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\K_ahl0R.swf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\lE3JQhfZrFvsQUDm.pps desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\lE3JQhfZrFvsQUDm.pps.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\nBYfGQWP20W1fBYymA.wav desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\nBYfGQWP20W1fBYymA.wav.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\OItGubAn-.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\OItGubAn-.bmp.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oOeIcMMwhOI.ppt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oOeIcMMwhOI.ppt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oX7qYv9qTw54L.mp3 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\oX7qYv9qTw54L.mp3.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r4h7GGfytZNn.mp4 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r4h7GGfytZNn.mp4.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r9fxrCjn_fvX0.flv desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\r9fxrCjn_fvX0.flv.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\RgphzL-7QJRwXkj.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\RgphzL-7QJRwXkj.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\tefEtu9q3KkgFxvT.ods desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\tefEtu9q3KkgFxvT.ods.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UbpxQyPEL.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UbpxQyPEL.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UTcXL9zykuS.mp4 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\UTcXL9zykuS.mp4.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\w0Ctkj.gif desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\w0Ctkj.gif.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\WtGBDq uSQoCPzY.avi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\WtGBDq uSQoCPzY.avi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\XUo1Tt.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\XUo1Tt.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\JavaScripts\glob.js desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\JavaScripts\glob.js.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\addressbook.acrodata desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\addressbook.acrodata.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer (2).lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer (2).lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player (2).lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player (2).lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\UserData\Low\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\UserData\Low\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\MS Project\14\1033\Global.MPT desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\MS Project\14\1033\Global.MPT.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\MSO1033.acl desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\MSO1033.acl.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Global.LNK desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Global.LNK.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Templates.LNK desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Office\Recent\Templates.LNK.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.srs desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.srs.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Outlook\Outlook.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\CREDHIST desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\CREDHIST.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\SYNCHIST desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\SYNCHIST.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\0e15476d-d8fe-46ca-8099-ebdcf80f637c desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\0e15476d-d8fe-46ca-8099-ebdcf80f637c.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\102a7bc8-3f85-4bb4-840a-38257d2965d2 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\102a7bc8-3f85-4bb4-840a-38257d2965d2.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Publisher Building Blocks\ContentStore.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Publisher Building Blocks\ContentStore.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Templates\Normal.dotm desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Templates\Normal.dotm.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\UProof\CUSTOM.DIC desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\UProof\CUSTOM.DIC.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\Low\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\IETldCache\Low\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Documents.library-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Documents.library-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Music.library-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Music.library-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Pictures.library-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Pictures.library-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Videos.library-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\Videos.library-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\Low\index.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\PrivacIE\Low\index.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-MKqyxYjc5JRno0_.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-MKqyxYjc5JRno0_.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-XGB.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\-XGB.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0PhF0I.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0PhF0I.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0R8VZmxctZ1GX1QI5rL.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\0R8VZmxctZ1GX1QI5rL.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\1SVv3QXnp1AD4QB.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\1SVv3QXnp1AD4QB.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\2LoErBDNL.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\2LoErBDNL.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\3qeSyu.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\3qeSyu.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4eaJAvH8dt snU9W.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4eaJAvH8dt snU9W.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4RX058L3qJC413r4.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4RX058L3qJC413r4.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4S7aUwFCgm0F2.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4S7aUwFCgm0F2.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4su2oko3I.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\4su2oko3I.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5-OIo.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5-OIo.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5IpCSj0.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5IpCSj0.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5uCl6.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\5uCl6.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6b 5xTdqcrCQ2.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6b 5xTdqcrCQ2.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6CaRSI1gd4xA.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6CaRSI1gd4xA.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6fah5Apwpl8.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6fah5Apwpl8.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6GPQLrb9z.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6GPQLrb9z.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6zAa2BvVTWYN4.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\6zAa2BvVTWYN4.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\76hRSKD790-L.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\76hRSKD790-L.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7fgzkGfed5cplNOCn.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7fgzkGfed5cplNOCn.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7GRcqO09RMPUte99-j.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7GRcqO09RMPUte99-j.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7_2Pm_o.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\7_2Pm_o.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8kcn2BrTvdA4FudkvK.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8kcn2BrTvdA4FudkvK.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8qE80HJgAQ4T-05.ots.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8qE80HJgAQ4T-05.ots.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8RPUZRrEb-g13uY1.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\8RPUZRrEb-g13uY1.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9H9uiT4RQS.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9H9uiT4RQS.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9rfr3g.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9rfr3g.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9Vfajx59Z9Z5.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\9Vfajx59Z9Z5.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\aajrkz KC.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\aajrkz KC.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ah1cMF2z.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ah1cMF2z.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\akWullZV3EwuyRnw.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\akWullZV3EwuyRnw.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Auw4sdsTepKYeu356.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Auw4sdsTepKYeu356.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\axiblyMnDJq6wybsV.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\axiblyMnDJq6wybsV.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Azl-UDflFCdqTtxVRZ5.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Azl-UDflFCdqTtxVRZ5.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\b1Al6ru.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\b1Al6ru.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\BEthdv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\BEthdv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\C 8INbgLqg8.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\C 8INbgLqg8.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Ck73aG03huDrzd07UJ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Ck73aG03huDrzd07UJ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CPySWMll AnWU6bLZ9.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CPySWMll AnWU6bLZ9.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\cV435fL13v.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\cV435fL13v.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\DB4Pt MG-kRMN5PaImf6.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\DB4Pt MG-kRMN5PaImf6.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\dFSJ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\dFSJ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\E5dSTIR0F62ceIRi.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\E5dSTIR0F62ceIRi.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eDeJvIUF8LXYojXe.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eDeJvIUF8LXYojXe.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDgV-s2v0.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDgV-s2v0.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDxoaq8Iw18ul.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\EDxoaq8Iw18ul.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eiXRArevP-KNSUGJ1km.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eiXRArevP-KNSUGJ1km.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ESHHI8tKuSTh9Xs1d.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ESHHI8tKuSTh9Xs1d.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eYe5rxlt-hbeM.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\eYe5rxlt-hbeM.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fDaXSi7d38rWdnWNf.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fDaXSi7d38rWdnWNf.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fpkLEmTA.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\fpkLEmTA.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\GwN9jYVw.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\GwN9jYVw.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\H938whtrhk.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\H938whtrhk.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hap-mdvd.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hap-mdvd.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\HDB0GdLUiySD7s83WAzQ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\HDB0GdLUiySD7s83WAzQ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hYLZvHOHq.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\hYLZvHOHq.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\i4dQ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\i4dQ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iJAd4NLQA5m2_U7sFDwi.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iJAd4NLQA5m2_U7sFDwi.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\imF1N2GKr.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\imF1N2GKr.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IpQ3E_cZPa8PdDey.ots.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IpQ3E_cZPa8PdDey.ots.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iqVhjJhZSIBuxl.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\iqVhjJhZSIBuxl.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IvQM2Pg89mN43.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\IvQM2Pg89mN43.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\jCl699k6cnu.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\jCl699k6cnu.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\JYJ IrXH7S7J4lrI7c.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\JYJ IrXH7S7J4lrI7c.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\k8AKeCkuzc4HIIi.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\k8AKeCkuzc4HIIi.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KczBX1JhveWm.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KczBX1JhveWm.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KlwMfLBW.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\KlwMfLBW.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ky0CNsBAgguhn.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ky0CNsBAgguhn.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\L8JGos.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\L8JGos.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\LdyKq sH.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\LdyKq sH.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\lE3JQhfZrFvsQUDm.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\lE3JQhfZrFvsQUDm.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\MArt8B5Nnvr6CocV2.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\MArt8B5Nnvr6CocV2.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mJO8uMF6Tat.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mJO8uMF6Tat.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mn5_uAB.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mn5_uAB.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mwGRgJsn.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\mwGRgJsn.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Music.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Music.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Pictures.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Pictures.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Videos.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\My Videos.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\niS1LNMjpLd63RldlE.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\niS1LNMjpLd63RldlE.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oaNX t.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oaNX t.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oFYgBk4QtpG412-y.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oFYgBk4QtpG412-y.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ojzwNs9.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ojzwNs9.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\okSd1.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\okSd1.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oOeIcMMwhOI.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\oOeIcMMwhOI.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OPn7B_oStEDZG-Z.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OPn7B_oStEDZG-Z.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OXwvMzo7VU4DQ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\OXwvMzo7VU4DQ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p1IDCpnxsoIZs5eLNz.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p1IDCpnxsoIZs5eLNz.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p2v55AVj.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p2v55AVj.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p7HLkCBt6lrk.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\p7HLkCBt6lrk.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PQjPiQ-k5UaAunXcyp.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PQjPiQ-k5UaAunXcyp.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\pXbnvbUkulG.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\pXbnvbUkulG.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PyIsTigOF966Nu_K.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\PyIsTigOF966Nu_K.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\qli3XF0tWwDGKFecggK7.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\qli3XF0tWwDGKFecggK7.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R19lpaVKOfq7YVANQ.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R19lpaVKOfq7YVANQ.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R7_g8IwpOeJE _.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\R7_g8IwpOeJE _.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\r9fxrCjn_fvX0.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\r9fxrCjn_fvX0.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\rF_ok6UvUojb.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\rF_ok6UvUojb.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RgozBY-.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RgozBY-.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RIHbvM5AACGsvn9b3.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\RIHbvM5AACGsvn9b3.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Rj1_r3.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Rj1_r3.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Roaming.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Roaming.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sHSDSkZ0g_NoboxW.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sHSDSkZ0g_NoboxW.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\siXuQ8hvAO01ox4.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\siXuQ8hvAO01ox4.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sLz-Qn.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\sLz-Qn.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\SS_0.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\SS_0.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tefEtu9q3KkgFxvT.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tefEtu9q3KkgFxvT.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tf9tO-.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tf9tO-.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ThsCTAWGPdf6ip5.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ThsCTAWGPdf6ip5.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tNxjHi4dfeQcdL.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\tNxjHi4dfeQcdL.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\T_P_-SNfCBkG8Aq2jj.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\T_P_-SNfCBkG8Aq2jj.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8CGw8 qXyI_TQhqAida.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8CGw8 qXyI_TQhqAida.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8FNPSsnCaar3G.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\u8FNPSsnCaar3G.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VBGVmC8I55cDkr.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VBGVmC8I55cDkr.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VJDc9FNq06.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VJDc9FNq06.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\vuD7hrqb3Qw4jb.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\vuD7hrqb3Qw4jb.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VVWQOJivCiw.ots.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\VVWQOJivCiw.ots.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w0Ctkj.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w0Ctkj.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w7j NA8Fc2Fqu.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w7j NA8Fc2Fqu.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wcytZbmWqSORl.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wcytZbmWqSORl.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WKgBkja.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WKgBkja.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wt3HXsmzIUggPP_.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wt3HXsmzIUggPP_.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WU-9paSh0TSA.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\WU-9paSh0TSA.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wvisDVGwhMu ffvUh.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\wvisDVGwhMu ffvUh.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w_MGGU cdFd.flv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\w_MGGU cdFd.flv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\X4gIJecgSY-_.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\X4gIJecgSY-_.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xF rEYVMCXzUTbMksZVb.mkv.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xF rEYVMCXzUTbMksZVb.mkv.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xzSJ7.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\xzSJ7.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YBis7kkv5pT8UqO.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YBis7kkv5pT8UqO.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yF7UTSD8x5Tqa.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yF7UTSD8x5Tqa.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YitNJanVQcH2FO.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YitNJanVQcH2FO.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yNNti.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\yNNti.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YqrvAc.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\YqrvAc.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Y_JdOEwgYzgJjoB_mnj.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\Y_JdOEwgYzgJjoB_mnj.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ZwQr6.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\ZwQr6.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\eb282ead62b4db87.automaticDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\AutomaticDestinations\eb282ead62b4db87.automaticDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\1b4dd67f29cb1962.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\1b4dd67f29cb1962.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\7e4dca80246863e3.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\7e4dca80246863e3.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\be71009ff8bb02a2.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\be71009ff8bb02a2.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Documents.mydocs desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Documents.mydocs.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Fax Recipient.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Fax Recipient.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Themes\TranscodedWallpaper.jpg desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Themes\TranscodedWallpaper.jpg.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\profiles.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\profiles.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\addons.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\addons.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\key3.db desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\key3.db.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\parent.lock desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\parent.lock.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\search.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\search.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\times.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\times.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\.metadata desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\.metadata.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\bootmgr desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\bootmgr.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\BOOTSECT.BAK desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\BOOTSECT.BAK.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\hiberfil.sys desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\hiberfil.sys.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\pagefile.sys desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\pagefile.sys.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\BCD desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\BCD.LOG desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD.LOG.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\BCD.LOG1 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG1.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\BCD.LOG2 desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG2.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\BOOTSTAT.DAT desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BOOTSTAT.DAT.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\memtest.exe desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\memtest.exe.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\da-DK\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\da-DK\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\de-DE\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\de-DE\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\el-GR\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\el-GR\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\en-US\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\en-US\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\en-US\memtest.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\en-US\memtest.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\es-ES\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\es-ES\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\fi-FI\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\fi-FI\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\Fonts\chs_boot.ttf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\chs_boot.ttf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\Fonts\cht_boot.ttf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\cht_boot.ttf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\Fonts\jpn_boot.ttf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\jpn_boot.ttf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\Fonts\kor_boot.ttf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\kor_boot.ttf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\Fonts\wgl4_boot.ttf desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\wgl4_boot.ttf.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\fr-FR\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\fr-FR\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\hu-HU\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\hu-HU\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\it-IT\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\it-IT\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\ja-JP\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ja-JP\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\ko-KR\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ko-KR\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\nb-NO\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\nb-NO\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\nl-NL\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\nl-NL\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\pl-PL\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\pl-PL\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\pt-BR\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\pt-BR\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\pt-PT\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\pt-PT\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\ru-RU\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ru-RU\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\sv-SE\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\sv-SE\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\tr-TR\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\tr-TR\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\zh-CN\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\zh-CN\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\zh-HK\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\zh-HK\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\Boot\zh-TW\bootmgr.exe.mui desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\zh-TW\bootmgr.exe.mui.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.SKYSTARS desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_ARCHIVE True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\index.dat type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\profiles.ini type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\addons.json type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\key3.db type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\parent.lock type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\search.json type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\times.json type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\.metadata type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json type = size, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\desktop.ini size = 402, size_out = 402 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\desktop.ini size = 216, size_out = 216 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\desktop.ini size = 282, size_out = 282 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini size = 221, size_out = 221 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini size = 412, size_out = 412 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\desktop.ini size = 274, size_out = 274 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini size = 432, size_out = 432 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini size = 558, size_out = 558 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini size = 174, size_out = 174 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini size = 476, size_out = 476 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini size = 678, size_out = 678 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini size = 704, size_out = 704 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini size = 738, size_out = 738 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini size = 174, size_out = 174 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini size = 318, size_out = 318 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini size = 174, size_out = 174 True 1
Fn
Data
Read C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini size = 129, size_out = 129 True 1
Fn
Data
Read C:\Program Files\desktop.ini size = 174, size_out = 174 True 1
Fn
Read C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini size = 645, size_out = 645 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\desktop.ini.SKYSTARS size = 408 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\My Shapes\desktop.ini.SKYSTARS size = 224 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\desktop.ini.SKYSTARS size = 288 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini.SKYSTARS size = 232 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini.SKYSTARS size = 416 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Libraries\desktop.ini.SKYSTARS size = 280 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini.SKYSTARS size = 440 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini.SKYSTARS size = 568 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini.SKYSTARS size = 184 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini.SKYSTARS size = 480 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini.SKYSTARS size = 688 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini.SKYSTARS size = 712 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini.SKYSTARS size = 744 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini.SKYSTARS size = 184 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini.SKYSTARS size = 328 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.SKYSTARS size = 184 True 1
Fn
Data
Write C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.SKYSTARS size = 136 True 1
Fn
Data
Write C:\Program Files\desktop.ini.SKYSTARS size = 184 True 1
Fn
Write C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.SKYSTARS size = 99144 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.SKYSTARS size = 1369960 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.SKYSTARS size = 994192 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.SKYSTARS size = 629672 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.SKYSTARS size = 2568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.SKYSTARS size = 543312 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.SKYSTARS size = 576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.SKYSTARS size = 176320 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.SKYSTARS size = 7664 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.SKYSTARS size = 64104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.SKYSTARS size = 31112 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.SKYSTARS size = 38776 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.SKYSTARS size = 1312664 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.SKYSTARS size = 1486744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.SKYSTARS size = 2124672 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.SKYSTARS size = 6816 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.SKYSTARS size = 323944 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.SKYSTARS size = 606072 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.SKYSTARS size = 712600 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.SKYSTARS size = 320392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.SKYSTARS size = 241032 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.SKYSTARS size = 1912 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.SKYSTARS size = 15072 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.SKYSTARS size = 1080 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.SKYSTARS size = 1072 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.SKYSTARS size = 1688 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.SKYSTARS size = 1392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.SKYSTARS size = 73088 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.SKYSTARS size = 302984 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.SKYSTARS size = 280456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.SKYSTARS size = 1257992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.SKYSTARS size = 1831432 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.SKYSTARS size = 430088 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.SKYSTARS size = 791696 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.SKYSTARS size = 27056 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.SKYSTARS size = 193032 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.SKYSTARS size = 1600392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe.SKYSTARS size = 927752 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat.SKYSTARS size = 46632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.SKYSTARS size = 747288 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat.SKYSTARS size = 815688 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat.SKYSTARS size = 1100376 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.SKYSTARS size = 3053992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.SKYSTARS size = 2227976 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.SKYSTARS size = 3195704 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.SKYSTARS size = 4120792 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.SKYSTARS size = 353288 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.SKYSTARS size = 2103304 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe.SKYSTARS size = 397320 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe.SKYSTARS size = 383496 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.SKYSTARS size = 2600 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml.SKYSTARS size = 2472 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.SKYSTARS size = 2440 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml.SKYSTARS size = 2560 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.SKYSTARS size = 2520 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.SKYSTARS size = 2624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.SKYSTARS size = 2584 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.SKYSTARS size = 3032 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll.SKYSTARS size = 2056 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.SKYSTARS size = 2664 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.SKYSTARS size = 2632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml.SKYSTARS size = 2656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml.SKYSTARS size = 2536 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.SKYSTARS size = 2528 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.SKYSTARS size = 2576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll.SKYSTARS size = 40968 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.SKYSTARS size = 2632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.SKYSTARS size = 2584 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml.SKYSTARS size = 2608 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll.SKYSTARS size = 94728 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml.SKYSTARS size = 2256 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml.SKYSTARS size = 2248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml.SKYSTARS size = 2648 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.SKYSTARS size = 2552 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.SKYSTARS size = 2576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.SKYSTARS size = 2600 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml.SKYSTARS size = 2528 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll.SKYSTARS size = 1367560 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.SKYSTARS size = 1704456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll.SKYSTARS size = 507912 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe.SKYSTARS size = 1547272 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.SKYSTARS size = 6331400 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.SKYSTARS size = 49672 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll.SKYSTARS size = 1071624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll.SKYSTARS size = 169992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe.SKYSTARS size = 695304 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll.SKYSTARS size = 40456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll.SKYSTARS size = 448008 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe.SKYSTARS size = 224264 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll.SKYSTARS size = 110600 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll.SKYSTARS size = 544776 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll.SKYSTARS size = 12296 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll.SKYSTARS size = 1246728 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll.SKYSTARS size = 503304 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll.SKYSTARS size = 101384 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.SKYSTARS size = 89608 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.SKYSTARS size = 31752 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.SKYSTARS size = 33288 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.SKYSTARS size = 62984 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.SKYSTARS size = 197128 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.SKYSTARS size = 224264 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.SKYSTARS size = 8712 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui.SKYSTARS size = 4616 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui.SKYSTARS size = 9224 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui.SKYSTARS size = 2568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui.SKYSTARS size = 22536 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.SKYSTARS size = 2568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.SKYSTARS size = 222216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.SKYSTARS size = 8712 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.SKYSTARS size = 10248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui.SKYSTARS size = 2568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui.SKYSTARS size = 2568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui.SKYSTARS size = 43528 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.SKYSTARS size = 194056 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui.SKYSTARS size = 3080 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui.SKYSTARS size = 3080 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.SKYSTARS size = 32776 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui.SKYSTARS size = 3080 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.SKYSTARS size = 216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.SKYSTARS size = 736 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml.SKYSTARS size = 38496 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.SKYSTARS size = 216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.SKYSTARS size = 224 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.SKYSTARS size = 224 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.SKYSTARS size = 224 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.SKYSTARS size = 600 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml.SKYSTARS size = 216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.SKYSTARS size = 1440 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.SKYSTARS size = 392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.SKYSTARS size = 1128 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.SKYSTARS size = 400 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.SKYSTARS size = 3160 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.SKYSTARS size = 256 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.SKYSTARS size = 3168 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.SKYSTARS size = 3176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.SKYSTARS size = 744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml.SKYSTARS size = 808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml.SKYSTARS size = 496 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml.SKYSTARS size = 624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml.SKYSTARS size = 16624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.SKYSTARS size = 15104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml.SKYSTARS size = 9808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml.SKYSTARS size = 11072 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml.SKYSTARS size = 10952 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml.SKYSTARS size = 1224 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.SKYSTARS size = 480 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.SKYSTARS size = 1448 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml.SKYSTARS size = 928 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml.SKYSTARS size = 760 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.SKYSTARS size = 760 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml.SKYSTARS size = 2768 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml.SKYSTARS size = 1176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui.SKYSTARS size = 4104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui.SKYSTARS size = 3592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.SKYSTARS size = 419240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.SKYSTARS size = 378888 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.SKYSTARS size = 26632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.SKYSTARS size = 3213200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.SKYSTARS size = 744896 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.SKYSTARS size = 43416 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.SKYSTARS size = 1012656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.SKYSTARS size = 442280 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.SKYSTARS size = 900000 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.SKYSTARS size = 342968 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.SKYSTARS size = 15808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.SKYSTARS size = 15808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.SKYSTARS size = 15808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.SKYSTARS size = 537512 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.SKYSTARS size = 451488 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.SKYSTARS size = 55752 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.SKYSTARS size = 691624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.SKYSTARS size = 297368 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.SKYSTARS size = 3050920 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.SKYSTARS size = 318376 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.SKYSTARS size = 502176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.SKYSTARS size = 385376 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.SKYSTARS size = 5072824 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.SKYSTARS size = 1784200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.SKYSTARS size = 518992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.SKYSTARS size = 138624 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.SKYSTARS size = 71040 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.SKYSTARS size = 157032 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.SKYSTARS size = 4289384 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.SKYSTARS size = 204176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.SKYSTARS size = 25417608 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.SKYSTARS size = 473960 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.SKYSTARS size = 72521608 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll.SKYSTARS size = 1269656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.SKYSTARS size = 56152 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.SKYSTARS size = 121176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.SKYSTARS size = 56200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.SKYSTARS size = 1198472 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.SKYSTARS size = 705400 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.SKYSTARS size = 6752 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.SKYSTARS size = 24984 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.SKYSTARS size = 232848 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.SKYSTARS size = 30064 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.SKYSTARS size = 9576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.SKYSTARS size = 19856 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.SKYSTARS size = 18344 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.SKYSTARS size = 752560 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL.SKYSTARS size = 261016 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.SKYSTARS size = 3943320 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.SKYSTARS size = 1870704 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.SKYSTARS size = 591744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.SKYSTARS size = 813832 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.SKYSTARS size = 49496 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.SKYSTARS size = 147352 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.SKYSTARS size = 198064 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.SKYSTARS size = 52664 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.SKYSTARS size = 20952 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.SKYSTARS size = 862616 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.SKYSTARS size = 1680392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.SKYSTARS size = 154456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.SKYSTARS size = 2528136 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.SKYSTARS size = 55688 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.SKYSTARS size = 1388424 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.SKYSTARS size = 41872 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.SKYSTARS size = 11664 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.SKYSTARS size = 1952 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.SKYSTARS size = 105352 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.SKYSTARS size = 4297576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe.SKYSTARS size = 571328 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.SKYSTARS size = 7379824 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.SKYSTARS size = 47528 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.SKYSTARS size = 1463576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms.SKYSTARS size = 715840 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.SKYSTARS size = 15744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.SKYSTARS size = 1377152 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.SKYSTARS size = 1360 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.SKYSTARS size = 824 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.SKYSTARS size = 2632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.SKYSTARS size = 1576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.SKYSTARS size = 2304 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.SKYSTARS size = 920 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.SKYSTARS size = 1456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.SKYSTARS size = 1240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.SKYSTARS size = 1856 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL.SKYSTARS size = 15232 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.SKYSTARS size = 596352 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.SKYSTARS size = 71240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.SKYSTARS size = 5568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.SKYSTARS size = 824 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.SKYSTARS size = 191880 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll.SKYSTARS size = 15768 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.SKYSTARS size = 37696 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.SKYSTARS size = 26936 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.SKYSTARS size = 27200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.SKYSTARS size = 67200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.SKYSTARS size = 9360 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.SKYSTARS size = 1392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.SKYSTARS size = 2368 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.SKYSTARS size = 4280 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.SKYSTARS size = 1616 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.SKYSTARS size = 1992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.SKYSTARS size = 3192 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.SKYSTARS size = 4216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.SKYSTARS size = 1456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.SKYSTARS size = 1896 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.SKYSTARS size = 6432 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.SKYSTARS size = 16688 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.SKYSTARS size = 1456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.SKYSTARS size = 1880 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.SKYSTARS size = 1352 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.SKYSTARS size = 1464 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.SKYSTARS size = 1464 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.SKYSTARS size = 816 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.SKYSTARS size = 5888 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.SKYSTARS size = 16856 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.SKYSTARS size = 31104 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.SKYSTARS size = 1456 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.SKYSTARS size = 1616 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.SKYSTARS size = 6248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.SKYSTARS size = 9512 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.SKYSTARS size = 20584 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.SKYSTARS size = 8728 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.SKYSTARS size = 2432 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.SKYSTARS size = 1808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.SKYSTARS size = 148744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.SKYSTARS size = 1828616 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.SKYSTARS size = 11656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.SKYSTARS size = 2173704 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.SKYSTARS size = 15720 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.SKYSTARS size = 4925192 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL.SKYSTARS size = 146200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.SKYSTARS size = 47720 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.SKYSTARS size = 591176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.SKYSTARS size = 444032 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.SKYSTARS size = 395656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.SKYSTARS size = 295672 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL.SKYSTARS size = 123784 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL.SKYSTARS size = 98184 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL.SKYSTARS size = 217992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.SKYSTARS size = 181128 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.SKYSTARS size = 159112 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.SKYSTARS size = 234888 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.SKYSTARS size = 101256 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.SKYSTARS size = 110984 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.SKYSTARS size = 1183424 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.SKYSTARS size = 364936 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.SKYSTARS size = 13688 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.SKYSTARS size = 15752 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.SKYSTARS size = 11472 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.SKYSTARS size = 17288 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL.SKYSTARS size = 13704 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.SKYSTARS size = 227320 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.SKYSTARS size = 8928 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.SKYSTARS size = 1848 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.SKYSTARS size = 39024 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.SKYSTARS size = 2696 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.SKYSTARS size = 8568 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.SKYSTARS size = 174448 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.SKYSTARS size = 264 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.SKYSTARS size = 1080 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.SKYSTARS size = 2584 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.SKYSTARS size = 4592 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.SKYSTARS size = 2328 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.SKYSTARS size = 656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf.SKYSTARS size = 3800 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.SKYSTARS size = 23880 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf.SKYSTARS size = 5528 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.SKYSTARS size = 10344 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf.SKYSTARS size = 116728 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.SKYSTARS size = 248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg.SKYSTARS size = 6416 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.SKYSTARS size = 2928 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf.SKYSTARS size = 7504 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg.SKYSTARS size = 4232 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf.SKYSTARS size = 152304 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.SKYSTARS size = 2216 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf.SKYSTARS size = 4200 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf.SKYSTARS size = 26040 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg.SKYSTARS size = 2960 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.SKYSTARS size = 248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.SKYSTARS size = 6392 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.SKYSTARS size = 5120 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.SKYSTARS size = 3992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.SKYSTARS size = 5120 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.SKYSTARS size = 14056 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg.SKYSTARS size = 1928 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.SKYSTARS size = 15784 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf.SKYSTARS size = 37320 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm.SKYSTARS size = 248 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg.SKYSTARS size = 4744 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf.SKYSTARS size = 81296 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg.SKYSTARS size = 2000 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg.SKYSTARS size = 10576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm.SKYSTARS size = 240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg.SKYSTARS size = 7512 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif.SKYSTARS size = 1872 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg.SKYSTARS size = 3656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif.SKYSTARS size = 4648 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf.SKYSTARS size = 26728 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg.SKYSTARS size = 3176 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif.SKYSTARS size = 15072 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.SKYSTARS size = 146816 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.SKYSTARS size = 36720 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.SKYSTARS size = 57256 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.SKYSTARS size = 196984 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.SKYSTARS size = 289656 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.SKYSTARS size = 7280 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM.SKYSTARS size = 58776 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF.SKYSTARS size = 560 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.SKYSTARS size = 1576 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.SKYSTARS size = 25240 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM.SKYSTARS size = 69584 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF.SKYSTARS size = 520 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.SKYSTARS size = 2992 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.SKYSTARS size = 19784 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.SKYSTARS size = 100808 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.SKYSTARS size = 536 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.SKYSTARS size = 2856 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.SKYSTARS size = 34920 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM.SKYSTARS size = 69056 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF.SKYSTARS size = 544 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.SKYSTARS size = 2192 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.SKYSTARS size = 20632 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.SKYSTARS size = 49856 True 1
Fn
Write C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF.SKYSTARS size = 560 True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\2LoErBDNL.flv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat - False 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Cookies\Low\index.dat - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\profiles.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\addons.json - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\key3.db - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\parent.lock - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\search.json - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\times.json - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\.metadata - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json - True 1
Fn
For performance reasons, the remaining 7003 entries are omitted.
The remaining entries can be found in glog.xml.
Module (6)
»
Operation Module Additional Information Success Count Logfile
Get Handle c:\windows\syswow64\kernel32.dll base_address = 0x76c20000 True 1
Fn
Get Handle c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe base_address = 0x400000 True 2
Fn
Get Filename - process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 260 True 1
Fn
Get Filename c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 260 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = IsProcessorFeaturePresent, address_out = 0x76c35235 True 1
Fn
Keyboard (1)
»
Operation Additional Information Success Count Logfile
Get Info type = KB_CODEPAGE, result_out = 437 True 1
Fn
System (1392)
»
Operation Additional Information Success Count Logfile
Get Cursor x_out = 820, y_out = 457 True 1
Fn
Get Time type = Ticks, time = 98857 True 1
Fn
Get Time type = Ticks, time = 98904 True 1
Fn
Get Time type = Ticks, time = 98920 True 2
Fn
Get Time type = Ticks, time = 98935 True 1
Fn
Get Time type = Ticks, time = 98951 True 1
Fn
Get Time type = Ticks, time = 98967 True 2
Fn
Get Time type = Ticks, time = 98982 True 1
Fn
Get Time type = Ticks, time = 98998 True 2
Fn
Get Time type = Ticks, time = 99045 True 1
Fn
Get Time type = Ticks, time = 99060 True 2
Fn
Get Time type = Ticks, time = 99076 True 1
Fn
Get Time type = Ticks, time = 99091 True 1
Fn
Get Time type = Ticks, time = 99107 True 2
Fn
Get Time type = Ticks, time = 99123 True 1
Fn
Get Time type = Ticks, time = 99138 True 2
Fn
Get Time type = Ticks, time = 99154 True 1
Fn
Get Time type = Ticks, time = 99169 True 2
Fn
Get Time type = Ticks, time = 99185 True 1
Fn
Get Time type = Ticks, time = 99201 True 2
Fn
Get Time type = Ticks, time = 99216 True 2
Fn
Get Time type = Ticks, time = 99232 True 1
Fn
Get Time type = Ticks, time = 99247 True 1
Fn
Get Time type = Ticks, time = 99263 True 2
Fn
Get Time type = Ticks, time = 99279 True 1
Fn
Get Time type = Ticks, time = 99294 True 2
Fn
Get Time type = Ticks, time = 99310 True 1
Fn
Get Time type = Ticks, time = 99325 True 1
Fn
Get Time type = Ticks, time = 99341 True 2
Fn
Get Time type = Ticks, time = 99357 True 1
Fn
Get Time type = Ticks, time = 99372 True 1
Fn
Get Time type = Ticks, time = 99403 True 2
Fn
Get Time type = Ticks, time = 99419 True 2
Fn
Get Time type = Ticks, time = 99435 True 1
Fn
Get Time type = Ticks, time = 99450 True 2
Fn
Get Time type = Ticks, time = 99466 True 1
Fn
Get Time type = Ticks, time = 99481 True 1
Fn
Get Time type = Ticks, time = 99497 True 1
Fn
Get Time type = Ticks, time = 99513 True 2
Fn
Get Time type = Ticks, time = 99528 True 1
Fn
Get Time type = Ticks, time = 99544 True 2
Fn
Get Time type = Ticks, time = 99559 True 1
Fn
Get Time type = Ticks, time = 99575 True 2
Fn
Get Time type = Ticks, time = 99591 True 1
Fn
Get Time type = Ticks, time = 99622 True 2
Fn
Get Time type = Ticks, time = 99637 True 2
Fn
Get Time type = Ticks, time = 99653 True 1
Fn
Get Time type = Ticks, time = 99669 True 2
Fn
Get Time type = Ticks, time = 99684 True 1
Fn
Get Time type = Ticks, time = 99700 True 1
Fn
Get Time type = Ticks, time = 99715 True 2
Fn
Get Time type = Ticks, time = 99731 True 1
Fn
Get Time type = Ticks, time = 99747 True 2
Fn
Get Time type = Ticks, time = 99762 True 1
Fn
Get Time type = Ticks, time = 99778 True 2
Fn
Get Time type = Ticks, time = 99793 True 1
Fn
Get Time type = Ticks, time = 99809 True 1
Fn
Get Time type = Ticks, time = 99825 True 2
Fn
Get Time type = Ticks, time = 99840 True 1
Fn
Get Time type = Ticks, time = 99856 True 2
Fn
Get Time type = Ticks, time = 99871 True 1
Fn
Get Time type = Ticks, time = 99887 True 2
Fn
Get Time type = Ticks, time = 99903 True 1
Fn
Get Time type = Ticks, time = 99918 True 2
Fn
Get Time type = Ticks, time = 99934 True 1
Fn
Get Time type = Ticks, time = 99949 True 2
Fn
Get Time type = Ticks, time = 99981 True 2
Fn
Get Time type = Ticks, time = 99996 True 1
Fn
Get Time type = Ticks, time = 100012 True 1
Fn
Get Time type = Ticks, time = 100027 True 2
Fn
Get Time type = Ticks, time = 100043 True 1
Fn
Get Time type = Ticks, time = 100059 True 2
Fn
Get Time type = Ticks, time = 100074 True 1
Fn
Get Time type = Ticks, time = 100090 True 2
Fn
Get Time type = Ticks, time = 100105 True 1
Fn
Get Time type = Ticks, time = 100121 True 1
Fn
Get Time type = Ticks, time = 100137 True 2
Fn
Get Time type = Ticks, time = 100152 True 1
Fn
Get Time type = Ticks, time = 100168 True 2
Fn
Get Time type = Ticks, time = 100183 True 1
Fn
Get Time type = Ticks, time = 100199 True 2
Fn
Get Time type = Ticks, time = 100215 True 1
Fn
Get Time type = Ticks, time = 100230 True 2
Fn
Get Time type = Ticks, time = 100246 True 1
Fn
Get Time type = Ticks, time = 100261 True 2
Fn
Get Time type = Ticks, time = 100277 True 2
Fn
Get Time type = Ticks, time = 100293 True 1
Fn
Get Time type = Ticks, time = 100308 True 1
Fn
Get Time type = Ticks, time = 100324 True 1
Fn
Get Time type = Ticks, time = 100339 True 2
Fn
Get Time type = Ticks, time = 100355 True 1
Fn
Get Time type = Ticks, time = 100371 True 1
Fn
Get Time type = Ticks, time = 100402 True 1
Fn
Get Time type = Ticks, time = 100417 True 2
Fn
Get Time type = Ticks, time = 100433 True 1
Fn
Get Time type = Ticks, time = 100573 True 1
Fn
Get Time type = Ticks, time = 100932 True 1
Fn
Get Time type = Ticks, time = 100948 True 1
Fn
Get Time type = Ticks, time = 100963 True 2
Fn
Get Time type = Ticks, time = 101010 True 2
Fn
Get Time type = Ticks, time = 101416 True 1
Fn
Get Time type = Ticks, time = 101431 True 1
Fn
Get Time type = Ticks, time = 101447 True 2
Fn
Get Time type = Ticks, time = 101478 True 2
Fn
Get Time type = Ticks, time = 101494 True 2
Fn
Get Time type = Ticks, time = 101541 True 1
Fn
Get Time type = Ticks, time = 101556 True 1
Fn
Get Time type = Ticks, time = 101603 True 1
Fn
Get Time type = Ticks, time = 101634 True 2
Fn
Get Time type = Ticks, time = 101650 True 2
Fn
Get Time type = Ticks, time = 101681 True 1
Fn
Get Time type = Ticks, time = 101697 True 1
Fn
Get Time type = Ticks, time = 101712 True 2
Fn
Get Time type = Ticks, time = 101728 True 2
Fn
Get Time type = Ticks, time = 101759 True 1
Fn
Get Time type = Ticks, time = 101775 True 2
Fn
Get Time type = Ticks, time = 101790 True 1
Fn
Get Time type = Ticks, time = 101806 True 2
Fn
Get Time type = Ticks, time = 101821 True 1
Fn
Get Time type = Ticks, time = 101853 True 2
Fn
Get Time type = Ticks, time = 101868 True 2
Fn
Get Time type = Ticks, time = 101884 True 1
Fn
Get Time type = Ticks, time = 101899 True 1
Fn
Get Time type = Ticks, time = 101915 True 1
Fn
Get Time type = Ticks, time = 101931 True 2
Fn
Get Time type = Ticks, time = 101993 True 2
Fn
Get Time type = Ticks, time = 102024 True 2
Fn
Get Time type = Ticks, time = 102040 True 1
Fn
Get Time type = Ticks, time = 102055 True 2
Fn
Get Time type = Ticks, time = 102071 True 1
Fn
Get Time type = Ticks, time = 102087 True 2
Fn
Get Time type = Ticks, time = 102102 True 2
Fn
Get Time type = Ticks, time = 102118 True 1
Fn
Get Time type = Ticks, time = 102149 True 1
Fn
Get Time type = Ticks, time = 102165 True 2
Fn
Get Time type = Ticks, time = 102180 True 2
Fn
Get Time type = Ticks, time = 102196 True 1
Fn
Get Time type = Ticks, time = 102227 True 2
Fn
Get Time type = Ticks, time = 102243 True 2
Fn
Get Time type = Ticks, time = 102258 True 2
Fn
Get Time type = Ticks, time = 102274 True 1
Fn
Get Time type = Ticks, time = 102289 True 1
Fn
Get Time type = Ticks, time = 102305 True 2
Fn
Get Time type = Ticks, time = 102321 True 1
Fn
Get Time type = Ticks, time = 102336 True 1
Fn
Get Time type = Ticks, time = 102383 True 1
Fn
Get Time type = Ticks, time = 102414 True 1
Fn
Get Time type = Ticks, time = 102430 True 2
Fn
Get Time type = Ticks, time = 102445 True 2
Fn
Get Time type = Ticks, time = 102477 True 1
Fn
Get Time type = Ticks, time = 102492 True 1
Fn
Get Time type = Ticks, time = 102508 True 2
Fn
Get Time type = Ticks, time = 102523 True 2
Fn
Get Time type = Ticks, time = 102539 True 1
Fn
Get Time type = Ticks, time = 102555 True 2
Fn
Get Time type = Ticks, time = 102570 True 2
Fn
Get Time type = Ticks, time = 102601 True 1
Fn
Get Time type = Ticks, time = 102617 True 2
Fn
Get Time type = Ticks, time = 102633 True 2
Fn
Get Time type = Ticks, time = 102648 True 2
Fn
Get Time type = Ticks, time = 102664 True 2
Fn
Get Time type = Ticks, time = 102679 True 2
Fn
Get Time type = Ticks, time = 102695 True 2
Fn
Get Time type = Ticks, time = 102711 True 2
Fn
Get Time type = Ticks, time = 102726 True 2
Fn
Get Time type = Ticks, time = 102742 True 2
Fn
Get Time type = Ticks, time = 102757 True 2
Fn
Get Time type = Ticks, time = 102773 True 2
Fn
Get Time type = Ticks, time = 102789 True 2
Fn
Get Time type = Ticks, time = 102804 True 2
Fn
Get Time type = Ticks, time = 102820 True 2
Fn
Get Time type = Ticks, time = 102835 True 2
Fn
Get Time type = Ticks, time = 102851 True 2
Fn
Get Time type = Ticks, time = 102867 True 2
Fn
Get Time type = Ticks, time = 102882 True 2
Fn
Get Time type = Ticks, time = 102898 True 1
Fn
Get Time type = Ticks, time = 102913 True 2
Fn
Get Time type = Ticks, time = 102929 True 2
Fn
Get Time type = Ticks, time = 102945 True 2
Fn
Get Time type = Ticks, time = 102960 True 2
Fn
Get Time type = Ticks, time = 102976 True 2
Fn
Get Time type = Ticks, time = 102991 True 2
Fn
Get Time type = Ticks, time = 103007 True 2
Fn
Get Time type = Ticks, time = 103023 True 2
Fn
Get Time type = Ticks, time = 103085 True 2
Fn
Get Time type = Ticks, time = 103101 True 2
Fn
Get Time type = Ticks, time = 103116 True 1
Fn
Get Time type = Ticks, time = 103132 True 3
Fn
Get Time type = Ticks, time = 103147 True 2
Fn
Get Time type = Ticks, time = 103163 True 2
Fn
Get Time type = Ticks, time = 103179 True 1
Fn
Get Time type = Ticks, time = 103194 True 2
Fn
Get Time type = Ticks, time = 103210 True 2
Fn
Get Time type = Ticks, time = 103225 True 2
Fn
Get Time type = Ticks, time = 103241 True 2
Fn
Get Time type = Ticks, time = 103257 True 2
Fn
Get Time type = Ticks, time = 103272 True 2
Fn
Get Time type = Ticks, time = 103288 True 2
Fn
Get Time type = Ticks, time = 103303 True 1
Fn
Get Time type = Ticks, time = 103319 True 2
Fn
Get Time type = Ticks, time = 103335 True 2
Fn
Get Time type = Ticks, time = 103350 True 2
Fn
Get Time type = Ticks, time = 103366 True 2
Fn
Get Time type = Ticks, time = 103381 True 2
Fn
Get Time type = Ticks, time = 103397 True 2
Fn
Get Time type = Ticks, time = 103413 True 2
Fn
Get Time type = Ticks, time = 103428 True 2
Fn
Get Time type = Ticks, time = 103444 True 2
Fn
Get Time type = Ticks, time = 103459 True 2
Fn
Get Time type = Ticks, time = 103475 True 2
Fn
Get Time type = Ticks, time = 103818 True 2
Fn
Get Time type = Ticks, time = 103834 True 2
Fn
Get Time type = Ticks, time = 103865 True 1
Fn
Get Time type = Ticks, time = 103881 True 1
Fn
Get Time type = Ticks, time = 103896 True 1
Fn
Get Time type = Ticks, time = 103912 True 2
Fn
Get Time type = Ticks, time = 103927 True 1
Fn
Get Time type = Ticks, time = 103943 True 2
Fn
Get Time type = Ticks, time = 103959 True 2
Fn
Get Time type = Ticks, time = 103974 True 3
Fn
Get Time type = Ticks, time = 103990 True 1
Fn
Get Time type = Ticks, time = 104005 True 1
Fn
Get Time type = Ticks, time = 104021 True 2
Fn
Get Time type = Ticks, time = 104037 True 2
Fn
Get Time type = Ticks, time = 104052 True 1
Fn
Get Time type = Ticks, time = 104068 True 1
Fn
Get Time type = Ticks, time = 104083 True 2
Fn
Get Time type = Ticks, time = 104099 True 1
Fn
Get Time type = Ticks, time = 104115 True 2
Fn
Get Time type = Ticks, time = 104130 True 1
Fn
Get Time type = Ticks, time = 104146 True 2
Fn
Get Time type = Ticks, time = 104161 True 1
Fn
Get Time type = Ticks, time = 104177 True 2
Fn
Get Time type = Ticks, time = 104193 True 3
Fn
Get Time type = Ticks, time = 104208 True 2
Fn
Get Time type = Ticks, time = 104224 True 1
Fn
Get Time type = Ticks, time = 104239 True 2
Fn
Get Time type = Ticks, time = 104255 True 2
Fn
Get Time type = Ticks, time = 104271 True 1
Fn
Get Time type = Ticks, time = 104286 True 2
Fn
Get Time type = Ticks, time = 104302 True 1
Fn
Get Time type = Ticks, time = 104317 True 2
Fn
Get Time type = Ticks, time = 104333 True 2
Fn
Get Time type = Ticks, time = 104349 True 2
Fn
Get Time type = Ticks, time = 104380 True 1
Fn
Get Time type = Ticks, time = 104395 True 2
Fn
Get Time type = Ticks, time = 104411 True 2
Fn
Get Time type = Ticks, time = 104427 True 1
Fn
Get Time type = Ticks, time = 104458 True 1
Fn
Get Time type = Ticks, time = 104520 True 1
Fn
Get Time type = Ticks, time = 104536 True 1
Fn
Get Time type = Ticks, time = 104567 True 1
Fn
Get Time type = Ticks, time = 104583 True 2
Fn
Get Time type = Ticks, time = 104614 True 1
Fn
Get Time type = Ticks, time = 104645 True 1
Fn
Get Time type = Ticks, time = 104692 True 1
Fn
Get Time type = Ticks, time = 104707 True 1
Fn
Get Time type = Ticks, time = 104723 True 1
Fn
Get Time type = Ticks, time = 104754 True 1
Fn
Get Time type = Ticks, time = 104770 True 1
Fn
Get Time type = Ticks, time = 104785 True 1
Fn
Get Time type = Ticks, time = 104801 True 2
Fn
Get Time type = Ticks, time = 104817 True 1
Fn
Get Time type = Ticks, time = 105238 True 1
Fn
Get Time type = Ticks, time = 106236 True 1
Fn
Get Time type = Ticks, time = 106252 True 1
Fn
Get Time type = Ticks, time = 106267 True 2
Fn
Get Time type = Ticks, time = 106283 True 1
Fn
Get Time type = Ticks, time = 106299 True 1
Fn
Get Time type = Ticks, time = 106314 True 1
Fn
Get Time type = Ticks, time = 106330 True 1
Fn
Get Time type = Ticks, time = 106345 True 1
Fn
Get Time type = Ticks, time = 106361 True 1
Fn
Get Time type = Ticks, time = 106377 True 2
Fn
Get Time type = Ticks, time = 106408 True 1
Fn
Get Time type = Ticks, time = 106455 True 1
Fn
Get Time type = Ticks, time = 106470 True 1
Fn
Get Time type = Ticks, time = 106501 True 1
Fn
Get Time type = Ticks, time = 106517 True 2
Fn
Get Time type = Ticks, time = 106548 True 3
Fn
Get Time type = Ticks, time = 106564 True 3
Fn
Get Time type = Ticks, time = 106595 True 1
Fn
Get Time type = Ticks, time = 106642 True 2
Fn
Get Time type = Ticks, time = 106657 True 1
Fn
Get Time type = Ticks, time = 106673 True 1
Fn
Get Time type = Ticks, time = 106689 True 1
Fn
Get Time type = Ticks, time = 106704 True 2
Fn
Get Time type = Ticks, time = 106720 True 1
Fn
Get Time type = Ticks, time = 106813 True 1
Fn
Get Time type = Ticks, time = 107328 True 1
Fn
Get Time type = Ticks, time = 107671 True 1
Fn
Get Time type = Ticks, time = 107874 True 1
Fn
Get Time type = Ticks, time = 108077 True 1
Fn
Get Time type = Ticks, time = 108093 True 1
Fn
Get Time type = Ticks, time = 108108 True 2
Fn
Get Time type = Ticks, time = 108124 True 1
Fn
Get Time type = Ticks, time = 108139 True 1
Fn
Get Time type = Ticks, time = 108155 True 1
Fn
Get Time type = Ticks, time = 108171 True 1
Fn
Get Time type = Ticks, time = 108186 True 1
Fn
Get Time type = Ticks, time = 108202 True 1
Fn
Get Time type = Ticks, time = 108217 True 2
Fn
Get Time type = Ticks, time = 108233 True 1
Fn
Get Time type = Ticks, time = 108249 True 1
Fn
Get Time type = Ticks, time = 108264 True 2
Fn
Get Time type = Ticks, time = 108280 True 1
Fn
Get Time type = Ticks, time = 108732 True 1
Fn
Get Time type = Ticks, time = 110167 True 1
Fn
Get Time type = Ticks, time = 110370 True 2
Fn
Get Time type = Ticks, time = 110448 True 1
Fn
Get Time type = Ticks, time = 110745 True 1
Fn
Get Time type = Ticks, time = 112819 True 1
Fn
Get Time type = Ticks, time = 117749 True 1
Fn
Get Time type = Ticks, time = 117827 True 1
Fn
Get Time type = Ticks, time = 118030 True 1
Fn
Get Time type = Ticks, time = 118279 True 1
Fn
Get Time type = Ticks, time = 119106 True 1
Fn
Get Time type = Ticks, time = 119527 True 1
Fn
Get Time type = Ticks, time = 121072 True 1
Fn
Get Time type = Ticks, time = 121306 True 1
Fn
Get Time type = Ticks, time = 121321 True 1
Fn
Get Time type = Ticks, time = 121337 True 1
Fn
Get Time type = Ticks, time = 122523 True 1
Fn
Get Time type = Ticks, time = 126142 True 1
Fn
Get Time type = Ticks, time = 126376 True 1
Fn
Get Time type = Ticks, time = 126407 True 1
Fn
Get Time type = Ticks, time = 126470 True 2
Fn
Get Time type = Ticks, time = 126782 True 1
Fn
Get Time type = Ticks, time = 127577 True 1
Fn
Get Time type = Ticks, time = 127640 True 1
Fn
Get Time type = Ticks, time = 127998 True 1
Fn
Get Time type = Ticks, time = 128919 True 1
Fn
Get Time type = Ticks, time = 128966 True 1
Fn
Get Time type = Ticks, time = 129543 True 1
Fn
Get Time type = Ticks, time = 130962 True 1
Fn
Get Time type = Ticks, time = 131056 True 1
Fn
Get Time type = Ticks, time = 131087 True 1
Fn
Get Time type = Ticks, time = 131150 True 1
Fn
Get Time type = Ticks, time = 131228 True 1
Fn
Get Time type = Ticks, time = 131415 True 1
Fn
Get Time type = Ticks, time = 132132 True 1
Fn
Get Time type = Ticks, time = 133599 True 1
Fn
Get Time type = Ticks, time = 133802 True 1
Fn
Get Time type = Ticks, time = 133817 True 1
Fn
Get Time type = Ticks, time = 133833 True 1
Fn
Get Time type = Ticks, time = 135174 True 1
Fn
Get Time type = Ticks, time = 138825 True 1
Fn
Get Time type = Ticks, time = 139137 True 1
Fn
Get Time type = Ticks, time = 139199 True 1
Fn
Get Time type = Ticks, time = 139371 True 1
Fn
Get Time type = Ticks, time = 139776 True 1
Fn
Get Time type = Ticks, time = 140837 True 1
Fn
Get Time type = Ticks, time = 140915 True 1
Fn
Get Time type = Ticks, time = 141102 True 1
Fn
Get Time type = Ticks, time = 141290 True 1
Fn
Get Time type = Ticks, time = 141820 True 1
Fn
Get Time type = Ticks, time = 141914 True 1
Fn
Get Time type = Ticks, time = 142226 True 1
Fn
Get Time type = Ticks, time = 142366 True 1
Fn
Get Time type = Ticks, time = 142382 True 1
Fn
Get Time type = Ticks, time = 142397 True 1
Fn
Get Time type = Ticks, time = 142460 True 1
Fn
Get Time type = Ticks, time = 142522 True 1
Fn
Get Time type = Ticks, time = 142553 True 1
Fn
Get Time type = Ticks, time = 142584 True 1
Fn
Get Time type = Ticks, time = 142616 True 1
Fn
Get Time type = Ticks, time = 142959 True 1
Fn
Get Time type = Ticks, time = 143926 True 1
Fn
Get Time type = Ticks, time = 144160 True 1
Fn
Get Time type = Ticks, time = 144176 True 1
Fn
Get Time type = Ticks, time = 144238 True 1
Fn
Get Time type = Ticks, time = 144254 True 2
Fn
Get Time type = Ticks, time = 144269 True 1
Fn
Get Time type = Ticks, time = 144285 True 2
Fn
Get Time type = Ticks, time = 144300 True 1
Fn
Get Time type = Ticks, time = 144332 True 1
Fn
Get Time type = Ticks, time = 144378 True 1
Fn
Get Time type = Ticks, time = 144394 True 1
Fn
Get Time type = Ticks, time = 144456 True 1
Fn
Get Time type = Ticks, time = 144628 True 1
Fn
Get Time type = Ticks, time = 145346 True 1
Fn
Get Time type = Ticks, time = 147186 True 1
Fn
Get Time type = Ticks, time = 147264 True 1
Fn
Get Time type = Ticks, time = 147389 True 1
Fn
Get Time type = Ticks, time = 147405 True 1
Fn
Get Time type = Ticks, time = 147576 True 1
Fn
Get Time type = Ticks, time = 148871 True 1
Fn
Get Time type = Ticks, time = 151851 True 1
Fn
Get Time type = Ticks, time = 151991 True 1
Fn
Get Time type = Ticks, time = 152927 True 1
Fn
Get Time type = Ticks, time = 155470 True 1
Fn
Get Time type = Ticks, time = 161242 True 1
Fn
Get Time type = Ticks, time = 182474 True 1
Fn
Get Time type = Ticks, time = 200508 True 1
Fn
Get Time type = Ticks, time = 200648 True 1
Fn
Get Time type = Ticks, time = 200710 True 1
Fn
Get Time type = Ticks, time = 200851 True 1
Fn
Get Time type = Ticks, time = 200866 True 1
Fn
Get Time type = Ticks, time = 201100 True 1
Fn
Get Time type = Ticks, time = 202614 True 1
Fn
Get Time type = Ticks, time = 205531 True 1
Fn
Get Time type = Ticks, time = 205671 True 1
Fn
Get Time type = Ticks, time = 206046 True 1
Fn
Get Time type = Ticks, time = 206888 True 1
Fn
Get Time type = Ticks, time = 211974 True 1
Fn
Get Time type = Ticks, time = 225608 True 1
Fn
Get Time type = Ticks, time = 225717 True 1
Fn
Get Time type = Ticks, time = 225795 True 1
Fn
Get Time type = Ticks, time = 225951 True 1
Fn
Get Time type = Ticks, time = 225998 True 1
Fn
Get Time type = Ticks, time = 226217 True 1
Fn
Get Time type = Ticks, time = 227808 True 1
Fn
Get Time type = Ticks, time = 230850 True 1
Fn
Get Time type = Ticks, time = 230990 True 1
Fn
Get Time type = Ticks, time = 231115 True 1
Fn
Get Time type = Ticks, time = 231209 True 1
Fn
Get Time type = Ticks, time = 237745 True 1
Fn
Get Time type = Ticks, time = 256465 True 1
Fn
Get Time type = Ticks, time = 257370 True 1
Fn
Get Time type = Ticks, time = 257386 True 1
Fn
Get Time type = Ticks, time = 257401 True 1
Fn
Get Time type = Ticks, time = 257448 True 1
Fn
Get Time type = Ticks, time = 257573 True 1
Fn
Get Time type = Ticks, time = 257682 True 1
Fn
Get Time type = Ticks, time = 257729 True 1
Fn
Get Time type = Ticks, time = 257807 True 1
Fn
Get Time type = Ticks, time = 258010 True 1
Fn
Get Time type = Ticks, time = 258025 True 1
Fn
Get Time type = Ticks, time = 258041 True 1
Fn
Get Time type = Ticks, time = 258088 True 1
Fn
Get Time type = Ticks, time = 258103 True 2
Fn
Get Time type = Ticks, time = 258197 True 1
Fn
Get Time type = Ticks, time = 258353 True 1
Fn
Get Time type = Ticks, time = 258540 True 1
Fn
Get Time type = Ticks, time = 258743 True 1
Fn
Get Time type = Ticks, time = 258758 True 1
Fn
Get Time type = Ticks, time = 258805 True 1
Fn
Get Time type = Ticks, time = 258868 True 1
Fn
Get Time type = Ticks, time = 258930 True 1
Fn
Get Time type = Ticks, time = 258961 True 1
Fn
Get Time type = Ticks, time = 258977 True 1
Fn
Get Time type = Ticks, time = 258992 True 2
Fn
Get Time type = Ticks, time = 259008 True 1
Fn
Get Time type = Ticks, time = 259024 True 2
Fn
Get Time type = Ticks, time = 259039 True 1
Fn
Get Time type = Ticks, time = 259055 True 1
Fn
Get Time type = Ticks, time = 259086 True 1
Fn
Get Time type = Ticks, time = 259133 True 1
Fn
Get Time type = Ticks, time = 259273 True 1
Fn
Get Time type = Ticks, time = 259429 True 1
Fn
Get Time type = Ticks, time = 259476 True 1
Fn
Get Time type = Ticks, time = 259538 True 1
Fn
Get Time type = Ticks, time = 259554 True 1
Fn
Get Time type = Ticks, time = 259616 True 1
Fn
Get Time type = Ticks, time = 259772 True 1
Fn
Get Time type = Ticks, time = 259835 True 1
Fn
Get Time type = Ticks, time = 259866 True 1
Fn
Get Time type = Ticks, time = 259944 True 1
Fn
Get Time type = Ticks, time = 260038 True 1
Fn
Get Time type = Ticks, time = 260209 True 1
Fn
Get Time type = Ticks, time = 260490 True 1
Fn
Get Time type = Ticks, time = 260802 True 1
Fn
Get Time type = Ticks, time = 261223 True 1
Fn
Get Time type = Ticks, time = 261551 True 1
Fn
Get Time type = Ticks, time = 261660 True 1
Fn
Get Time type = Ticks, time = 261816 True 1
Fn
Get Time type = Ticks, time = 261847 True 1
Fn
Get Time type = Ticks, time = 261863 True 1
Fn
Get Time type = Ticks, time = 261878 True 2
Fn
Get Time type = Ticks, time = 261894 True 2
Fn
Get Time type = Ticks, time = 261910 True 2
Fn
Get Time type = Ticks, time = 261925 True 2
Fn
Get Time type = Ticks, time = 261941 True 2
Fn
Get Time type = Ticks, time = 261956 True 3
Fn
Get Time type = Ticks, time = 261972 True 1
Fn
Get Time type = Ticks, time = 261988 True 2
Fn
Get Time type = Ticks, time = 262003 True 3
Fn
Get Time type = Ticks, time = 262019 True 1
Fn
Get Time type = Ticks, time = 262034 True 2
Fn
Get Time type = Ticks, time = 262050 True 3
Fn
Get Time type = Ticks, time = 262066 True 1
Fn
Get Time type = Ticks, time = 262128 True 1
Fn
Get Time type = Ticks, time = 262300 True 1
Fn
Get Time type = Ticks, time = 262456 True 1
Fn
Get Time type = Ticks, time = 262534 True 1
Fn
Get Time type = Ticks, time = 262924 True 1
Fn
Get Time type = Ticks, time = 263516 True 1
Fn
Get Time type = Ticks, time = 263563 True 1
Fn
Get Time type = Ticks, time = 263704 True 1
Fn
Get Time type = Ticks, time = 263735 True 1
Fn
Get Time type = Ticks, time = 263797 True 1
Fn
Get Time type = Ticks, time = 263813 True 1
Fn
Get Time type = Ticks, time = 263828 True 1
Fn
Get Time type = Ticks, time = 263860 True 1
Fn
Get Time type = Ticks, time = 263891 True 1
Fn
Get Time type = Ticks, time = 263938 True 1
Fn
Get Time type = Ticks, time = 263984 True 1
Fn
Get Time type = Ticks, time = 264094 True 1
Fn
Get Time type = Ticks, time = 264140 True 1
Fn
Get Time type = Ticks, time = 264156 True 1
Fn
Get Time type = Ticks, time = 264172 True 2
Fn
Get Time type = Ticks, time = 264187 True 1
Fn
Get Time type = Ticks, time = 264203 True 2
Fn
Get Time type = Ticks, time = 264218 True 2
Fn
Get Time type = Ticks, time = 264234 True 2
Fn
Get Time type = Ticks, time = 264265 True 1
Fn
Get Time type = Ticks, time = 264281 True 1
Fn
Get Time type = Ticks, time = 264296 True 2
Fn
Get Time type = Ticks, time = 264312 True 2
Fn
Get Time type = Ticks, time = 264328 True 1
Fn
Get Time type = Ticks, time = 264343 True 2
Fn
Get Time type = Ticks, time = 264359 True 1
Fn
Get Time type = Ticks, time = 264374 True 1
Fn
Get Time type = Ticks, time = 264390 True 2
Fn
Get Time type = Ticks, time = 264406 True 2
Fn
Get Time type = Ticks, time = 264421 True 1
Fn
Get Time type = Ticks, time = 264437 True 2
Fn
Get Time type = Ticks, time = 264452 True 1
Fn
Get Time type = Ticks, time = 264468 True 2
Fn
Get Time type = Ticks, time = 264484 True 1
Fn
Get Time type = Ticks, time = 264499 True 2
Fn
Get Time type = Ticks, time = 264515 True 2
Fn
Get Time type = Ticks, time = 264530 True 3
Fn
Get Time type = Ticks, time = 264546 True 2
Fn
Get Time type = Ticks, time = 264562 True 2
Fn
Get Time type = Ticks, time = 264577 True 2
Fn
Get Time type = Ticks, time = 264593 True 2
Fn
Get Time type = Ticks, time = 264608 True 1
Fn
Get Time type = Ticks, time = 264624 True 2
Fn
Get Time type = Ticks, time = 264640 True 2
Fn
Get Time type = Ticks, time = 264655 True 2
Fn
Get Time type = Ticks, time = 264671 True 2
Fn
Get Time type = Ticks, time = 264686 True 2
Fn
Get Time type = Ticks, time = 264702 True 2
Fn
Get Time type = Ticks, time = 264718 True 1
Fn
Get Time type = Ticks, time = 264733 True 2
Fn
Get Time type = Ticks, time = 264749 True 2
Fn
Get Time type = Ticks, time = 264764 True 2
Fn
Get Time type = Ticks, time = 264780 True 1
Fn
Get Time type = Ticks, time = 264796 True 2
Fn
Get Time type = Ticks, time = 264827 True 1
Fn
Get Time type = Ticks, time = 264842 True 2
Fn
Get Time type = Ticks, time = 264858 True 1
Fn
Get Time type = Ticks, time = 264874 True 2
Fn
Get Time type = Ticks, time = 264889 True 2
Fn
Get Time type = Ticks, time = 264905 True 2
Fn
Get Time type = Ticks, time = 264920 True 2
Fn
Get Time type = Ticks, time = 264936 True 2
Fn
Get Time type = Ticks, time = 264952 True 2
Fn
Get Time type = Ticks, time = 264967 True 2
Fn
Get Time type = Ticks, time = 264983 True 2
Fn
Get Time type = Ticks, time = 264998 True 1
Fn
Get Time type = Ticks, time = 265014 True 1
Fn
Get Time type = Ticks, time = 265139 True 1
Fn
Get Time type = Ticks, time = 265186 True 1
Fn
Get Time type = Ticks, time = 265201 True 1
Fn
Get Time type = Ticks, time = 265310 True 1
Fn
Get Time type = Ticks, time = 265576 True 1
Fn
Get Time type = Ticks, time = 265685 True 1
Fn
Get Time type = Ticks, time = 265732 True 1
Fn
Get Time type = Ticks, time = 265825 True 1
Fn
Get Time type = Ticks, time = 265872 True 1
Fn
Get Time type = Ticks, time = 265934 True 1
Fn
Get Time type = Ticks, time = 265981 True 1
Fn
Get Time type = Ticks, time = 265997 True 2
Fn
Get Time type = Ticks, time = 266028 True 1
Fn
Get Time type = Ticks, time = 266090 True 1
Fn
Get Time type = Ticks, time = 266122 True 1
Fn
Get Time type = Ticks, time = 266153 True 1
Fn
Get Time type = Ticks, time = 266215 True 1
Fn
Get Time type = Ticks, time = 266324 True 1
Fn
Get Time type = Ticks, time = 266590 True 1
Fn
Get Time type = Ticks, time = 266621 True 1
Fn
Get Time type = Ticks, time = 266668 True 1
Fn
Get Time type = Ticks, time = 266855 True 1
Fn
Get Time type = Ticks, time = 267338 True 1
Fn
Get Time type = Ticks, time = 267510 True 1
Fn
Get Time type = Ticks, time = 267541 True 1
Fn
Get Time type = Ticks, time = 267572 True 2
Fn
Get Time type = Ticks, time = 267760 True 1
Fn
Get Time type = Ticks, time = 268087 True 1
Fn
Get Time type = Ticks, time = 268852 True 1
Fn
Get Time type = Ticks, time = 270973 True 1
Fn
Get Time type = Ticks, time = 273173 True 1
Fn
Get Time type = Ticks, time = 279288 True 1
Fn
Get Time type = Ticks, time = 279382 True 1
Fn
Get Time type = Ticks, time = 279397 True 1
Fn
Get Time type = Ticks, time = 279413 True 1
Fn
Get Time type = Ticks, time = 279460 True 1
Fn
Get Time type = Ticks, time = 279569 True 1
Fn
Get Time type = Ticks, time = 279631 True 1
Fn
Get Time type = Ticks, time = 279647 True 1
Fn
Get Time type = Ticks, time = 279678 True 1
Fn
Get Time type = Ticks, time = 279694 True 2
Fn
Get Time type = Ticks, time = 279709 True 1
Fn
Get Time type = Ticks, time = 279725 True 1
Fn
Get Time type = Ticks, time = 279756 True 1
Fn
Get Time type = Ticks, time = 279818 True 1
Fn
Get Time type = Ticks, time = 279943 True 1
Fn
Get Time type = Ticks, time = 280286 True 1
Fn
Get Time type = Ticks, time = 280442 True 1
Fn
Get Time type = Ticks, time = 280520 True 1
Fn
Get Time type = Ticks, time = 280583 True 1
Fn
Get Time type = Ticks, time = 280598 True 1
Fn
Get Time type = Ticks, time = 280614 True 1
Fn
Get Time type = Ticks, time = 280630 True 1
Fn
Get Time type = Ticks, time = 280645 True 1
Fn
Get Time type = Ticks, time = 280692 True 1
Fn
Get Time type = Ticks, time = 280801 True 1
Fn
Get Time type = Ticks, time = 280926 True 1
Fn
Get Time type = Ticks, time = 281035 True 1
Fn
Get Time type = Ticks, time = 281223 True 1
Fn
Get Time type = Ticks, time = 281269 True 1
Fn
Get Time type = Ticks, time = 281379 True 2
Fn
Get Time type = Ticks, time = 281394 True 1
Fn
Get Time type = Ticks, time = 281410 True 1
Fn
Get Time type = Ticks, time = 281535 True 1
Fn
Get Time type = Ticks, time = 281878 True 1
Fn
Get Time type = Ticks, time = 282143 True 1
Fn
Get Time type = Ticks, time = 282689 True 1
Fn
Get Time type = Ticks, time = 282751 True 1
Fn
Get Time type = Ticks, time = 282876 True 1
Fn
Get Time type = Ticks, time = 282939 True 1
Fn
Get Time type = Ticks, time = 282985 True 1
Fn
Get Time type = Ticks, time = 283110 True 1
Fn
Get Time type = Ticks, time = 283126 True 2
Fn
Get Time type = Ticks, time = 283141 True 1
Fn
Get Time type = Ticks, time = 283173 True 2
Fn
Get Time type = Ticks, time = 283188 True 2
Fn
Get Time type = Ticks, time = 283204 True 2
Fn
Get Time type = Ticks, time = 283235 True 1
Fn
Get Time type = Ticks, time = 283282 True 1
Fn
Get Time type = Ticks, time = 283297 True 2
Fn
Get Time type = Ticks, time = 283313 True 1
Fn
Get Time type = Ticks, time = 283329 True 2
Fn
Get Time type = Ticks, time = 283344 True 1
Fn
Get Time type = Ticks, time = 283360 True 2
Fn
Get Time type = Ticks, time = 283375 True 1
Fn
Get Time type = Ticks, time = 283391 True 2
Fn
Get Time type = Ticks, time = 283407 True 1
Fn
Get Time type = Ticks, time = 283422 True 2
Fn
Get Time type = Ticks, time = 283438 True 2
Fn
Get Time type = Ticks, time = 283453 True 2
Fn
Get Time type = Ticks, time = 283469 True 2
Fn
Get Time type = Ticks, time = 283485 True 1
Fn
Get Time type = Ticks, time = 283500 True 1
Fn
Get Time type = Ticks, time = 283516 True 2
Fn
Get Time type = Ticks, time = 283531 True 2
Fn
Get Time type = Ticks, time = 283547 True 1
Fn
Get Time type = Ticks, time = 283563 True 2
Fn
Get Time type = Ticks, time = 283578 True 1
Fn
Get Time type = Ticks, time = 283594 True 1
Fn
Get Time type = Ticks, time = 283703 True 2
Fn
Get Time type = Ticks, time = 283719 True 1
Fn
Get Time type = Ticks, time = 283734 True 1
Fn
Get Time type = Ticks, time = 283750 True 1
Fn
Get Time type = Ticks, time = 283765 True 1
Fn
Get Time type = Ticks, time = 283781 True 1
Fn
Get Time type = Ticks, time = 283828 True 1
Fn
Get Time type = Ticks, time = 283984 True 1
Fn
Get Time type = Ticks, time = 284046 True 1
Fn
Get Time type = Ticks, time = 284218 True 1
Fn
Get Time type = Ticks, time = 284358 True 1
Fn
Get Time type = Ticks, time = 284717 True 1
Fn
Get Time type = Ticks, time = 284733 True 1
Fn
Get Time type = Ticks, time = 284764 True 1
Fn
Get Time type = Ticks, time = 284826 True 1
Fn
Get Time type = Ticks, time = 284857 True 1
Fn
Get Time type = Ticks, time = 284889 True 1
Fn
Get Time type = Ticks, time = 284904 True 1
Fn
Get Time type = Ticks, time = 284920 True 1
Fn
Get Time type = Ticks, time = 284935 True 1
Fn
Get Time type = Ticks, time = 284951 True 1
Fn
Get Time type = Ticks, time = 284967 True 1
Fn
Get Time type = Ticks, time = 284982 True 1
Fn
Get Time type = Ticks, time = 285013 True 1
Fn
Get Time type = Ticks, time = 285045 True 1
Fn
Get Time type = Ticks, time = 285091 True 1
Fn
Get Time type = Ticks, time = 285185 True 1
Fn
Get Time type = Ticks, time = 285201 True 1
Fn
Get Time type = Ticks, time = 285216 True 1
Fn
Get Time type = Ticks, time = 285232 True 2
Fn
Get Time type = Ticks, time = 285247 True 1
Fn
Get Time type = Ticks, time = 285263 True 1
Fn
Get Time type = Ticks, time = 285279 True 2
Fn
Get Time type = Ticks, time = 285294 True 2
Fn
Get Time type = Ticks, time = 285341 True 2
Fn
Get Time type = Ticks, time = 285357 True 1
Fn
Get Time type = Ticks, time = 285372 True 3
Fn
Get Time type = Ticks, time = 285388 True 1
Fn
Get Time type = Ticks, time = 285403 True 2
Fn
Get Time type = Ticks, time = 285419 True 2
Fn
Get Time type = Ticks, time = 285435 True 2
Fn
Get Time type = Ticks, time = 285450 True 1
Fn
Get Time type = Ticks, time = 285466 True 2
Fn
Get Time type = Ticks, time = 285481 True 3
Fn
Get Time type = Ticks, time = 285497 True 1
Fn
Get Time type = Ticks, time = 285513 True 2
Fn
Get Time type = Ticks, time = 285528 True 2
Fn
Get Time type = Ticks, time = 285544 True 2
Fn
Get Time type = Ticks, time = 285559 True 2
Fn
Get Time type = Ticks, time = 285575 True 2
Fn
Get Time type = Ticks, time = 285591 True 2
Fn
Get Time type = Ticks, time = 285606 True 1
Fn
Get Time type = Ticks, time = 285622 True 2
Fn
Get Time type = Ticks, time = 285637 True 2
Fn
Get Time type = Ticks, time = 285653 True 2
Fn
Get Time type = Ticks, time = 285669 True 2
Fn
Get Time type = Ticks, time = 285684 True 2
Fn
Get Time type = Ticks, time = 285700 True 2
Fn
Get Time type = Ticks, time = 285715 True 1
Fn
Get Time type = Ticks, time = 285731 True 2
Fn
Get Time type = Ticks, time = 285747 True 2
Fn
Get Time type = Ticks, time = 285762 True 1
Fn
Get Time type = Ticks, time = 285778 True 2
Fn
Get Time type = Ticks, time = 285793 True 1
Fn
Get Time type = Ticks, time = 285809 True 1
Fn
Get Time type = Ticks, time = 285825 True 1
Fn
Get Time type = Ticks, time = 285840 True 1
Fn
Get Time type = Ticks, time = 285856 True 2
Fn
Get Time type = Ticks, time = 285871 True 1
Fn
Get Time type = Ticks, time = 285887 True 2
Fn
Get Time type = Ticks, time = 285903 True 2
Fn
Get Time type = Ticks, time = 285934 True 2
Fn
Get Time type = Ticks, time = 285949 True 2
Fn
Get Time type = Ticks, time = 285965 True 1
Fn
Get Time type = Ticks, time = 285981 True 2
Fn
Get Time type = Ticks, time = 285996 True 2
Fn
Get Time type = Ticks, time = 286012 True 2
Fn
Get Time type = Ticks, time = 286027 True 1
Fn
Get Time type = Ticks, time = 286043 True 2
Fn
Get Time type = Ticks, time = 286059 True 2
Fn
Get Time type = Ticks, time = 286074 True 1
Fn
Get Time type = Ticks, time = 286090 True 2
Fn
Get Time type = Ticks, time = 286105 True 1
Fn
Get Time type = Ticks, time = 286121 True 2
Fn
Get Time type = Ticks, time = 286137 True 1
Fn
Get Time type = Ticks, time = 286152 True 2
Fn
Get Time type = Ticks, time = 286168 True 2
Fn
Get Time type = Ticks, time = 286183 True 1
Fn
Get Time type = Ticks, time = 286199 True 2
Fn
Get Time type = Ticks, time = 286215 True 2
Fn
Get Time type = Ticks, time = 286230 True 1
Fn
Get Time type = Ticks, time = 286246 True 2
Fn
Get Time type = Ticks, time = 286261 True 1
Fn
Get Time type = Ticks, time = 286277 True 2
Fn
Get Time type = Ticks, time = 286293 True 2
Fn
Get Time type = Ticks, time = 286308 True 2
Fn
Get Time type = Ticks, time = 286324 True 1
Fn
Get Time type = Ticks, time = 286339 True 2
Fn
Get Time type = Ticks, time = 286355 True 2
Fn
Get Time type = Ticks, time = 286371 True 1
Fn
Get Time type = Ticks, time = 286386 True 2
Fn
Get Time type = Ticks, time = 286402 True 1
Fn
Get Time type = Ticks, time = 286417 True 2
Fn
Get Time type = Ticks, time = 286433 True 1
Fn
Get Time type = Ticks, time = 286449 True 2
Fn
Get Time type = Ticks, time = 286464 True 2
Fn
Get Time type = Ticks, time = 286480 True 1
Fn
Get Time type = Ticks, time = 286495 True 2
Fn
Get Time type = Ticks, time = 286511 True 2
Fn
Get Time type = Ticks, time = 286527 True 1
Fn
Get Time type = Ticks, time = 286542 True 2
Fn
Get Time type = Ticks, time = 286558 True 1
Fn
Get Time type = Ticks, time = 286573 True 2
Fn
Get Time type = Ticks, time = 286589 True 2
Fn
Get Time type = Ticks, time = 286620 True 2
Fn
Get Time type = Ticks, time = 286636 True 2
Fn
Get Time type = Ticks, time = 286651 True 1
Fn
Get Time type = Ticks, time = 286667 True 2
Fn
Get Time type = Ticks, time = 286683 True 2
Fn
Get Time type = Ticks, time = 286698 True 1
Fn
Get Time type = Ticks, time = 286714 True 1
Fn
Get Time type = Ticks, time = 286729 True 2
Fn
Get Time type = Ticks, time = 286745 True 1
Fn
Get Time type = Ticks, time = 286761 True 2
Fn
Get Time type = Ticks, time = 286776 True 1
Fn
Get Time type = Ticks, time = 286792 True 2
Fn
Get Time type = Ticks, time = 286807 True 2
Fn
Get Time type = Ticks, time = 286823 True 1
Fn
Get Time type = Ticks, time = 286839 True 2
Fn
Get Time type = Ticks, time = 286854 True 2
Fn
Get Time type = Ticks, time = 286870 True 1
Fn
Get Time type = Ticks, time = 286885 True 2
Fn
Get Time type = Ticks, time = 286901 True 2
Fn
Get Time type = Ticks, time = 286917 True 1
Fn
Get Time type = Ticks, time = 286932 True 2
Fn
Get Time type = Ticks, time = 286948 True 2
Fn
Get Time type = Ticks, time = 286963 True 2
Fn
Get Time type = Ticks, time = 286979 True 1
Fn
Get Time type = Ticks, time = 286995 True 2
Fn
Get Time type = Ticks, time = 287119 True 1
Fn
Get Time type = Ticks, time = 287135 True 1
Fn
Get Time type = Ticks, time = 287151 True 2
Fn
Get Time type = Ticks, time = 287166 True 2
Fn
Get Time type = Ticks, time = 287182 True 1
Fn
Get Time type = Ticks, time = 287197 True 2
Fn
Get Time type = Ticks, time = 287213 True 2
Fn
Get Time type = Ticks, time = 287229 True 1
Fn
Get Time type = Ticks, time = 287244 True 2
Fn
Get Time type = Ticks, time = 287260 True 1
Fn
Get Time type = Ticks, time = 287275 True 2
Fn
Get Time type = Ticks, time = 287291 True 2
Fn
Get Time type = Ticks, time = 287307 True 1
Fn
Get Time type = Ticks, time = 287322 True 2
Fn
Get Time type = Ticks, time = 287338 True 1
Fn
Get Time type = Ticks, time = 287353 True 2
Fn
Get Time type = Ticks, time = 287369 True 2
Fn
Get Time type = Ticks, time = 287385 True 1
Fn
Get Time type = Ticks, time = 287416 True 1
Fn
Get Time type = Ticks, time = 287431 True 1
Fn
Get Time type = Ticks, time = 287447 True 2
Fn
Get Time type = Ticks, time = 287494 True 2
Fn
Get Time type = Ticks, time = 287509 True 1
Fn
Get Time type = Ticks, time = 287619 True 2
Fn
Get Time type = Ticks, time = 287634 True 1
Fn
Get Time type = Ticks, time = 287650 True 1
Fn
Get Time type = Ticks, time = 287697 True 2
Fn
Get Time type = Ticks, time = 287712 True 1
Fn
Get Time type = Ticks, time = 287728 True 1
Fn
Get Time type = Ticks, time = 287743 True 1
Fn
Get Time type = Ticks, time = 287759 True 2
Fn
Get Time type = Ticks, time = 287775 True 2
Fn
Get Time type = Ticks, time = 287790 True 1
Fn
Get Time type = Ticks, time = 287806 True 2
Fn
Get Time type = Ticks, time = 287821 True 1
Fn
Get Time type = Ticks, time = 287837 True 2
Fn
Get Time type = Ticks, time = 287853 True 1
Fn
Get Time type = Ticks, time = 287868 True 2
Fn
Get Time type = Ticks, time = 287884 True 1
Fn
Get Time type = Ticks, time = 287899 True 2
Fn
Get Time type = Ticks, time = 287962 True 1
Fn
Get Time type = Ticks, time = 288133 True 1
Fn
Get Time type = Ticks, time = 288149 True 1
Fn
Get Time type = Ticks, time = 288165 True 1
Fn
Get Time type = Ticks, time = 288180 True 1
Fn
Get Time type = Ticks, time = 288196 True 1
Fn
Get Time type = Ticks, time = 288258 True 1
Fn
Get Time type = Ticks, time = 288414 True 1
Fn
Get Time type = Ticks, time = 288508 True 1
Fn
Get Time type = Ticks, time = 288679 True 1
Fn
Get Time type = Ticks, time = 288726 True 1
Fn
Get Time type = Ticks, time = 288835 True 1
Fn
Get Time type = Ticks, time = 288945 True 1
Fn
Get Time type = Ticks, time = 289085 True 1
Fn
Get Time type = Ticks, time = 289116 True 1
Fn
Get Time type = Ticks, time = 289210 True 1
Fn
Get Time type = Ticks, time = 289413 True 1
Fn
Get Time type = Ticks, time = 289725 True 1
Fn
Get Time type = Ticks, time = 289740 True 1
Fn
Get Time type = Ticks, time = 289771 True 2
Fn
Get Time type = Ticks, time = 289787 True 1
Fn
Get Time type = Ticks, time = 289834 True 1
Fn
Get Time type = Ticks, time = 289912 True 1
Fn
Get Time type = Ticks, time = 289927 True 1
Fn
Get Time type = Ticks, time = 289990 True 1
Fn
Get Time type = Ticks, time = 290099 True 1
Fn
Get Time type = Ticks, time = 290193 True 1
Fn
Get Time type = Ticks, time = 290286 True 1
Fn
Get Time type = Ticks, time = 290333 True 1
Fn
Get Time type = Ticks, time = 290380 True 1
Fn
Get Time type = Ticks, time = 290427 True 1
Fn
Get Time type = Ticks, time = 290536 True 2
Fn
Get Time type = Ticks, time = 290551 True 1
Fn
Get Time type = Ticks, time = 290567 True 1
Fn
Get Time type = Ticks, time = 290598 True 1
Fn
Get Time type = Ticks, time = 290676 True 1
Fn
Get Time type = Ticks, time = 290754 True 1
Fn
Get Time type = Ticks, time = 290770 True 1
Fn
Get Time type = Ticks, time = 290785 True 1
Fn
Get Time type = Ticks, time = 290801 True 2
Fn
Get Time type = Ticks, time = 290832 True 1
Fn
Get Time type = Ticks, time = 290863 True 1
Fn
Get Time type = Ticks, time = 290879 True 1
Fn
Get Time type = Ticks, time = 290895 True 2
Fn
Get Time type = Ticks, time = 290910 True 1
Fn
Get Time type = Ticks, time = 290988 True 1
Fn
Get Time type = Ticks, time = 291285 True 1
Fn
Get Time type = Ticks, time = 291394 True 1
Fn
Get Time type = Ticks, time = 291409 True 1
Fn
Get Time type = Ticks, time = 291425 True 1
Fn
Get Time type = Ticks, time = 291441 True 2
Fn
Get Time type = Ticks, time = 291456 True 1
Fn
Get Time type = Ticks, time = 291472 True 2
Fn
Get Time type = Ticks, time = 291503 True 1
Fn
Get Time type = Ticks, time = 291612 True 1
Fn
Get Time type = Ticks, time = 291721 True 2
Fn
Get Time type = Ticks, time = 291737 True 1
Fn
Get Time type = Ticks, time = 291784 True 1
Fn
Get Time type = Ticks, time = 291940 True 1
Fn
Get Time type = Ticks, time = 291955 True 1
Fn
Get Time type = Ticks, time = 291971 True 2
Fn
Get Time type = Ticks, time = 291987 True 1
Fn
Get Time type = Ticks, time = 292002 True 2
Fn
Get Time type = Ticks, time = 292033 True 1
Fn
Get Time type = Ticks, time = 292049 True 1
Fn
Get Time type = Ticks, time = 292065 True 1
Fn
Get Time type = Ticks, time = 292096 True 1
Fn
Get Time type = Ticks, time = 292111 True 1
Fn
Get Time type = Ticks, time = 292127 True 2
Fn
Get Time type = Ticks, time = 292143 True 1
Fn
Get Time type = Ticks, time = 292158 True 2
Fn
Get Time type = Ticks, time = 292174 True 1
Fn
Get Time type = Ticks, time = 292236 True 1
Fn
Get Time type = Ticks, time = 292314 True 1
Fn
Get Time type = Ticks, time = 292330 True 2
Fn
Get Time type = Ticks, time = 292345 True 1
Fn
Get Time type = Ticks, time = 292361 True 1
Fn
Get Time type = Ticks, time = 292377 True 2
Fn
Get Time type = Ticks, time = 292408 True 2
Fn
Get Time type = Ticks, time = 292423 True 1
Fn
Get Time type = Ticks, time = 292439 True 1
Fn
Get Time type = Ticks, time = 292455 True 1
Fn
Get Time type = Ticks, time = 292470 True 1
Fn
Get Time type = Ticks, time = 292486 True 1
Fn
Get Time type = Ticks, time = 292501 True 2
Fn
Get Time type = Ticks, time = 292517 True 2
Fn
Get Time type = Ticks, time = 292533 True 2
Fn
Get Time type = Ticks, time = 292548 True 1
Fn
Get Time type = Ticks, time = 292564 True 1
Fn
Get Time type = Ticks, time = 292626 True 1
Fn
Get Time type = Ticks, time = 292689 True 1
Fn
Get Time type = Ticks, time = 292704 True 1
Fn
Get Time type = Ticks, time = 292720 True 1
Fn
Get Time type = Ticks, time = 292751 True 1
Fn
Get Time type = Ticks, time = 292876 True 2
Fn
Get Time type = Ticks, time = 292891 True 1
Fn
Get Time type = Ticks, time = 292938 True 1
Fn
Get Time type = Ticks, time = 293188 True 1
Fn
Get Time type = Ticks, time = 293203 True 1
Fn
Get Time type = Ticks, time = 293219 True 1
Fn
Get Time type = Ticks, time = 293235 True 1
Fn
Get Time type = Ticks, time = 293250 True 1
Fn
Get Time type = Ticks, time = 293266 True 1
Fn
Get Time type = Ticks, time = 293281 True 2
Fn
Get Time type = Ticks, time = 293297 True 2
Fn
Get Time type = Ticks, time = 293313 True 1
Fn
Get Time type = Ticks, time = 293328 True 1
Fn
Get Time type = Ticks, time = 293406 True 1
Fn
Get Time type = Ticks, time = 293703 True 1
Fn
Get Time type = Ticks, time = 293718 True 1
Fn
Get Time type = Ticks, time = 293734 True 1
Fn
Get Time type = Ticks, time = 294342 True 1
Fn
Get Time type = Ticks, time = 295840 True 1
Fn
Get Time type = Ticks, time = 296245 True 1
Fn
Get Time type = Ticks, time = 296433 True 1
Fn
Get Time type = Ticks, time = 296589 True 2
Fn
Get Time type = Ticks, time = 296620 True 2
Fn
Get Time type = Ticks, time = 296635 True 1
Fn
Get Time type = Ticks, time = 296682 True 1
Fn
Get Time type = Ticks, time = 296713 True 1
Fn
Get Time type = Ticks, time = 296729 True 2
Fn
Get Time type = Ticks, time = 296745 True 2
Fn
Get Time type = Ticks, time = 296776 True 1
Fn
Get Time type = Ticks, time = 296854 True 2
Fn
Get Time type = Ticks, time = 296869 True 2
Fn
Get Time type = Ticks, time = 296885 True 2
Fn
Get Time type = Ticks, time = 296901 True 1
Fn
Get Time type = Ticks, time = 296916 True 1
Fn
Get Time type = Ticks, time = 296932 True 2
Fn
Get Time type = Ticks, time = 296947 True 2
Fn
Get Time type = Ticks, time = 296963 True 2
Fn
Get Time type = Ticks, time = 296979 True 2
Fn
Get Time type = Ticks, time = 296994 True 2
Fn
Get Time type = Ticks, time = 297135 True 1
Fn
Get Time type = Ticks, time = 297150 True 1
Fn
Get Time type = Ticks, time = 297166 True 2
Fn
Get Time type = Ticks, time = 297181 True 1
Fn
Get Time type = Ticks, time = 297197 True 2
Fn
Get Time type = Ticks, time = 297213 True 2
Fn
Get Time type = Ticks, time = 297228 True 2
Fn
Get Time type = Ticks, time = 297244 True 2
Fn
Get Time type = Ticks, time = 297259 True 2
Fn
Get Time type = Ticks, time = 297275 True 2
Fn
Get Time type = Ticks, time = 297291 True 2
Fn
Get Time type = Ticks, time = 297306 True 2
Fn
Get Time type = Ticks, time = 297322 True 2
Fn
Get Time type = Ticks, time = 297337 True 2
Fn
Get Time type = Ticks, time = 297353 True 2
Fn
Get Time type = Ticks, time = 297369 True 3
Fn
Get Time type = Ticks, time = 297384 True 2
Fn
Get Time type = Ticks, time = 297400 True 2
Fn
Get Time type = Ticks, time = 297415 True 1
Fn
Get Time type = Ticks, time = 297431 True 1
Fn
Get Time type = Ticks, time = 297447 True 1
Fn
Get Time type = Ticks, time = 297462 True 1
Fn
Get Time type = Ticks, time = 297478 True 1
Fn
Get Time type = Ticks, time = 297493 True 1
Fn
Get Time type = Ticks, time = 297509 True 1
Fn
Get Time type = Ticks, time = 297525 True 2
Fn
Get Time type = Ticks, time = 297540 True 1
Fn
Get Time type = Ticks, time = 297556 True 1
Fn
Get Time type = Ticks, time = 297571 True 1
Fn
Get Time type = Ticks, time = 297587 True 2
Fn
Get Time type = Ticks, time = 297603 True 2
Fn
Get Time type = Ticks, time = 297618 True 1
Fn
Get Time type = Ticks, time = 297634 True 2
Fn
Get Time type = Ticks, time = 297649 True 2
Fn
Get Time type = Ticks, time = 297665 True 2
Fn
Get Time type = Ticks, time = 297681 True 1
Fn
For performance reasons, the remaining 4 entries are omitted.
The remaining entries can be found in glog.xml.
Environment (1)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 1
Fn
Data
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image