1f15a3e2...0127 | Grouped Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware

1f15a3e297b9017c40276ad1c32d606c8beebbf432227b47360f3674bfb60127 (SHA256)

Psycho.ex_.exe

Windows Exe (x86-32)

Created at 2019-01-05 23:44:00

...

Notifications (2/2)

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

The operating system was rebooted during the analysis.

Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x94c Analysis Target High (Elevated) psycho.ex_.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe" -
#2 0xb1c Child Process High (Elevated) cmd.exe "cmd.exe" /c vssadmin.exe delete shadows /all /quiet #1
#3 0xb44 Child Process High (Elevated) vssadmin.exe vssadmin.exe delete shadows /all /quiet #2
#11 0x4 Kernel Analysis System (Elevated) System - -

Behavior Information - Grouped by Category

Process #1: psycho.ex_.exe
3994 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\psycho.ex_.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:23, Reason: Analysis Target
Unmonitor End Time: 00:03:38, Reason: Self Terminated
Monitor Duration 00:03:15
OS Process Information
»
Information Value
PID 0x94c
Parent PID 0x458 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 950
0x 95C
0x 960
0x 964
0x 968
0x 974
0x 978
0x 97C
0x A48
0x A4C
0x B10
0x BA8
0x BEC
0x BF4
0x BF8
0x 7E0
0x 830
0x 7A8
0x 550
0x 2D0
0x 1C4
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
private_0x0000000000020000 0x00020000 0x00020fff Private Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
private_0x0000000000050000 0x00050000 0x00050fff Private Memory rw True False False -
pagefile_0x0000000000060000 0x00060000 0x00060fff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000070000 0x00070000 0x0007ffff Pagefile Backed Memory rw True False False -
private_0x0000000000080000 0x00080000 0x0008ffff Private Memory - True False False -
private_0x0000000000090000 0x00090000 0x00090fff Private Memory rw True False False -
private_0x00000000000a0000 0x000a0000 0x000a0fff Private Memory rw True False False -
private_0x00000000000b0000 0x000b0000 0x001affff Private Memory rw True False False -
locale.nls 0x001b0000 0x00216fff Memory Mapped File r False False False -
rpcss.dll 0x00220000 0x0029cfff Memory Mapped File r False False False -
private_0x0000000000220000 0x00220000 0x0022ffff Private Memory rw True False False -
pagefile_0x0000000000230000 0x00230000 0x00230fff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x00250fff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000260000 0x00260000 0x00261fff Pagefile Backed Memory r True False False -
tzres.dll 0x00270000 0x00270fff Memory Mapped File r False False False -
tzres.dll.mui 0x00270000 0x00276fff Memory Mapped File r False False False -
windowsshell.manifest 0x00270000 0x00270fff Memory Mapped File r False False False -
private_0x0000000000270000 0x00270000 0x0027ffff Private Memory rw True False False -
pagefile_0x0000000000280000 0x00280000 0x00286fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000290000 0x00290000 0x00291fff Pagefile Backed Memory rw True False False -
pagefile_0x00000000002a0000 0x002a0000 0x002a1fff Pagefile Backed Memory r True False False -
private_0x00000000002c0000 0x002c0000 0x0033ffff Private Memory rw True False False -
comctl32.dll 0x00340000 0x003dafff Memory Mapped File r False False False -
private_0x0000000000340000 0x00340000 0x0039ffff Private Memory rw True False False -
gdipfontcachev1.dat 0x00340000 0x0035afff Memory Mapped File rw True True False
...
private_0x0000000000390000 0x00390000 0x0039ffff Private Memory rw True False False -
private_0x00000000003f0000 0x003f0000 0x003fffff Private Memory rw True False False -
private_0x0000000000400000 0x00400000 0x004fffff Private Memory rw True False False -
micross.ttf 0x00500000 0x0059ffff Memory Mapped File r False False False -
segoeui.ttf 0x00500000 0x0057efff Memory Mapped File r False False False -
consola.ttf 0x00500000 0x00557fff Memory Mapped File r False False False -
consolab.ttf 0x00500000 0x00559fff Memory Mapped File r False False False -
consolai.ttf 0x00500000 0x00559fff Memory Mapped File r False False False -
consolaz.ttf 0x00500000 0x0055bfff Memory Mapped File r False False False -
timesbi.ttf 0x00500000 0x00597fff Memory Mapped File r False False False -
private_0x00000000005a0000 0x005a0000 0x0061ffff Private Memory rwx True False False -
private_0x0000000000620000 0x00620000 0x0071ffff Private Memory rw True False False -
private_0x00000000007b0000 0x007b0000 0x007bffff Private Memory rw True False False -
pagefile_0x00000000007c0000 0x007c0000 0x00947fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000950000 0x00950000 0x00ad0fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000ae0000 0x00ae0000 0x00bbefff Pagefile Backed Memory r True False False -
private_0x0000000000bd0000 0x00bd0000 0x00c4ffff Private Memory rw True False False -
private_0x0000000000cf0000 0x00cf0000 0x00d6ffff Private Memory rwx True False False -
private_0x0000000000d70000 0x00d70000 0x00e70fff Private Memory rw True False False -
private_0x0000000000ed0000 0x00ed0000 0x00fcffff Private Memory rw True False False -
tahoma.ttf 0x00fd0000 0x0107afff Memory Mapped File r False False False -
timesi.ttf 0x00fd0000 0x01071fff Memory Mapped File r False False False -
private_0x0000000001090000 0x01090000 0x0118ffff Private Memory rw True False False -
psycho.ex_.exe 0x011d0000 0x01497fff Memory Mapped File rwx True True False
...
pagefile_0x00000000014a0000 0x014a0000 0x0289ffff Pagefile Backed Memory r True False False -
private_0x00000000028a0000 0x028a0000 0x1a89ffff Private Memory rw True False False -
private_0x000000001a8a0000 0x1a8a0000 0x1ac0ffff Private Memory rw True False False -
private_0x000000001ac10000 0x1ac10000 0x1ad0ffff Private Memory rw True False False -
private_0x000000001add0000 0x1add0000 0x1aecffff Private Memory rw True False False -
sortdefault.nls 0x1aed0000 0x1b19efff Memory Mapped File r False False False -
private_0x000000001b1a0000 0x1b1a0000 0x1b3fffff Private Memory rw True False False -
private_0x000000001b1a0000 0x1b1a0000 0x1b29ffff Private Memory rw True False False -
private_0x000000001b280000 0x1b280000 0x1b37ffff Private Memory rw True False False -
private_0x000000001b2a0000 0x1b2a0000 0x1b37ffff Private Memory rw True False False -
times.ttf 0x1b2a0000 0x1b36bfff Memory Mapped File r False False False -
timesbd.ttf 0x1b2a0000 0x1b36dfff Memory Mapped File r False False False -
private_0x000000001b370000 0x1b370000 0x1b37ffff Private Memory rw True False False -
private_0x000000001b380000 0x1b380000 0x1b3fffff Private Memory rw True False False -
private_0x000000001b4a0000 0x1b4a0000 0x1b59ffff Private Memory rw True False False -
private_0x000000001b5b0000 0x1b5b0000 0x1b62ffff Private Memory rwx True False False -
pagefile_0x000000001b630000 0x1b630000 0x1b8fafff Pagefile Backed Memory rw True False False -
private_0x000000001b900000 0x1b900000 0x1b9fffff Private Memory rw True False False -
private_0x000000001ba20000 0x1ba20000 0x1bb1ffff Private Memory rw True False False -
private_0x000000001bb90000 0x1bb90000 0x1bc8ffff Private Memory rw True False False -
sortdefault.nlp 0x1bc90000 0x1bf61fff Memory Mapped File r False False False -
comctl32.dll 0x1bf70000 0x1c15ffff Memory Mapped File r False False False -
private_0x000000001c000000 0x1c000000 0x1c0fffff Private Memory rw True False False -
private_0x000000001c120000 0x1c120000 0x1c21ffff Private Memory rw True False False -
private_0x000000001c250000 0x1c250000 0x1c34ffff Private Memory rw True False False -
pagefile_0x000000001c350000 0x1c350000 0x1c742fff Pagefile Backed Memory r True False False -
msjh.ttf 0x1c750000 0x1dbf8fff Memory Mapped File r False False False -
msyh.ttf 0x1c750000 0x1dc12fff Memory Mapped File r False False False -
malgun.ttf 0x1c750000 0x1cb72fff Memory Mapped File r False False False -
private_0x000000001cb80000 0x1cb80000 0x1cd7ffff Private Memory rw True False False -
user32.dll 0x77450000 0x77549fff Memory Mapped File rwx False False False -
kernel32.dll 0x77550000 0x7766efff Memory Mapped File rwx False False False -
ntdll.dll 0x77670000 0x77818fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000007fe942e0000 0x7fe942e0000 0x7fe942effff Private Memory - True False False -
private_0x000007fe942f0000 0x7fe942f0000 0x7fe942fffff Private Memory - True False False -
private_0x000007fe94300000 0x7fe94300000 0x7fe9438ffff Private Memory - True False False -
private_0x000007fe94390000 0x7fe94390000 0x7fe943fffff Private Memory - True False False -
private_0x000007fe94400000 0x7fe94400000 0x7fe9440ffff Private Memory - True False False -
private_0x000007fe94410000 0x7fe94410000 0x7fe9444ffff Private Memory - True False False -
private_0x000007fe94450000 0x7fe94450000 0x7fe9445ffff Private Memory - True False False -
private_0x000007fe94460000 0x7fe94460000 0x7fe9446ffff Private Memory - True False False -
private_0x000007fe94470000 0x7fe94470000 0x7fe9447ffff Private Memory - True False False -
microsoft.visualbasic.ni.dll 0x7feefae0000 0x7feefd03fff Memory Mapped File rwx True False False -
system.core.ni.dll 0x7feefd10000 0x7fef0695fff Memory Mapped File rwx True False False -
system.windows.forms.ni.dll 0x7fef06a0000 0x7fef157ffff Memory Mapped File rwx True False False -
system.drawing.ni.dll 0x7fef1580000 0x7fef1769fff Memory Mapped File rwx True False False -
system.ni.dll 0x7fef1770000 0x7fef2382fff Memory Mapped File rwx True False False -
clrjit.dll 0x7fef2390000 0x7fef2497fff Memory Mapped File rwx True False False -
mscorlib.ni.dll 0x7fef24a0000 0x7fef3968fff Memory Mapped File rwx True False False -
msvcr120_clr0400.dll 0x7fef3970000 0x7fef3a66fff Memory Mapped File rwx False False False -
clr.dll 0x7fef3a70000 0x7fef43f6fff Memory Mapped File rwx True False False -
mscoreei.dll 0x7fef4400000 0x7fef4498fff Memory Mapped File rwx True False False -
mscoree.dll 0x7fef4570000 0x7fef45defff Memory Mapped File rwx True False False -
comctl32.dll 0x7fef8d20000 0x7fef8dbffff Memory Mapped File rwx False False False -
nlssorting.dll 0x7fef8f30000 0x7fef8f45fff Memory Mapped File rwx True False False -
gdiplus.dll 0x7fefbcf0000 0x7fefbf04fff Memory Mapped File rwx False False False -
uxtheme.dll 0x7fefbf10000 0x7fefbf65fff Memory Mapped File rwx False False False -
comctl32.dll 0x7fefc0f0000 0x7fefc2e3fff Memory Mapped File rwx False False False -
version.dll 0x7fefc780000 0x7fefc78bfff Memory Mapped File rwx False False False -
rsaenh.dll 0x7fefcbb0000 0x7fefcbf6fff Memory Mapped File rwx False False False -
cryptsp.dll 0x7fefceb0000 0x7fefcec6fff Memory Mapped File rwx False False False -
bcrypt.dll 0x7fefd020000 0x7fefd041fff Memory Mapped File rwx False False False -
cryptbase.dll 0x7fefd4b0000 0x7fefd4befff Memory Mapped File rwx False False False -
rpcrtremote.dll 0x7fefd5a0000 0x7fefd5b3fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd920000 0x7fefd98afff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefdb10000 0x7fefdbaefff Memory Mapped File rwx False False False -
oleaut32.dll 0x7fefdbb0000 0x7fefdc86fff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefdc90000 0x7fefdcf6fff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdd00000 0x7fefddc8fff Memory Mapped File rwx False False False -
ole32.dll 0x7fefddf0000 0x7fefdff2fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefe0a0000 0x7fefe1a8fff Memory Mapped File rwx False False False -
sechost.dll 0x7fefe330000 0x7fefe34efff Memory Mapped File rwx False False False -
lpk.dll 0x7fefe350000 0x7fefe35dfff Memory Mapped File rwx False False False -
shell32.dll 0x7fefe360000 0x7feff0e7fff Memory Mapped File rwx False False False -
shlwapi.dll 0x7feff2e0000 0x7feff350fff Memory Mapped File rwx False False False -
advapi32.dll 0x7feff740000 0x7feff81afff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7feff820000 0x7feff94cfff Memory Mapped File rwx False False False -
imm32.dll 0x7feff950000 0x7feff97dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff990000 0x7feff990fff Memory Mapped File rwx False False False -
private_0x000007ffffef6000 0x7ffffef6000 0x7ffffef7fff Private Memory rw True False False -
private_0x000007ffffef8000 0x7ffffef8000 0x7ffffef9fff Private Memory rw True False False -
private_0x000007ffffefa000 0x7ffffefa000 0x7ffffefbfff Private Memory rw True False False -
private_0x000007ffffefc000 0x7ffffefc000 0x7ffffefdfff Private Memory rw True False False -
private_0x000007ffffefe000 0x7ffffefe000 0x7ffffefffff Private Memory rw True False False -
private_0x000007fffff00000 0x7fffff00000 0x7fffff0ffff Private Memory rwx True False False -
private_0x000007fffff10000 0x7fffff10000 0x7fffffaffff Private Memory rwx True False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd4000 0x7fffffd4000 0x7fffffd5fff Private Memory rw True False False -
private_0x000007fffffd6000 0x7fffffd6000 0x7fffffd6fff Private Memory rw True False False -
private_0x000007fffffd8000 0x7fffffd8000 0x7fffffd9fff Private Memory rw True False False -
private_0x000007fffffda000 0x7fffffda000 0x7fffffdbfff Private Memory rw True False False -
private_0x000007fffffdc000 0x7fffffdc000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
For performance reasons, the remaining 77 entries are omitted.
The remaining entries can be found in flog.txt.
Created Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\J3ZGyh2CF7dPtVFGf.mp4.BlackRouter 10.09 KB MD5: 1b0da317dd7c02a002d72ae221b13e6e
SHA1: 3566825df7e1875d5a950047856f35331aeda976
SHA256: 395d23f7cd8dcdce219cdfcb652c7a2bd6b5c2cd446f32b494fc7253fa99c88a
SSDeep: 192:vMeXjg+1c3sqad04Ye9KCtuH1n2upsOIL4nLuQq23ZH3D:vMezg+i3xOQesCtFGkrAz 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\wTkAuj.pptx.BlackRouter 46.95 KB MD5: 0f55d2eb482708810c99382bfcaf0b05
SHA1: ffb0af65c1e4c2841eaa91404e6a022e1f96db6e
SHA256: 0cb917712e069383013a09f08c288df57c03467005481636dcb3674be666b00a
SSDeep: 768:Jf71ltKkBPMWeWryuGQ64XbikpZgXn+XLp1DGlbk4t+0W6tznpj4O0CcjyA:twey1uMaZ0n+7pNW+0btzV4OCOA 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 7.25 KB MD5: c3d3039801d5379b9ae0a1bf00eb797e
SHA1: 3172cb56a0c56a114dc02dfeb1ae87c55a9f208e
SHA256: 11f518db44fb71b6ce96e7a9b4f2b70f2b0510c4db9a050e0741030944e1f45e
SSDeep: 192:P5EM9wAF21T7FXEnEr8wnyDcqODXO1iaW:POi21T7pHYFA1L 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Cu-nNe0mmo61lPzb99B.mp3.BlackRouter 47.02 KB MD5: c521c3de697a6cea4a451c6f12ecc1dc
SHA1: 7b6c9c0a5a3165d76423299cc4e0fe4cb1f4c4a9
SHA256: 1f525d7d7f8c93a413eb26784e1c592fb4d3c31f7b9fd802900bcbff70af9849
SSDeep: 768:b/uDqTdEpbEJEcmbyoT/C2M/kOjEXr0Zux2+hjjWoOVMsx4MVURCVmDWsPgUQ:b/uILEyoT/qxjEXrougmjWoeMJWiyES 		False
...
C:\ReadME-BlackRouter.txt 0.44 KB MD5: 4d1c11d8d5df0923b83206f9d6057ef3
SHA1: f3f40889faf7a2202c773b6c0f1d15931f874461
SHA256: a55bbed92112de459f1dfa6d3913ef88712a2ea8bba1a18f27c8c3d3566beb34
SSDeep: 12:AWljJ32tTUzaB2bknOra+GyYnfR8bbVxgXcS2z:NhGTuMOra+GDnfR8nVOwz 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\BC6N0ORr3hLk.jpg.BlackRouter 19.22 KB MD5: 19859d5e5c9265bf7ad0d866a2ab42da
SHA1: 6edb228f2e7cc290e0e78235ee98839987a8eefa
SHA256: 70b0e090e5fb73377669ac866707250063612af3f0afccdb02c47bbdd3cd128b
SSDeep: 384:3tBonaklSk7m0Lu2DNiCp7WTWaKmapvgXaWc7sCfYYsUM7Y:3tBonak37ZC2ygpabI3e7k 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2We046o-scG.gif.BlackRouter 37.88 KB MD5: 5e70b0bbe500f64fac2265b047a7b8d5
SHA1: e0a7534b27177e6f360aa419f6949e0c7137aceb
SHA256: c85a5d88951a7aa0ced0d4979da0dd76c795c1b3237a551c4a0c7a3881b0b247
SSDeep: 768:IcNFg0FCAvETN/y50QEmOG91Ez8yrFSDGQK81Ar5XgsqQr9JIGihJRj4f9o:1zCIgty5VBOGXcNR2K81QJgsqQrH/ihd 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NckKV8_xZjsWZGMLCFu9.png.BlackRouter 82.38 KB MD5: f3880dc4f5c2f39b66f2d363aa8c81d9
SHA1: 4408729c84f82c9e6068b257e44acc73201e6b42
SHA256: f091734a4c5e5e20345b6b2b801fb1883c5b9ab1c9070fbd8fac0390e854deb2
SSDeep: 1536:BJ+Jn87s4Iib9PTnkIWkdviDvIZ1DhwJgmz7alq+j794BQXBa:BJvx5b9PTnDZZ4vUKguCq+jW8Ba 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_128.png.BlackRouter 3.14 KB MD5: b5dcf422d6eac834cb171b3992693c3e
SHA1: 18a96d053bcdf5774a8257e7e6c208526a4700fd
SHA256: 8e2ffecdce121a2107dec239840356b7a3a6545369b9ea0370553d1841ed4de5
SSDeep: 96:4DGsrkCGYvmDq4B+/jT6XvVWGuqmtkxMSTWD:4DzgCGYvv/jT6XvVWGuqgX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\e2Fs9ZSZ.docx.BlackRouter 35.67 KB MD5: 1e8fe472db6a79189caa2940d0e435c4
SHA1: 40a71e2a0cb8341eca7cd1ae981e88b00eb8f7c9
SHA256: 3d802f5d3d4410ad179d9bd38bb1781f146ac57f592146e4c1a6c593b6e256e1
SSDeep: 768:ZdBEKqW1FynpEFRuVK6HPeckuXmuaehKwYYq7NbzMck9:ZdOgpudvddOeh7GbzML9 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\muiA05kkl.jpg.BlackRouter 83.09 KB MD5: f25f1c1e6ec7630503de0437832fb692
SHA1: 4832995bc401c8d7d86fac7f895281e772dbc758
SHA256: 04e4caac30815b85c971bbd708e805dc164720968339909bb8743b6579aae023
SSDeep: 1536:pcclSflS+f+Vzs+9Upehyk9e8sskacekIGKPKFV2uAOcd2M2:pH+ltCBapHsGPIGK0UuKdw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\mNDuzjfXA_CNY3l.png.BlackRouter 35.06 KB MD5: 8f7aa13792da888cc3bf0860ed12459e
SHA1: bbdde480ae708fd6961c625d5114342c6278a450
SHA256: 83486375ac960322646619ef3b2ae245089b8fea2404ba31d0ef758f5c110e20
SSDeep: 768:xtJSsEBxoDdslMtrWGSTMJFI27aYqjbCA8y3XuQfO+nf+fn/ljmoHFs:x7Wo2lx3Yd7abjb6uXJO+ndV 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_HP9NhGb.xlsx.BlackRouter 56.78 KB MD5: 83c511d90fb6b89138074470ff4bfe59
SHA1: d843a24d5264cdccdf93312e77f645016f8de47d
SHA256: 1505655a3b01faa28de629979866e91b052c80d8b62e6b5bf2678a1a90a2e938
SSDeep: 1536:4HDbXGDh3CJZPIpzSToGU5VfRXiIOPqK3kFpo0:4fA3mZPIpXGcfRZo3l0 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\vAUmbFqVuAOM.wav.BlackRouter 8.64 KB MD5: 1b7bf87c7795861f4fd88b317700939e
SHA1: fdcda90ad937713015f8b726b7b99bbf50da0d90
SHA256: 6bd1ac3a37ad5e7ae783705a007c05a9e2ac64cb9d0bc6f09779abbd46a5c750
SSDeep: 192:pOLk50Ao6o0n6G04lsKFy1dIxhuUR3sGcpiA4JpmiJcMpb3EjO4d:55ro906WVFy1axhciAmMucsMOu 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\4LIdhJ4Mw.xlsx.BlackRouter 44.73 KB MD5: 6577d2ecfffc5ef2705010b1ac3d5e79
SHA1: 8374e4c09d00d1cccbe401661bffa9a4cca37948
SHA256: 2a7ac83aa242f75d857b1ef56694e6e3bec029ab5bab15830c20e9ece281a273
SSDeep: 768:qOv5Bu9tnArNaLaZcRdDqjnj4ugj/o1sDYvaGSD83of+K2bDmKMLu:qOEtnAr4ZfO7HgjA0YveAYGK4qw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pz 2cx.mp3.BlackRouter 80.03 KB MD5: e1d3b26deb241118d0dec18cbac3fd19
SHA1: a6204654c434137a1d7d2cd3aaa0b8fb98d8df0c
SHA256: d71c598d4cef754d44682f2f0dbccaba0befb02a6129947fa80eb29fc18f4779
SSDeep: 1536:Y4Or3HMIf7HxnNkxeHnTLWzvMhVeX/n6y3c1EDlEFipUB:YJ3sIfzxNkJmVkn6yGEDlE0I 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\lGP3l7M_Cs.wav.BlackRouter 4.59 KB MD5: f0898e5ed7e5d353b0c2df05d1a0a12c
SHA1: a1f4c2c51d958232ae94bcc36517e1835478ade5
SHA256: 79dad312c16a9a69b17dfa3c022262e5742597648751735a326a6c3c5dcb5aeb
SSDeep: 96:p4tjlFcLAbGSgbuGHQIvD5NIK7hh+8WM88R9VIKXJt9Ig0Uf2/CBw0864EXjRNKY:p4uLAlgqcQIvD5X88WCJUgv+/CW0FXlb 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 83.05 KB MD5: c810f52ed26edbb3573be5f5cc65cd77
SHA1: b8536417df5725ec7fad6830a24db94a6e41a0b8
SHA256: 4353a3e3173e5418536cd7d40eb3dab31ace7601fc36c45c107f607fd8ea124f
SSDeep: 1536:+9sIwJgBpFByECH+dm23O0hMMAwgHueO50mC+jDmZloIKncWMEenFWbL3fKg8:+99isd3CH+m235JFgHueOwAmZlo4Wxar 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_16.png.BlackRouter 0.16 KB MD5: 9394d4e936241e70c8227c5dfe420ef8
SHA1: a53d9e1d2f9f4de8c531dbcfa446fdc93ca68969
SHA256: 584bc8adade3da8d96a0e760cfaac9cc0d10583e306ff274676d59f12664e979
SSDeep: 3:G5UCaFRI0NUbU6nOPFvemOPqpXO4gdqMLfwriLl10OvPbJzHPf3r47P6rXn:G/k7NtMOPR5O+ZgdqKYriLl10OvP1zHZ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\2TX9loK1_Ya1A-p3Jo.wav.BlackRouter 84.05 KB MD5: 0af1af4d86450a2d3db826cb0fe2971a
SHA1: 3a669e1d5f4aa7bec409fb39f75edcfcf1f85787
SHA256: 2ec4e6802e2200506d7c111dfcd76aa0a9e1197b6a9a474c70c4d7407b3035d5
SSDeep: 1536:6HCqeLTJDQu+2FudVNYUDugbv76c/vpZTMFrj2XQ2KK0vkPKYv1rLnpbWs5Tp:aC1LVDQut0iUDBv7ZvpZoFrj2XQHfvlC 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SlxBqYu.xlsx.BlackRouter 33.28 KB MD5: 04c0cdfc25392be76049763e44e5664b
SHA1: f06298d9c7091df9e6d0d707aa7528b165e3ec2e
SHA256: 706e2a5d97e6a2960745371870890b4fc889bf523dd1fbbe9748ec66e56ceb3a
SSDeep: 768:I8ve+w5QrIxVxGhUmvt3Fmc6HZb58VsSvyZhViSm3lPQnuCGI:8+mQrIlGKmv3mc6Hn8VLi8wiI 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\PoBa.wav.BlackRouter 38.45 KB MD5: d78f84f15e09aae41144e43e1e8dc941
SHA1: 8079a80b1c75db52ca4ba7b7db49283d2aa3eb2e
SHA256: 3b89b60e6e9dcad6b6f9d2844167cb6c4086a413c4ec2c72c3bc967aed2f7e00
SSDeep: 768:yygss/DHaiAH6eXEBo7XsmMbNt+wks98BaKiwKNoMWy3K:Ossu1HrUBo7X8Nt+psgaKrKNzW+K 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.js.BlackRouter 2.33 KB MD5: c50e1bb6961912e9e80a3d9b641e097a
SHA1: b2ac3c5d7c5190a65a37158d48b2a187b9d6309d
SHA256: b036ff0ed9a01f371a30e6245c348636c9ff26f2c36a62163d6fafd8050ba999
SSDeep: 48:xjhHPu8/t6iaYHlzIiBUBePCy+UW6HeerSYxI3ahwkx2:x9vugt6iaylzFBu6CtUSYG3aXx2 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\pqLKU8kKZ4_VNEV 85T0.mp3.BlackRouter 43.27 KB MD5: 2c9bbc6a092544e8bc991af22a7623b6
SHA1: 4c73a29f88130e4173f5d95f0e62543d73f9bab1
SHA256: a0ca8ac350816291d3fd575b3877bbdb08eecbee370284625dcfe5d5c4f4c6ab
SSDeep: 768:8eX6OgLU1FfJzlm6QbFSzgAgSHKE+tbYkJd0ZBBdnnO6A6YfBbT/726Sh8GHUzil:8LFoQbFIgAFKE+xn8BRnOvfBnd+5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\W7n71-ymge_j 2l5YBR.bmp.BlackRouter 41.38 KB MD5: 096a7078ccd965b1c76e92fb54255f91
SHA1: 8ffa62d63a62fc6be45e2640112ba19cb5ffcc31
SHA256: a5445bee96a37f9e87d9a9ce4fb6582d151974684a005d92412f70a41000794d
SSDeep: 768:HgYALf7qKmNNpVszavUqGpElkMvoKhAroaD2+A6iUqW0GiZZcydOYx:zNNpizSlnvoKhArO+DDiGmfMw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\gw_tKLN7N.png.BlackRouter 40.03 KB MD5: 00d8826bf10ea10155bfc7c9a4990d37
SHA1: 84f3f6f05c66414a1316ddc47ab56cda0b22d26b
SHA256: 460e1ae3bc4a084b9271064d223d134acfca6f41c962c36761bb808dd36a4ad1
SSDeep: 768:2Qrvcl6bbgdygbG46bNB21S925OtM9e6r3FDoTdIDVw9QlaDDkBcjRzxSe1fF:FcmUfbG4sz8eKOu16TuVw1HkBqRdSe1d 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\fOoWS4uacQpc.avi.BlackRouter 9.48 KB MD5: 0f1b99845c5ec689dad636a8248aeac1
SHA1: f402263ed2b89753dffa6827379921f8d6a3e6bb
SHA256: 99883f9136fe394367e8f3c6a8a098c261bef7665e1cf9b1fb5b5315df2bbac2
SSDeep: 192:kmfu/ASR0ab4n+5w558bjmlzFgT6jOxD1l8niGr32GvErFhExLwFcOgr2c6LgXxj:klh19wqOjOxD1lEiGTlvEgxLlK/gBj 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\YT-bd Ihf.png.BlackRouter 77.95 KB MD5: 1da43d06074df59be1f78d4f2c1085bc
SHA1: a4e6d2b51b073ae5cc599ea754bef35ff426c183
SHA256: e7aab78dd59deebd40a68feb7e9d50ab74266cd2b9e048460219c081d9738749
SSDeep: 1536:MkgPRSxDk4i1n0JoI/XxVT4oyOFbFTVWFWD30QAuOQNv92WuuZldJR:ARSxA0JBBVTF73DEQjOs92WuU3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\vEDuhznOq3eAa.swf.BlackRouter 74.52 KB MD5: fd8b99c2d474035b45a7a0984d71bbb0
SHA1: b8d20755cd694cc4c4855f99c09ae9fe5a82c196
SHA256: 6a5bb8a1650f25c8b5ff38ea06802c338354eba22f76e81ac5a1447220c0e7bf
SSDeep: 1536:F9xI0ntDtbwndeZDkOjnWy8v0t0DG0UKDfZUKqq9G0ltG4Lr5t:6055Ud6jnSsT0UIPG4Lf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\icon_16.png.BlackRouter 0.55 KB MD5: bf24e83adc07ca8651e021171a851171
SHA1: 8a7e67aace729947f3a26a83c221993f20a4427c
SHA256: 5e81f9d17c2e984db4d47ca1d428d689b022b0ce90476e272992e9ae18a6929c
SSDeep: 12:8oK2qs0mjenS9FIxUjOMsHt3H5QMVaFZVsec0SgDKMrGg:8oK2Z0mjP3If5t3Zbsn5EMV 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\eQ6OA4w4YW6y4kkx-.jpg.BlackRouter 89.88 KB MD5: 34dc2266c724e9f7f6c19948de5b6d46
SHA1: 5b6238b66dcf3daa87e261f875c2333c4bd84e94
SHA256: 174cd5c1aad3c12472e53bfe43517656e4a3aa01b832cf219b3e390e319ca35c
SSDeep: 1536:D8hHYFoqs7JQFM2dooOr039CmuDRBzA6NJuD5Gt/Xfo1dXzMIVuCnD4C7Q+c9:DAwM6W2yoOrx5PJG2/XfoTzJDr7bw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\arDd4WERbeulzRq1JRy.flv.BlackRouter 57.12 KB MD5: 11a799bacf5ac03c3340da9e9a5e3f1d
SHA1: 9e7663a5afd2df7525db1d38a6cd0015f7702eca
SHA256: 7d755b768866578ca25ced3f9d6833777e02a38a1ae9beb26000b35e8cbcef13
SSDeep: 1536:au0wjDVWM7QviNlnIicM4IIULX/S0jNaySfXLHQY1lsL:rvV3y8lnIKrXLv5paySfrnsL 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\dIYQ4KZnYJB8_m w.swf.BlackRouter 75.44 KB MD5: a798d0bacde50c911a7521edfe87ffcb
SHA1: d154da112104eb0732bf8456edd212cc9a3c8e56
SHA256: 8260700df02efa1992a23b898ac15c4ecd2f7e6d6ea5b75568aebf8676f6ddc5
SSDeep: 1536:b8B4Nd+dyX/L70gn7/IbG2vo9d8hsoJ6JT4fUL3kB33SOy:b8cd+deH97QSihraTiBCOy 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VWpMSp1AQFXz.mkv.BlackRouter 21.62 KB MD5: bc02eba1cc99a7caca43f66f6a48c51c
SHA1: 7a3fe69ae6d078f73da7410ebb7c2dc47c6f3bdd
SHA256: f8f769f00e0ae50374af314cb8fb15c7fb0e748fdfbd7e0be9840f46729cf5c0
SSDeep: 384:9IWBT0z3t3YD1gxCW5Aq/6u8z4y15d6X8H1mQBx/IRNYyp6osCXnN:9IoG501Lgium12KIQBVpU9 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\WiIlvI5.avi.BlackRouter 13.23 KB MD5: 6a9826f1ff8e9ed90c7fc44031af295a
SHA1: 998506df85d2bb32f7038fdb4cc2ba0bbe9c5c89
SHA256: 209a22f5b7cd20ccd5bb560dbc049d75504b01ee5e2a96901cec3b515dc2066c
SSDeep: 192:kmlZ6WnOk9OOChhg8PXRNuNXfEi2MhamfQfdDGRldxgD3w6X/EC7SsR+ayeFfEap:kkuOCLPXW2MhTMDBlYW34ut 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\gzgPUh-9dyS0_ke9_L.gif.BlackRouter 62.47 KB MD5: 947bd4c4cd34e50d43d6420440741399
SHA1: 68174cbda7aae77e7eda6f84139978d3f32a276b
SHA256: 9e15c26f59fc9d01acd378c3c0cefc6240566ef9d8003158064ffcb0ba2e2fa5
SSDeep: 1536:kLp9gLug4E7seUYzSdH8xAEMWDCza5mp2o2F:kLPSQE7eHspY2o2F 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png.BlackRouter 6.02 KB MD5: 0a4db0a7d52e6aad1b7a532be2b3cfb9
SHA1: 9f78f11bbf403458358094d0cd1428d2940324b5
SHA256: 76c078177d9985726480ea2d2b23e90e118af3770dfa2cb184e93d44f535652e
SSDeep: 192:WtbdODvpo10/FQYwU1KZQpGjJMSCY1mRy7I:eByvs0/FxYT1MSCY1mT 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NNW-jt-FJAJU14le.mp3.BlackRouter 75.97 KB MD5: df89e2b5f8f834460fcc1e61b656fd62
SHA1: 0ff3a3054af17b0f4e63295d2eec7a26f7c5b9ed
SHA256: 42d24ace328dca84f0ee9195abf68022deffaa5f28074e60a078f0fae101642e
SSDeep: 1536:ynrSWgxVTBs/RKJMy6Yi2NA+7jilJJnDpdGbepij5vYM:yrTSBsoMy6YuUelnDD+3T 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png.BlackRouter 0.17 KB MD5: dfd2a41ed1533792368fa4cb1718de23
SHA1: 23a66d7cf1400c43bdeab17d3d8ea151e504cbb4
SHA256: 91c669b054d5065f322c787ca80f740df0e0c774209f86b07c4c50f8d2b85fd1
SSDeep: 3:G5UCaFRI0NgbcHaOFv2GTy6w4UxJy5WTRpbsNQfoK9maLXrZY1mpIwAyRw6IZsS3:G/k7NLFwG+bZxJy0Tbq5sm1oPAyq6S3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app_redirect.js.BlackRouter 0.25 KB MD5: 51475f04a3f5e34e9c7cc858e3712fa8
SHA1: 0d5d5926dfbc5ce5c74111e846a68c593d9a483c
SHA256: 11c680b2f3adcb744ff4ea9355aeab7e7d73a62f8d13f70e6002e1aa17d17f5c
SSDeep: 6:WNLdorcXg7t444PSmzb2VKT2t+SRqgnF26:GLRQ54DRzqgT202h 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\ItynyNuYhUEqZ4.doc.BlackRouter 68.94 KB MD5: c6fa937d1e420585f3b35a1b5c11a5d4
SHA1: 705a6f3198d9dca2072bd01a16101f22dcf470b7
SHA256: c1818bfd30d47c9a8106d4d3b41105bc2e78c2d57d5d5f74e3869576f8fd5b1a
SSDeep: 1536:rKaVib8ah82GU2amvJ08YrcECshp/NtBKgKTwRxtA/V:xVi3lGU26cBs/NmTwZg 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\8EOlRM112D_CyMf5U.gif.BlackRouter 98.17 KB MD5: e6a9388ed6aa433da960754dfcebdc31
SHA1: 3e738aa003a6a79734abff2627cf05bf445833c0
SHA256: 2717c1852f1e6d0488361e681c91dc1dd13c7aea45be8debbd5ac2c42846f56b
SSDeep: 3072:Nvo7QOutrNDmrI+jRzPRK3g1JG8D5OyTIrG90AYTIBR:NvoJKDmrh9zRrfD5OyTIriYiR 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_YsvsJDsD7RFSVU0u6.docx.BlackRouter 47.75 KB MD5: fd2b32bb7d12b32ebf1f5fbad35bde6a
SHA1: 08dfa4ef4f0a837b183f3e8b1dcddd17320b1eb5
SHA256: 5080ff37cf2da037661821a50b2de9cfc55833b33643b89f03216ecabb953477
SSDeep: 768:x4T4nabTIZxKsokiuJqxl4THpARfQGLNP91E1MyNfqqhhAJ8JeOWxdTS:q4abT6UtAJ0lQHCRfFVoH28gTS 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\kzeZJlsxG1FW.wav.BlackRouter 81.06 KB MD5: 226e09350842ff4a6da7d7152ccba106
SHA1: 82ef3924a422be2fe6d702e5e17393129982e764
SHA256: e126c42c8b6a8563c9b9c5bb7461c6bccaa7f57bd1533471e6131642a83ed247
SSDeep: 1536:AiYxrInN5f9F3Po4t2VOm3BGw/w3KiAjdLg5kxWdpc5lJka+Pp4RGHw:HgrunQ4t2Vtt/iKiAjdLQl25b7+ORGHw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log.BlackRouter 0.34 KB MD5: b7381c81bd7535b749a9abd2fdd2b073
SHA1: fa7fb5b0178a9d10211fe8e756405c62869f1dc3
SHA256: 44d3a027dac2aa307a5207a73055225585139811a6ec94c8f340d40213cb8e13
SSDeep: 6:MxtKhJXBoDVp7piqEkm8GjjkTqIgM2eVyCqI1pjpKq7KhJPsGn:MuJXM+ZkqYTsbioquJPn 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dv87rG n4j69_Z.mp3.BlackRouter 19.39 KB MD5: 7fbf28582927f0e9f57e647b99559de0
SHA1: c18f44aaf04c846e5fd8ff4a312b6740dfbe40ca
SHA256: 6489584327ec48e4c474252c4833076f61aff188a615e1df2d8f7f9222d523ec
SSDeep: 384:B7z0sMctOMWGbfdPjYMY/oYk89C7JP8U0c/csbz3A+SaZCtHd:BHnZOEbdcfoYukQDfZY 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\hSLacBAMjJwSzdL-BSV.pptx.BlackRouter 64.00 KB MD5: dcd1581f3619c52d3b09fd8a37d984c0
SHA1: 1c6316e9b9b5b9c725f16b3383a78cb22d710718
SHA256: ea29df80d4174b6796b31d932403e079bdce733876a890fd6964543145146f60
SSDeep: 1536:KVRKWDQvuiY8RqaRqtetvEFys0FGl2UOgChE113D2F8KYwDwPw:KTKVvuiF4aRqtV2FcEgJ1kiKY1Pw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_128.png.BlackRouter 3.33 KB MD5: b2a1d987b1d26258c090cac459e9b367
SHA1: 655b9b9de3a54a997c845995085fe39aae16fd41
SHA256: 7fced26675afea608150e9b3780708bfc792a4f1cc466306264be8fa88ca3a42
SSDeep: 48:oQkr2JN8FmY0ofVKK/3UnGYmS7iEQTADgtoK+yIF6MvXaldSYE+60URP4usFjEKq:syJN80ofVK2qjmJADgN5kal9d6JQ/YrX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XYeB6f-IvPn448LqicJ.flv.BlackRouter 72.97 KB MD5: 7d659f2873c7213e1e83adc838d4d240
SHA1: 1ccab761034b8c5e0b76d44eae0acddd9a1bcf94
SHA256: b9a6e260c676181add73ad7592d062aa7cf9b9bd9c447fad35deba65415cc30f
SSDeep: 1536:IiIoi9fAZndlzeABzB0jevtL6jH8D+FLk03o06IAeYAO+tgya6xW1IyAg8A3HNO7:bIoi9OlzeApB0YN6j8aFbo06deVtgytZ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\128.png.BlackRouter 4.88 KB MD5: f4b51e22bc4ed28a22adec922b6b1a3a
SHA1: 2a698d611fd41eb9758c6733e9a284b5aabdb984
SHA256: 79d0ff73d2db75e60002fa9b160414d4b1de8cc054ec3646486a4e98cfea04ad
SSDeep: 96:G9OhYMhfEEc5RZuxfrAoEGLX599acKXizKa0LIRrNXFPgjxekrM+z56Z:q8YefE13ZutrlEOX52NSz04Ad9rMf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\8JdDwvU-CgAJ.mp3.BlackRouter 80.02 KB MD5: ab1896a43ba6f72058c7a336968e2a7e
SHA1: 210698c01754932c17c150d88dc113387efde0b4
SHA256: 7774644cc85331c53abf8d52044ff454bef0cc71f67d620d17c64df5b9b8342e
SSDeep: 1536:s2jJcgl0vSPX9UyzDG707bYumh8Zwt6oGjmKFjYuK3t6slvBYBGyohjjMMq/j:1JcwjPX9UyzkLumhNgjjjW3vxyG11oMM 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\PfqPilgZ7WgjkG-_ePa.wav.BlackRouter 19.72 KB MD5: 939e6c084e84172107bed70cdef1d027
SHA1: 703cbbe93c2cab9744b0f3cfc31262df70f1c7b4
SHA256: 3c6ef13a37ca45257d033135daae305311e7430a56bd51083d287028f3fa0200
SSDeep: 384:smseWG+ennIiMmaVijpuXG+Sbg5unJR6UlK2+SKJR:u8IPmaVi8XGxJRR3kR 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eDF0mJ1fyTQppHOiiB.pdf.BlackRouter 2.11 KB MD5: debe71ef7e210c9947c3e70e34163b20
SHA1: 69239f456ff0236e74e0335eb4758218b5d7a7b0
SHA256: cbbb50d872f93935d2a21242b49ac0bc2b58096ded778dbf7a28d2c307097b4a
SSDeep: 48:04Xt+EvjoAZHNMPiMWfgmeV1JZSPRZTt/9LlO5nstyp2/iYw89:Xd+Ev0AZHNM6F4ngPR79gsK2w89 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QePPgvr8.png.BlackRouter 55.97 KB MD5: fdfb294b322625353db2164d04972f14
SHA1: 2413b74fd0bfd467d46d9672419ac19d911e81ce
SHA256: bca0dbdd3c0d390b34c2e91e4f200c5f023f136cf4a8e78f5fc92b99306aa941
SSDeep: 1536:+ENLRRsCfElKH7cklz9vvWcENxLsf4Oen:+uLRRXAQv+cILsHen 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Ojsy4NELZbRVu.pptx.BlackRouter 21.27 KB MD5: d817926e79361f8dcc9c7ea97257bb66
SHA1: f58a3fe25951d2bb60a387968ecf74a492d99589
SHA256: 9b327e2e9ca9fc2782e94a5328cc98022413c3766aeb8156f554d9ed6e4ea21b
SSDeep: 384:LFUipspfqcMimkBLp9LST3D/19c3Ziofu2pqDL5Nhhce9E1Qrchxl8sjCCMozmn+:qQspSomkBLpVST3Dnc3sfUqDZGdzlpFf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cIufVz.wav.BlackRouter 87.45 KB MD5: e0298757b3e13bf4d8f102ec102ec2f6
SHA1: 3ef995eb7c56f73bacf00cd2b4da80393b32d17a
SHA256: 8e01995ff1399d3f22e313bf02a0770b25d6f31e00a203c14e8a4e0c61cf9cec
SSDeep: 1536:h9x6cWXo5zEhn9TUA/CfhM+dg8XapFVoYHnuPo/KRTzyWwOaUUbSS:LU8iTVqfy+dg5XVrHnGo/wTDwOqSS 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\o3Nw9CMj6B59So2m.rtf.BlackRouter 21.55 KB MD5: 8238e5ddc299c15617da40a2927b09f9
SHA1: 08a177e9cd07cc26053771083ffb9276407584e5
SHA256: 18a1b7594dfdbf7c601edbd386f94bfc09017ea0b448f59d221a4ea292420b53
SSDeep: 384:wwuSA8Sbhk6NKwL91HkDz3qSb0Lq1fri7hgcGUZpaLOGi+W7E+Z3OwaSjzb8:wwuSA8SG6wzt0S2gcGUZefiBE+Z3Owng 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\e5twKh6.pps.BlackRouter 75.70 KB MD5: 0a6922d80b848704585371a04af02616
SHA1: 63a497b69ce75e7df08edefa63b2442703f95aad
SHA256: aaef404bf46961fc145ec82a5377d92727a32d6a1bbc19fc06235d9e2f6ae6a0
SSDeep: 1536:Kcod4N3SooGD1ggPUVCIaEBMdxzhcLiFylK0LXS1wRViY6Y3Tc:KcoIe6MVfudxS2MdpRSYDc 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JO3ODtj8GwVaKmN.pdf.BlackRouter 18.64 KB MD5: 6aaca267d4cc7e5fae63838cdb0dd5ae
SHA1: 4884ae02ae21f192b079400fd5aa51ac274cd547
SHA256: f392199a8a7a2c5da5a5b1002d3c9634b72915bf6f02668d5334b28fea090c35
SSDeep: 384:sLxdHZbNleQi8vcZAJEkSNUETalSrfxXeBl/WLGlHz1tFrsHOe+:2l5iFAptgalIfJUH/JCOT 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png.BlackRouter 3.33 KB MD5: e3d10872c2c3f86b35b84be9ed88b571
SHA1: 2ef26d158dcfbe1b1fea0fe916a161c3c5a2e458
SHA256: 630f6fb97794dbb65b67bdc713d6cf473f91ce84c1cb8b6a7227a4067b5e265b
SSDeep: 48:OjiGhYGneDyHxs2lMHKxuzckorxidFgpErASFy04NSlrlD2Q67AUVLcNnBvHP8XD:OjRCDyRKvoNidmpZndqrlD2QycNnluD 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\KwDmD.xls.BlackRouter 79.58 KB MD5: 49dcdac65b215a4233d3dac616521064
SHA1: f5e731db9f83a46fc70745e7751453f34629c6e0
SHA256: 8f7e9c9c87806abf879633d1dcd58504b5c06ea83ef4f84268c5581969ce677a
SSDeep: 1536:wwN+YCehsuFL8tl0cAeh6cHrNSYgflG0l+7HxD6ZJEqHPcf05b8gfqs:we/euFL8H0Q68r3gfIB7HkjEa5Ixs 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\RD6FjyPEMclj9pbj.mkv.BlackRouter 83.69 KB MD5: 3dbb4b968957abb242f306b50dd292fe
SHA1: b663191efba8111792556d0872132a1f45747563
SHA256: c44db5a577387805e21fecdc934a54fca831eff7c1259e9a3f09c0983e764b55
SSDeep: 1536:gdIeqBTwy59LFkkq4oDVh5DYUflAZO1NNY/slowWOD2MTcWEdjS:gd7mTw69LFkkq4WX0UN0eMzwbVTc+ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\kTW2K2YM k8AJLZ.mp3.BlackRouter 41.25 KB MD5: 037c3678ec0ff695c268497339dacef2
SHA1: c81abe62411fadef2a9244971750881a1948c030
SHA256: c338821dd026de42c960f2a3014c42486545a67bcf99ed8742898e59d09920a1
SSDeep: 768:+seAlT6rAh9Su5DFmKCRSVhR6n2Ijs5Zdgw5v4swvSKujtGFYh:MFuZDIjg42IjsHvkzFc 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aACnSXz37sfFLh0c.mp3.BlackRouter 18.55 KB MD5: 4e90ef83865b79e0fac7f39e56c7fbb8
SHA1: bd84471de758901ed17a6e13d9ea72c78b6bb0e8
SHA256: ad4ca735a0cbe474d2a00ecf190d67dc46b4b0d768308ce2f9348153764ac360
SSDeep: 384:Hbnki45DU03MSSbsKn9JRjTijg0n4cEB8nexxd8CIo:7nkd5A03dSbsK5agq4czsxdn 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v-8e8VzMCSllsc4I.pptx.BlackRouter 18.25 KB MD5: 76c77e799f6787eb8c25d86b68da43b5
SHA1: ec64884f6a4bbad326201cc2d8dd001ceda2eac0
SHA256: 5cbb0eedbc73e4a2305281f483636cd21fbf64a293f547fd408953b5f76eccc7
SSDeep: 384:/ljI8dMIrbTJF+bp610B6No7WH4jSRqfeFUOKjJfeWJCwlS+Z4AGIZ:/ijebTJF+bp611mWIfWiOKdf6kSwR 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_pressed.png.BlackRouter 0.17 KB MD5: 7f44f5ce84f5468dabf549c31b010af7
SHA1: fa9921110187e43af3df5e99cc4902c1609300e4
SHA256: 2f7fdcacd834518b6522db96da2a72b22c201d56aca0f70c28d91ea8c097ce2e
SSDeep: 3:G5UCaoRel9IpVBQjHsm3WGNmHllTafZAtfkK2CUslsgmOV5AnEMcem88ABHZf5ZH:G/VeliI3uT/M/Cnwq5CETemty5/3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap.exe.manifest.BlackRouter 13.34 KB MD5: 269875e14a66f3b0ce61d8c367594df4
SHA1: 3c6a0c9c40c8c1516a771a43e487c814e5bc5b1e
SHA256: 076011798f931baab372b1f98ed1880b9908ffb97f728940bb7ef66a41e1a646
SSDeep: 192:VdhIGi+Pcn1WW1OCHfpDox/KSJD98bNcebFK4k0wJePi3ZisJgPRjRGKkz+5L6m1:VdyGiB1WMnyxCSpeB04acsmPRFG1z6x1 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.html.BlackRouter 5.83 KB MD5: 16297136d81b3bf37f469030851310bb
SHA1: 0cbd55ebadc77335f6575df61eab651072e806e6
SHA256: e80e3b3ebe308f2ce934ef2f0967e577b006376aecca2f3efa7205e51cae98fa
SSDeep: 96:2nakBBQ27eNORP8hD+BcXpeBgjFYywKMu0n6u6NN1EoEvJ1mOnFUN+8LCM7tXOs4:fzARTBEplJYywSLBEv7mOWFtXTQrR 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\Sop_eB4pBkWVWYp.jpg.BlackRouter 9.03 KB MD5: 1ad3c6c8d2615cb3d17dfeaa5d380315
SHA1: e733587336ede1fafeefbfea42cf638f47ec5e34
SHA256: e45dc39f82cbab7bae8003980218e3b2be36df3c339db2e040101b2bbe70ca2b
SSDeep: 192:VZpqjn5beyT+Umfvart7axL+4GlBm6Y4zfhVBtIgBJ1jpYBfrK8Q6V:VZpqT1e5CVmL+4clz1tEfrFQ8 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\zxTbQnE5Z8.csv.BlackRouter 35.42 KB MD5: c7ac113a4fecff0181d481bba279808e
SHA1: cd74b12efa0c96147582b5f1d419b2f75b20c5a9
SHA256: a314bfad3786bf569b29f726ed60b2fea7d32de86b631046a0191861d7f4ca96
SSDeep: 768:Fnjc/Uq07IdFC6Ochastw7qu/Bjr1essIeIREQ5IBxRSt:96ndPC6Ta2w7qM3He8kK 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\POiB 8ZeExMA-XS_pu.rtf.BlackRouter 24.42 KB MD5: 27ad2f1bb286cd61778e7ef1f9cc814f
SHA1: 8b1b7541595a173f7a4ddea536358f4fe64d2513
SHA256: e544ce63a4d647ae1e94608d288583e2635f3949dbe2d660cf6a5c2c500a6d5a
SSDeep: 768:MVDJfL7LDFMIMs2Ha+D2SE3jlhkrfYWMZaJcKj:M7NMIMo+D2SE3Dk7ZCI 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\craw_window.js.BlackRouter 236.09 KB MD5: a974d51fd8fa419b18a89cfcab4e75a4
SHA1: 6aab14a02c4a080afce48ca2ee6354d1368617d6
SHA256: 1f1b3a134e7c411dfa4f69d8a0ac351992ff438f1e8ed410f5eaa2670a8568b4
SSDeep: 6144:05ijklOHLdm/aW2YhiR3fBJyJ5C8FSEJ/JLgyU0j:glOhq5UR3ryJdJRMN0j 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\craw_background.js.BlackRouter 202.55 KB MD5: fa5d8ddde86214e9996376e122b16775
SHA1: 73e7aec51c0d38bae28b03ad1ac75dac3435ed1a
SHA256: fd49d5266e6696eb3b3b04aa65025d09f2ab064ae4b8bcaeb97e10014f235180
SSDeep: 3072:im22y8/RVYAmEaMy10oOq6oN4GX4l1v39IditQ7OtaCgXqfaYWkTFj0LulO5:fPFZa1xCoNtImditQPCg6yCTt0Cw5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PO syjAzNUL6_-c.swf.BlackRouter 93.41 KB MD5: e927f80330df27e5aaa1a851a89c1b6b
SHA1: 8c5bb155457fadc2f1c9f1567ab743eebb3e5b31
SHA256: 15dd0db9b5b345d140e43f3ac318fc34b7d0734ecf82bce95c3d0d0f73526b25
SSDeep: 1536:d0MZq/7m5xY1zBZtgLpgpdFskWwYapKVuxcRVixv1XeW+kCtBaC+771TZJ:d0MZpYbZOLirFskWfagacC9XeW3SjO1P 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_game_sender.js.BlackRouter 96.42 KB MD5: 4e308bfef3dfbf8ce134bb5e46b16b04
SHA1: 8fbffbc5fa82d23f77b6cc8a50bd0a4ee7a1dd20
SHA256: ffaaf3dd7da02df32224e58e6512b821c456ed3e3c4177fe58d2e42ef50f60d0
SSDeep: 1536:/drqROsk58AXZeR5Tart3eaUJ+QCb0FG/9jyI1u9E3H6cAOOs5BObpCy:/dOROs21a29oCbaG/9jjik75Bep5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\icon_128.png.BlackRouter 4.27 KB MD5: b48dee65f82facc5de030ebba97727f3
SHA1: 6678ebf4feb06efc8abc3144de70f4a6216ea9e1
SHA256: eeac877e52c75f83584674d94d2c93bdcf388abac98f7b0ed0e36eec65ada9a6
SSDeep: 96:pkrf4k83XGY+J995kAJgdlNcwnYi9+cHtigzZzXICF7Q:p+fZ8nCJZ0ljT+couZTU 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\mx-rqY50Yr.mp3.BlackRouter 72.80 KB MD5: 9164d798521560fb5f647f746b470ea0
SHA1: 602d4e641103b8e1f1e0d0b405610cbec776a95b
SHA256: 525a28568ef371d5b361acd78a731aba9c2c96368c768ef963dd927d3d856d6e
SSDeep: 1536:LQSVtY+gbxtTKE6WjQhnPsVJD7zeCwyrXPal3Nj:LZVIJwWjQhUVFprXPaX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\main.js.BlackRouter 0.09 KB MD5: 6ffea0a043a3b70bc3818c8683849890
SHA1: 8950f6d1e5bdfc22a5a21e615526949577ccf996
SHA256: 5dcbf60ae884e5afbed5e15baf73675d5c01834c71f9dccf0ff7d8d3074904e7
SSDeep: 3:LZSNeqo7Kn+36FR5R0cnnGWNSmgT11tLTqrPjX:mjMeR5SWGWomgB/2rX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp 70.69 KB MD5: 732c64aee6ceff8999516ccbf973802c
SHA1: b1d98bc159b6f33da30c2e7a64a52d417ee7d3f2
SHA256: 1097ccea279f7e27753acf36f5642aff7d96887cbb6483f7a78350ba9a1f0bf1
SSDeep: 1536:UNlqjcN7s/MIIpMhjFKxZhU3MV3zOZilX3nKsmmyhPNN:U/TN7bdgFKfhrVyZip3nt1ylNN 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\9jdxxgfjMh.flv.BlackRouter 9.41 KB MD5: b1a332c706657b646c209932e35f5c5a
SHA1: c8d60237d6a0d23929af7368c03cf2d65de99ee9
SHA256: 9068b68afa639ba4d97824c18ffe70ea327ba2a05cd18bb6a45a409ff7422649
SSDeep: 192:IUb9Vjb78zT15Bq4dNDrbe21jDnmEacPoTmhs3NScMJdEGOF4HfVA4:IUb9Vb81ZdNDrbV1PmEVQYsfMJdOa3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\9g8LOuisZySW.swf.BlackRouter 21.58 KB MD5: 560c25bc8e3fdb620acbe97b7e7b9218
SHA1: 94c4f7c779ed9bb556d6bc66fa363dc7713c1e83
SHA256: f0f07bc7e8c01215dd791609ec28e2d26540b5f8b85b8d73982a69dfc43848e5
SSDeep: 384:gPQogMt/VrWSGLFr7wLT3ynxz2Vd62aqm4x2wnGG6GFU4SA1HfJ/3nQD4:HogMt/Her7w3CQVd62aqGgr3nQ8 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp 76.00 KB MD5: 60305778578ad5bde04e866df9f71ae8
SHA1: d7481fe8624bc47f597a9824ee51395f43da9d90
SHA256: 0702a5bccd605ef2a943c8bdb68b3e0dd5a2d909a3bd6d6f6699e01b35ffb33b
SSDeep: 1536:GqgT5Rb+fkgAPKGcr1/FdyzA+xw2Wol04Nag/sUi4LSSbNvMrvJv2K65:3gT5RKMgAPKRR9dkew04NtUqbiJv2p5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js.BlackRouter 0.09 KB MD5: c54a8818b21b3594813544a51257dc55
SHA1: 5af3b8d82178fae1c32beac0527769ec075daa46
SHA256: 492dc69756131c786b71b678c37e3e48d268ce720458c68b4c2eb7e8d013720b
SSDeep: 3:LZSNeqo7Kn+36FR5R0cnngJ4rY9/HrZ7UQAdUX:mjMeR5SWgJ4UprZ7UQAeX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\yjSZbLeuEgVN7hL8xoE.gif.BlackRouter 44.84 KB MD5: 4b3f14d670cbaa9e0613ec4f90d78f61
SHA1: 98845024faa578404f30bce6ef13eafe427090df
SHA256: 650562530cae9ea4b3714cb5cd81d15f9fbba92ec5230fdff5fe0d150ae07e8c
SSDeep: 768:zO2A7FxoaOjgm7xqZOGsiojtBUBblJ6TXifoBRp/Zt+NOG+nMz/KT1lWmAa/ZML6:zfLaOMm7x2ORioxKblQTSQBRp/GTkMbQ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js.BlackRouter 0.09 KB MD5: 01c18a83e36d64a8f8c63f513e35fbfe
SHA1: 5541c9df2b3d6adc15d7e21d3898076dfe0edeec
SHA256: 5d555c3cfd0f0b764172659eaa320fafba92981fa0a75f510e173f361a49ed1c
SSDeep: 3:LZSNeqo7Kn+36FR5R0cnnDIF/iu+lF2i9BoJoyymVn:mjMeR5SWy/iu+XZon 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\1GrYOfMmwFRQEIjz3.pdf.BlackRouter 89.58 KB MD5: 94fb3b184231b57a3764cb011ecebe76
SHA1: 40f263f2dd041017f2904fe95f7e62c5a6dd1abb
SHA256: 68ff01c427da58cc3487a3eb90018d290a8c20bfc3053b82770dea274eaf5b33
SSDeep: 1536:YuxvCvuBfedOFnTTlCU0b6tGOrNI9zq51GluWgao7j0JDZP6IlG5:VvXBGAtdCU0etGhqOuTZ7j0dZPxlG5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\NeOnfI7ycBAvCv-RS.bmp.BlackRouter 56.16 KB MD5: acc003cb1e10a873302e864ef895bd32
SHA1: 3423f7781e5f959f4b2f54afab0abe3e9cb5691c
SHA256: 4b9f57de857cb6c234c8df38b9140a35ab8d3646fbab0bf4566d962fb0dbdb05
SSDeep: 1536:F/LxuSvEZfSgOE+9OS7oslJdtTybpCbaehZjT:F/LxuSvE0dmgBylCbNT 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\429LeDx_PvwhKO4M6o8.pptx.BlackRouter 34.59 KB MD5: 8a8ff7b3a707a202862f35c7ab4a1230
SHA1: f9f8a1b7823e8877694aa024741ba10043cce1ce
SHA256: d0a4412c3c4fb5440c0b82342c2f00a4afe08cd5473e30e57facff4b5f92a911
SSDeep: 768:DJlFv2sJgSkSh+kVdtJUuNXGcoNOupke/2PAqA9wispKlyMXdi:DJlx40XUuNu0upj/EAqlimwyt 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\je7OWLdwf.jpg.BlackRouter 76.86 KB MD5: a02f10680166089050ef7023cf894167
SHA1: 1974922f21307a9fa84311fef417aefa52567b24
SHA256: acb35dc9e4ba015bd51b5023a6939b8bc0e3bcaa5c801920e9a7238836b36353
SSDeep: 1536:Se4nK32mNBnCEFcPGfhlaiDXB5CE1muiMyCrCIjnGHMXpW:74G2KnCHP2aAC2mOxjGwY 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx.BlackRouter 60.97 KB MD5: 1556ca65b34d50a9271a7c08ba82943d
SHA1: 34a5d0f2f906ec0b4b2d0f3b8767fd0e71f56a4f
SHA256: 854dd6e9b873a60bd8c204127d7d078533e3591dba44b1ee74aea46cd6d94b8e
SSDeep: 1536:Euflvgmp+Zaj9mK/R9yj00jsfUd06DAI32Ud0fPrGl2JpjphH6F5unvjG8:Euf6mpOajc+jyQ0jsf96DrDduP2ajpUA 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\s_2tYeIi.png.BlackRouter 61.69 KB MD5: ca4f501fe52712d78829ff487c74fe6d
SHA1: 7771382e31279a3237be2381c0664488b46d24b5
SHA256: 3a850e58dd4bec4c7a1638ca4ebee42f41addc198a370ca154a319fda9d10c2f
SSDeep: 1536:099jHYkMwgVM3gSs0+pc3m01wbEADdo9JzQYQqRUNHh8ictlYlHO6:09CVDxvpc3113ADdoLzQH0icZ6 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\7JFZQPs.xls.BlackRouter 82.59 KB MD5: 032071a82bf4b41d05a8a067b63a5331
SHA1: 373861176d20248988f7fab9d7e6ee39750b1b95
SHA256: abfe6123deb78873da4451f39809845cd0d0634384ad9078b387014502ca033d
SSDeep: 1536:aqc033fHocRRun4N4YS7jKEV7CuDg1sUZpF1L:JLPIcRRK4S7+EK1fb 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\128.png.BlackRouter 6.56 KB MD5: 85c7879dac2d4fbc84053c89aac3b6d8
SHA1: 23e2dfa7cab31ef18b406844348b7ee27cf4f83e
SHA256: 057ded7301eed10b42617aa10055cfc3d0dd40bd0322d311650fea1864bd84c6
SSDeep: 96:tW1SvNkWSsOqMBY5zjXFziblEeF5v80EWWgwMRt+vc4VXR37sTji:nCrt6hFT+V80EW7bRt+FXhb 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\_2KZaW-bdXEPaPzni.mp3.BlackRouter 45.83 KB MD5: 328c33eb6f2db24579854ad1faee6d1a
SHA1: 812198bf478424e4d61f87e9cad19879b27a9c6b
SHA256: 7a4b57cd701941992496a65e928d89c32b6197b67676817ecbf0c0b8ed153268
SSDeep: 768:h3JW7FfHpxyxpM+FjbfeRLHOeL8majAND50w+vXqn4+m4permombigmMwIV4LAgM:h5W7hSU+NTALH1cjAND5V+vXIFarFDtO 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aR9G7XBhKvZqu7fDuR05.jpg.BlackRouter 65.70 KB MD5: b818dc119c8dd732efce50f18fd7a788
SHA1: 7d28e197d06a3ba5db8510a25f5b51d33cc02913
SHA256: 9a9885abc374bec2fe53d49e77d733e6e76b6651a8bcffe6f430890a72ea52d1
SSDeep: 1536:uv9Ti1wXL66BzXay+MzFfRZW8ezDwkAhrLiX:uFTi1w+64yzNRXefwk8LiX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\N1kqY3ISsu29lP.wav.BlackRouter 84.61 KB MD5: 8f7ea59b249d53100953cda0d722ee20
SHA1: 2b1392b17884628f2f903baed22c9fae650f6c8b
SHA256: 7845055f8c4ff152106cac8e10dd6880f00aa8bc08feee13e0b633c20b43f3f2
SSDeep: 1536:+NLCjBi7Gh6KY5REyhMoKfd2IBc/AHykrj3n+nZD0xAOMrIjFS6IgThxY9TMZ:iLCtmGh6H5fTK4IB3j3UZ5b8jFS6IijX 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LOMIUr.pptx.BlackRouter 48.05 KB MD5: a8e9c0d0fefd4ad222281dcaaf264ca7
SHA1: be3b67c471f57c8eebd29d06660db361159ef6f1
SHA256: 0561b2543659ec8e1a7a1cc72ce8fc64868f24c016d40c6ed5569456aac38565
SSDeep: 1536:PQ6Z0lOBLU6g9vdGGppTj5N5tYuURDcUXJlZm:GavgTBpp/vY/DDJlg 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\zU5YUGfB5ftmJPNYcO.png.BlackRouter 81.70 KB MD5: a32daa124a59e1bc3be5b5dcc2e5f732
SHA1: 4a90a1d98b4330eb0f24e80aca109173114fb142
SHA256: a16184232aadf3573be68cebe52b77312bb64d78365ef0f971e71233c0a8dd8d
SSDeep: 1536:SVuAvhNgIrs/mcz0IviKCkKiDvsrNfZfihNKORTbaWkrTN5RrVjO9KUaRZ:avPgb/mcQcBVlDvSNfZgPTbaDNHpK9K7 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log.BlackRouter 0.02 KB MD5: bdc33b2ae35841c63eaadee61a2d688f
SHA1: d81bfdde85a495c00703bad84fb4c1d267dc0acf
SHA256: 6d9376c40d22f4c386d6fa8b61642eec7ceca6f63226e05577e2aec9a83ca19a
SSDeep: 3:ZhyAZsSXnn:fya3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\eventpage_bin_prod.js.BlackRouter 22.86 KB MD5: 6c345c67ec5cb8180f25e8f949146fbc
SHA1: 13e9c428d9b3039f4e81f8772f9b9d49b7c4768e
SHA256: dfe295676047f9d1a825a42db3f17afcbb6ee788453930b97b05abf2b5baedf0
SSDeep: 384:Xu0Skt68e7WSGjf0IXEoSnWAg2YcX5+OHBz0qODS+0BjY5ZFv8OYPI0iaYs8cTH:0ksR7hGj8/rnk9csQB/OMaZF+fJYs/TH 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\9IlOSW oV08yR L0.jpg.BlackRouter 76.94 KB MD5: ae10d958448bfb22a4d457856b9790d8
SHA1: 0aa90e1b9aa0050b99325520e0279227b55942c8
SHA256: 6c7334c94a64f33f634fbc64ce18732b4a7fe9e4a9959c2e03f4141d1f1d8abf
SSDeep: 1536:uLT8pbuKj+JTVARQg3Cw+qLRbd8k0V6+92uIhUyDEg43oDyxyMfGR3l:wETjwsd3CMRbd8KHrUyDBLDy8p 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\gxKocGgw\__lK3.wav.BlackRouter 52.69 KB MD5: 3f2692ea04bc67fde270ab41f7b7a0ca
SHA1: 5bab88580b27b3843670012358e08c9e6881a3a6
SHA256: fd21136332c16c6ed29ec9b043ecc5c890dad8fceb5a408f56628a3db5aabef7
SSDeep: 1536:jl+sdADOoMsHt/5K6JYo0yNcuXQlmEl/dCyLK70K3RpfB:jlvdADOyHdodoouAxlCy+f/J 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hU7X8vaEMkz.docx.BlackRouter 90.34 KB MD5: 2f437bb61c1473c13034c99e6f268bd7
SHA1: 9f61e83dd904301f4e25349e70ce0bb7376d1203
SHA256: 867496c4efdc79e7d9ee8d01698fc9553dc593b5173d806f9f30c3ccb5203c2e
SSDeep: 1536:Y0GQuHzdULDOI3d0KWp/eG/kkNRLzK7JhpUItT6dmbSs7705cD3Urhfxyk:YPQuTQ0pmG/FzI9OqSsBghxyk 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ffuQPel_JjV4J7.wav.BlackRouter 47.56 KB MD5: 397a67b4c0d8681a59a65e4ba1f93302
SHA1: c861d1d7bf9025935b93ce70b120c2e5cb687bf6
SHA256: 9beda879f9c7d167232e688921aea29649efa83b5e69e6841a4668696dbb11b4
SSDeep: 768:D5LSNhiOwCVd6a3GBnnGoXCkyy7KN8/QVXNAQtLEsJIL4AmLvNAEFgAH0l44:D5LSNhiAdLGBnn9GN8YVOYVJ7Lv0AU/ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Yk0B b-PPwV_dE_H.gif.BlackRouter 12.91 KB MD5: a5ac52cab8611f1a7a6dc294ae23d9f8
SHA1: 93885a92c20414a46da6b9041610130afdc2202a
SHA256: 1180971346db9b199314d1e221e6c5ef84480c8d524dd07ce1b7890239c3ffb1
SSDeep: 192:GuGvTF1euwu3S1ixfMLoFCP2TxuKvO6rmrRvVJYnD8CXg3YtoTgxGZ:GuQJ8JgS1ixfO6CPp2yrRvnYDngoaTgg 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\8OXe9rwyn_r.pps.BlackRouter 61.34 KB MD5: cde7ba3a380bcfbea915dd3bf54c6648
SHA1: 868337a563c9077e2e59e546df722eee0e44bcaa
SHA256: 3d1090ae4da9d21353cf1a95c16e1aa515d39f65776d5d386598b1339527ba72
SSDeep: 1536:xzgATaEXwkxKv8nwo+zZTrAAex9FnqCW955UD7HZaS:xzhTacxKvKwlzNqxfnPW9/U5D 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\MaglUQPRLjF1M.rtf.BlackRouter 30.09 KB MD5: 6e7fc971afad55c9c5c8ce40c68aebd4
SHA1: 2dfc87a32860d9f4fb5a96cb013352e27bd41b6e
SHA256: 2f8b7ebfb2f621fd30e72919cb64fa6b0bf378dca8ad6641ef2ac82882ec1ab5
SSDeep: 768:xchx31UNLKJx7fUIZsEPj05uJ6+0j9T0J:X4wEP4cmG 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\w7dh2iOa.mp3.BlackRouter 21.03 KB MD5: cb60987ba09809eadac126cb4c2f8a27
SHA1: 3ef79cb351a6e37ec75493d093f5997babfcc141
SHA256: 103ccf32ca95f995452c01ebd8afa194ebb4790768cbc762abbd04d16cd1886d
SSDeep: 384:TjrWCrMY6nxs9sST6hLKNzZEECxpEG2jq1TAf0L5e9qHE0d7gS0mUQCZcCHtX7SM:yIMY6ngsa6QNLCbPSujL5e9qhx02qrHh 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html.BlackRouter 0.09 KB MD5: ce21f72ba796ba9226a062857018381b
SHA1: 4c068b3d78e9173b43eeaa2eb763876fe5584e89
SHA256: c59cd6ac499f5763623e84edfad8ae246c055ff2cc80ecc5d2e9c6ab800218cd
SSDeep: 3:s3RHjT2xrYY3bASW/ETQ3ctGLNR24v7xOL9:s3RHHBYrv44QMi2i69 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_close.png.BlackRouter 0.25 KB MD5: 4b0f0e781503a58b970c9f61c1a7a9ab
SHA1: 330141ad99dcfdf4fb66faa961e17aa97de8f905
SHA256: ae489c21a356ee3a0c11f4bee14c406ce11cbc2607e86685e06e57922b25ae70
SSDeep: 6:G/VeliI35uftOisstyi1suTIWrApxFbmN9nt7ZFGg:8VelT35uf8bNi1suEWUhibGg 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Oi m.mp4.BlackRouter 77.53 KB MD5: b79bedbcc6d852ca9fb844529ef4ae50
SHA1: 1ae9ac70af432670d69e94f1f84f0e8700a14ffc
SHA256: 731669a9d52942317841119d56625cde558f5523ad0eba4c9450bf66342167c6
SSDeep: 1536:80PyEG1BXs/J+56C5MGiq96YRbnMFyt4qaRVs:byEG1Bc/Js63GiwrnHZ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_webrtc.js.BlackRouter 2.33 KB MD5: ca3945e7041939b2bbf237755cc05ba5
SHA1: 88afe3710e48d53e1ac966b2e37c10aace81b321
SHA256: 8c28f0ff3fba46930d4095cd744d79c51e4030174476b6ebc978b1f348300927
SSDeep: 48:KAD7iNeOL4lgyCcjbbLQC2q1CedY5+73lbPfPjZRo3JwprNp:NeeOL4lgpkboCD1fY5+DJdRo3JwprNp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rWPrndBwC_sHX.docx.BlackRouter 8.50 KB MD5: 9bf524d6fd3195addbc744c3a594952e
SHA1: 53b20a210127733a2205db89a370a81c6ad5ec72
SHA256: c785d06994c130f746434d01f7c79c6ae62e00694e36f986340bef1f6438fbbd
SSDeep: 192:BqjaEbgmZNc3qj2fbK5xS93quLYXMMkZAR8:BwaEZZRjKD93qmcMcR8 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\_IrQcH0h2xbgeeMatKNb.gif.BlackRouter 67.52 KB MD5: 4527f254f439f91cfd5d45cb3a3ccdfc
SHA1: 44f22dd5b9ebcd564249f052f3b54db51eaee6af
SHA256: 4789a9cdbf9a74e54bb2b8f2b80231f586e712838a530d6f7c25b07c4822841d
SSDeep: 1536:ssdNzrgC9+w97M790S6XLTGlPsU3pCNhob9LXjHYjV2yTCtjElWih:ZdNzrd9pxMl6XLTgUApCNab9LXjHYoyH 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvOY.pptx.BlackRouter 81.22 KB MD5: d24934bcb18e71a50e692ea7e437831b
SHA1: 08354e30243c99a17d95b9cbd7088bac882fbe8d
SHA256: 199202f059f90e55f8c6efca3a3d8c2bdd52b9ad54abc89a905d1fc96d68ffcc
SSDeep: 1536:WRpkOfPZUmvHXc/smXrIE2kSla/uAdYY1dHAfZxD3g:WRpl6mvHXsANGL+ZxE 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\VutX.swf.BlackRouter 22.80 KB MD5: e8b834bc31b367ce4daf5678bcd81f84
SHA1: 5cd46cbfef9b2bae24863335f96b6f3e23262e85
SHA256: 47082f6961fba458bf3d09311c608ceda5ebcc44590dae31c5828554b287ad14
SSDeep: 384:ne2FPDU9Z5h+YQP7FaL6GaDnjZ72j8bLdAFPrlkwOB+RJJhwMbhNCq4IDt/pt:ne2F49XhkBeaLjG8boZOEpbfC2pxt 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\zZw0.bmp.BlackRouter 90.23 KB MD5: 77b2581913ceaa8767b9e9e1436b5a59
SHA1: 0a1b83aac46e53356befddddc2f0306d97165920
SHA256: 40edc9a1e9ceb6bb855707c4a5196826f6696570894eb50f42b62039cdc072d5
SSDeep: 1536:oFNHdD9psWhORlIEV+DUIcsvoQshNi7qjoMVUZ3xGdFlHTH9suI+c:kHds62yD9QQsq7S3VmBGvOPj 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\jBFKIGSBGHjL__yZ4B.flv.BlackRouter 61.23 KB MD5: f626494180c09069fcdcf922993143cb
SHA1: 5b2b117f2a8e2347f4607971f689c52bae47faad
SHA256: b4053f868edba53fb658d1ecc4284ca1e421ea83a09c64319d5b3df0a83e2104
SSDeep: 1536:m/RSCs40xGKUIi2u496OHfLJO8tOyr4VY3i5XD5+58wSCH2h:mJSCsCKO2um6SJOSD4j4SCw 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.BlackRouter 11.94 KB MD5: 8dcccf4d9f0f2a6d448d5d1dd2a79e3e
SHA1: 2462a78aaaf583cbdf88bdb98e37a908ae5006d5
SHA256: 81c4e7d0625ae4de257e906b28904a0b599804fc92e23780b796b3b8e5649c6c
SSDeep: 192:wdK5Ts9lG9nlStYVvQkCpW93H4lKjxzfjH/BIhURZhEph5pfvloK5Ye:wdKmHG/VYrp8sKtX/WURLM595Ye 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\KzPEFwTNp.mp3.BlackRouter 30.34 KB MD5: 92b88e9ad9bea7af3737b361f36b4582
SHA1: 4564d40bf63eca06aede2140744f03043cc293ea
SHA256: 89970a0fe75da68ef63c7e055c50a4a6f0214c3ecccc948d6299937952a774fc
SSDeep: 768:39lUu/oONyBGrUrIFIZDliN8GFflZWTevCLoc8WQf:NlSrI+G6GFvWTevqoclQf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\0 nRnU2pOKjV1 7.png.BlackRouter 49.59 KB MD5: 3e104908958017f70a00d7bf2866c60f
SHA1: fb0748000d8622b4acb3a9c62e85e8a7aa6273e2
SHA256: b8f05f31bdb2c3d88ce7a0e1ff1070c81ac287ac53f047a4ab56b4aa9b8b398d
SSDeep: 1536:AqFO0kBXcCb8o5WpzvYz81jPBdLU0Y7/5BQ:fO9MwEhvseTmlW 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf 54.42 KB MD5: d3f001b344de3e768747160f7a2e1813
SHA1: 8b83418ff2cd6b36d7fd09e630903239e84fb3b5
SHA256: 08039fca8a23ad30312e96f1d47d9fa4b45d80dd8d583e541c71778891f14c36
SSDeep: 1536:tLunmr5uqso76TthLN/c0C3nVF6Iw7tvQnopAn4aZSi5:tLunkwRqMLg3mP1QKAn4WSi5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\9ZxG93RMiG.flv.BlackRouter 44.44 KB MD5: c8a98873863e02a926ed2ae09ec4d650
SHA1: b388a65e4e40daa52307b6aa451c26a402b2cbab
SHA256: 53b1720a5f94db52e2d826e7dc474420b69f0e92c320391616e8df74736af4ab
SSDeep: 768:xYHmiwvlm4AtDpZ8VjDYNC9OR/BR3RIDFbQIZiwUwd1FelVjnDsrTlO/FoSYRf:Qp4wVZ8lkNCMR3RSWvc1gllnUR8d4 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\C3kGo51_AtVELB.flv.BlackRouter 23.42 KB MD5: a7780ad7bfab2e25f9a83ac119c488fc
SHA1: 074b4a164767742935a4a7d86173beba0bb2746c
SHA256: 2ef26de70fc9d986ba5c9344d1f4ef596b4961837d8bba34e7277b2d690db1d6
SSDeep: 384:I/oFMBtjqK93YpGL6VdXrbWPkKmqW3qeqF82efK2TvmgfLku9GLladK69rouFTDk:I/LjN9opqMdXGMKmqaqF82b8T91uCDnk 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.BlackRouter 1.17 KB MD5: 3d133d283a9a2f7235c49dd8c824e1c6
SHA1: 27e0041af09c3bc81aa959ba2e636700448eb253
SHA256: 8346571d3b110ab12764b856c72b4e5dd350eaaccf6517cad09d4dff95e2c3fa
SSDeep: 12:MuJXM+ZkqYTsbioquJXM+ZkqYTsbioquJXM+ZkqYTsbioquJXM+ZkqYTsbi4:fVRqqYTExVRqqYTExVRqqYTExVRqqYTU 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\w6D2x-ERD0XtSOSO2V G.jpg.BlackRouter 82.66 KB MD5: a755aecdfe76e830a5489c85798fff1e
SHA1: e403f3df01fd1dccff49262b543c6485732323e8
SHA256: bafa4eafedb23f0d0c2ec2a2f255f9fb77b17ee9b1680c9513b9c6942cef6cee
SSDeep: 1536:E3WmgMJTGAF83HG9D4JL7ovQI4O6izLO1U6Fr2Sarw225toIJc:E3hgMQAG3HiD49784O6AOAODo4c 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\TmQwbFLkGnzkbnDN.jpg.BlackRouter 65.77 KB MD5: 043985c2f4cd4aabdd8e2664cf41de70
SHA1: c01efd8cbe66abbd01d98e4694b4b805e602627e
SHA256: a8be8e0a138d2f4ec1f15ed1779b75ca0b5c96defe7f0bd8dbbc27c277099340
SSDeep: 1536:el30qA8Ug9uiaT4wVnSxSKNQMGDMb8zHdNJEcu3SrmkUO4EP2rMyKnyAAP:ed/uRT4enSiIYb1j7UC2OyzP 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\iocukbdo_b7ytLik88Yf.xlsx.BlackRouter 82.95 KB MD5: 3b18028fb2a903b1b749acbb7b67f0e0
SHA1: 48f9dfeed34af22a68a4e49ab54b550e66aefc01
SHA256: cc7d6d5972bb2512a1e5e2e26f50eb11207df72c61588b7679a35f8ff52505a8
SSDeep: 1536:nb4GHaUR+T9+S3f1Cu1EW0xiy+l9LdBi6igRT/r8jnsMW/HmFr35nQqfmfFNgpN3:nb4SaUWAwMuiW0xiyALdBiFGT/oTspHi 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap.exe.BlackRouter 15.09 KB MD5: 0fa801fd12d9aa6335870c86c682d4b3
SHA1: d2deaf3c5436fc73301247d90f910df29af5c986
SHA256: 65b33aa6a16c5aebfc2d8a5c1e7d3edb89fb5a5a409ed7dda6969b242f06a8bc
SSDeep: 384:hgREGW9FCrwRAMGuQqdalRqA0OOGOD4Z6TkkJPhNFUkkkd:hglWa8+MdwRq/0Pktzk8 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\JpfkFOZUvZEBDBC i.wav.BlackRouter 52.70 KB MD5: 52c254781ccce4e071678596fc7a7910
SHA1: 134b13967ed109806b61a414ca2803ffb77d7b2f
SHA256: a11ed86a1232a11a8c9f2953eedade47d98d727543c9d80c9b42d57221112a26
SSDeep: 768:nSVkLdg4bdMkK9zapYz6SiIehKmROaNAE/1tU7yn+rGdcUVrIfwcHQTWBrWXmmRQ:nScdxPK9z1iLNOaNHvMGdfIzwTWNPp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf.BlackRouter 57.11 KB MD5: 657bff4a3a9bd561ce1b103ebf67dfc9
SHA1: bd7e21c6c2fa8592b6e8de00de091067e9b07d94
SHA256: 8391419f3f93788eabda47c4c291704bbba2526b664ec8a51466d0445b11bd6a
SSDeep: 1536:yQS8FxoqqvEPWSQFRZStPOOHxSRfkhIGxCfWAP:yQS8Fdn3cXStPOOHGkSGxlAP 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\bsrpuKhid-cU.xlsx.BlackRouter 95.19 KB MD5: 2378a58ad3ec842a3fd19c7988252c5c
SHA1: 36f804f172ca904668fc25cb9fd1db8eb14fe033
SHA256: 82c6ebdddd3f34fc2415d9a41cd0c5c3fd24c7c29b527125742aa59992312608
SSDeep: 1536:sdXdjBdlZAd8+7+9GtMaotG+q6oyADoaXQ6BfYTrOBkfUNlGYSK4Z:sdXHDZAdd7MIglob0agGfY3OBkcNuZ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\2T8Guyc4BQWYD8Mr.xlsx.BlackRouter 54.34 KB MD5: e7707420d5ea17931ad5386b944d79e1
SHA1: 3ca4bec25727cecbf9f6709fa4f76b93214d1c66
SHA256: b6ae7e6537f49557a280917cac1a6f0389503ad6f7e2e5470ca3dbb0870e3a24
SSDeep: 768:JEutprbpn5BKRXvfOtLmt5D0P0j4PLP5F4TMRTeV8MmaliSVjhpnG2SFAM7:J5t75IffOoEPLP5knVjjMFAA 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\background_script.js.BlackRouter 42.16 KB MD5: 9833f21021f26c025c0f0a6770e79ffb
SHA1: aa4a28dde2e8c02d0bb29a2f6283e801d2872432
SHA256: 7da429a2eae292653ad951cf817bbb003913c493e6ccdf4e39cb1395546005f6
SSDeep: 768:EfoiBDpJR87jFFbPGnrCktEN8Rn0f1ndPqw2X9YgJ8pXqbOWkQIio7qzKrS+yABI:Ef73J0CnrKN85O15VU9n8pXqbOZQIiou 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\sgnjv-Z u6dCE_6Y.avi.BlackRouter 68.28 KB MD5: 980dc68591ff46443e6ca51b6617fddb
SHA1: 9687d555f8a90875235f938d26990196bcdfa4e0
SHA256: e573efeb5751eb7d8c697b93ba4815925f4892b4ab9d1c5b1911f8fbd6f9b6b1
SSDeep: 1536:vXfM+6aq/9VVqhgs5o/V5X6a6SZ4wNNekju1/1QBUiwLjVsSMOaN2+:v0vb/9PqhPodt6viDjS1QqPVsSgNf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_hover.png.BlackRouter 0.17 KB MD5: f77a430377466e06fedee7499a46019c
SHA1: 8f6291988df03eec4b8b561c8a07eec5d47aef1d
SHA256: 13c06dac69893afa1038918be7de1e3ad23425b4a39b00cc6cdb92464da5298e
SSDeep: 3:G5UCaoRel9IpVBQjHsm3WGNmHllTafZV6Jqyhlvwn/g4rq5AnWl1tVDWe6mAZsS3:G/VeliI3uTw6JFhi1G5CoLa3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\P7DvzSdMjzYKtoVfsTv.swf.BlackRouter 33.00 KB MD5: ffa9f119ca2fce726a482120699dabf2
SHA1: 42da463c017bafe894f3665e8aca5979bdbec3b9
SHA256: deb9e71131c76f2b17d3286702d9a2d7141d1112d78d6f8d44a52901dcce46e3
SSDeep: 768:hpItNXt0PnnGJXUbIX2xyp3cpuDri9g3YXsj6Ri3M:rIRvZ+IGxKMpuDuS3he83M 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\f6Ud7g.wav.BlackRouter 34.09 KB MD5: 6caf6d10dde5776369f9b3b618d07626
SHA1: 5e3fb070a92cc9d059096b56c998bdfe0b06ec0e
SHA256: 54b5fa34db2af07018fbab64fb4e9b990794aa4fb7376dbd73d50f2423a8c2f9
SSDeep: 768:hV5oMe9LlsI2JYAnvR6p2NFQZzPAnKCDZFEEbRX821ih0Rw3RuRa/+GP5:P+52JYg22DWzIDVFNbRzbmuRaWA5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\iJxoRKVKIBE0z.odp.BlackRouter 57.86 KB MD5: 767c5cf6cfe5f9ee3b76b586ad555aa1
SHA1: 27ecd6e9992e88e7577b2844f4f248726c0673cd
SHA256: 622324b10a08b3657bb9f7438a5be850fa91b64d3c21bd70bd0b93dfaa09a3f9
SSDeep: 1536:4rS45BHukMInAc3sV1x4NYKG4aNQUbMM+GpOw3RYV5X0Ku6osbDp:XMH7MIAc3sVT4NdG4aZYeRYV5kG3bDp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\7 Uyy1x.mp3.BlackRouter 48.70 KB MD5: 98273bea35024fa18e94057e37c8d4c4
SHA1: 5a7af634c2612bbfb917b288a6450bf8841b9b7d
SHA256: b4c54eb0cb9c96346c22ed82078a861749565b0977efa695e2f2c5390c9ef943
SSDeep: 768:H/yXrfVr3RKi6pRK9CJ55AD6YyfNIhEZyPt1/4ts0SRITFcZgsuJy/3vzMU/:fy7FRp6pRKa5OVy1IhEoPEtxcZXgU/ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3E xSqN-IRWH61UfHaIi.xlsx.BlackRouter 4.06 KB MD5: 9aeff0b23a270173ccf1cb8169b95aa7
SHA1: 1a3de33a8f4a62dfbc32831ae1e7475549709c4b
SHA256: 765d857393e39208dab0df43ac44f505d0cab693c4a755e9803695f53a4a7877
SSDeep: 96:CNKSKqgnsRk+P6izRS8ODq1v0dxOTLbsPUf8/heRWWb:CNFisRkW40wAPdfEWb 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\YjfbYM 8Ps mlYzHp.mkv.BlackRouter 12.00 KB MD5: cb771531e7ff240729ecec817f95abc2
SHA1: 0d219955184f9450e1e9366674de0612bed23bda
SHA256: 6b0273e43804bd2529dafdac85b8592c07503f5116f82099a35e29a5b240b590
SSDeep: 192:h0P/gFFYeCj3etXiml26IVwMZK5UZ5UFBFPeW8/bQ8D39lSKZdSFOANKWe53:KP84etXig4CUZ5Yed/08D9lSBQANKWG3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_16.png.BlackRouter 0.14 KB MD5: 812545fbebef773da39e5381bcc66751
SHA1: c86d9808a6de1033b22bfc82794bde8e57f32e2d
SHA256: 69202dc50fcb1aa820d1a2a8985eae1babb6d07b20075e1156a095c5ce1deee6
SSDeep: 3:G5UCaFRI0Nxv7hCuj8CHSqOTZWmJ9JRKcm7LYCfA0cD7yyLpeyVzoQPDH:G/k7Nxv7jLS/jlRK/B6Nwy9oe 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\1bqrJe9Ya _Vsm.gif.BlackRouter 17.31 KB MD5: f9d19170bf27761958258d53c7fe96fb
SHA1: 3e468ed0bfb9d926d2eca28f9adce5d23f364e74
SHA256: 06ab4bacc64431245e6287de7af0b8ab0c08f112bbbf698310ee9f7e222cfa2c
SSDeep: 384:DasaibKrOmTyPeJMI+1ibYg4xdhMQTkAv62osdGdb58heIV:2dIbVmgibYg4xdhMQLv62oswd984K 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\YeEAcrtGmr.flv.BlackRouter 92.14 KB MD5: d430386a3d625c9b096119317c380971
SHA1: a4a4041e332e4c6b24e742024421badcd9797690
SHA256: 3d04c8d816703ecf99d110d5f03b5f3a1c87a9359a927772a2152dc8d81579b1
SSDeep: 1536:s9LFESk+j0+TmOZ7Bl4cQtUqW/HMJXVlgJoqdmo/vPAPXHbMVwlLZ3bbz+:s3KbvVWfclg7mo/eLzlbbi 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\w7_m6fZv.avi.BlackRouter 41.86 KB MD5: 3821d7f6fc6da37a40b04fb204c69ccf
SHA1: 232b15aa71abe721c84d8f58d9f965541d93f73c
SHA256: 929e12cb0a886571fdaa262a0176e746a489d94b36f5e107740d00d484d94da9
SSDeep: 768:kza3iVWhLqPV8ouzj0ccT08txr0mHZ2/n+TfMmpEnL9GOafT1wy/dG2Bxw:2a3i4hLGQj0pTnH7TfMmp8Zof5wy/dVM 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\GoogleUpdateSetup.exe.BlackRouter 1.08 MB MD5: af5c8e97685bf6ebaffe6a9d5450d704
SHA1: 0b8b3531d8d7525782156fec555df079b2db2e03
SHA256: de1c4b847dc592f8827e8b855367ccd7d44fbf3e4b496270e92479cde5c4ccb1
SSDeep: 24576:TvyDqMnowEDSneGqj3ZdYip63DRkiW/NmCYklnaQ:TvYPozZGqj7WRAgy 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CD1gMa1Z1d0Fc-ReZ.jpg.BlackRouter 88.61 KB MD5: e55bf61fd2d0ac3734940044ad956c93
SHA1: 8e0c9623c5883d1090d24bb0e7bca398989ec10b
SHA256: d1cd080b440fe0ae262e53b380c334e5db8a960b23f006363ea513e34479e9ba
SSDeep: 1536:iAUM6xJ0cbTs4h+2AAD6XSZQUwF6YAQydcz8eKeUCqd5cZEwFXPzv/D+QMcNtj:17WJ0uhxTDgnV2EjVKCj 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\oWfkMlT.bmp.BlackRouter 49.31 KB MD5: d629a423536ec663d8da86c6781df39e
SHA1: fa9f0f50cce45f6e453fca4f8963780e1649938c
SHA256: ecfa21c5a3802686583f7042855fa89a04b8399be7db1ae19e1314b52b7adcbd
SSDeep: 768:XT9SiJ4jcqymLFK79tcV5fbiqAkcJe/xcbPu4RG7bfaS2D1Aka95x5o:XZskmLFKhtcHfWqAHJe/FZ7bfanuTvPo 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\dx Q.xlsx.BlackRouter 69.00 KB MD5: d8557678cbc4df4eece568a13bc4bf56
SHA1: 9beb1080dd67dcb3389e1bd2cdf4a9918d9ba773
SHA256: c83725e6daf564a7c0924138d2550316c7be7e368a4f1906fcaf7924ced70ca2
SSDeep: 1536:ybP5s45aPzRim+gWfU2xx+C6oDu5qGBljtoFK2TtBub2b+:y7GPj+gWfU2xxcCu5TfjelBSd 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png.BlackRouter 3.30 KB MD5: 4fe45fb11d309b918d7d0e13663721cf
SHA1: 6086a045c562a199342f487ad0ed90f763e90105
SHA256: bcbba79c278af4da96c3f560d449c8a9713208128664c0b3e4cc703d3b630c21
SSDeep: 96:aIPy1KYVj377SNIO2yP/YRaUkDpyZyc5FN687cB:aIcZ7nwIO2yP/YsU8pSychvcB 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\UQinYjJ70HeDUKlLY.flv.BlackRouter 54.78 KB MD5: 471fe30f6439b966c4ca312a0a35114c
SHA1: c2aa3c777145a0c061df995456441842f23c2343
SHA256: 9bd47a0135f36163811794e7ca125fb15b83b0afad1158b33992e6d15f05b7b7
SSDeep: 1536:kyLXEFGXFGDhnnk5Ha11l3Dt00Ws7wmECny:kyLXE4gdkE11lS0Pcmtny 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\R8NmCRrojZcupdi.swf.BlackRouter 3.44 KB MD5: 159c795135c8cd8b606a15c986550d77
SHA1: 5e9ce0fef3f27906719a496c780d379c62391395
SHA256: e49ed64b802a4631add1d17d704426535d1c16b6e808fd1d655e3be54e288aaf
SSDeep: 96:Nvg0++cnE+nej1RT9Mt3JAnx3iHebOvxI3UcBUFL5n:amcE+nepRT9i3JAnxSHebOvxHcB65n 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\cyChrgOFbbD.xls.BlackRouter 16.97 KB MD5: b538a886fc2b24bdb8cb7821a4e6dda0
SHA1: 9caf22c353944c810629f5e2abd92fb8a7902c51
SHA256: 583a4f6c09a30c5a7f1071e23b15bcc7b9467dd514154fb219558b0c5478f5ec
SSDeep: 192:Hv1JZN9QOw9ekzXvjkTEZbrvx4HUclceJAgnSP03GfmSS+pRPTA3MVm+oZVMF/q7:PJhkJkcbEbl+pRCU4VMDet8c 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\nkG7oM9.jpg.BlackRouter 48.52 KB MD5: 858cdd87845cc51fdc407ea2d73e1a1c
SHA1: 877d1ea7518b6c1b28905a76c9c321ed91dc31c8
SHA256: e4c3c1c80b6aa6ad95b558e798cd980780c14ce02c14b9d0ca7a359daf0f23b9
SSDeep: 768:MXYg6RakVPr/LUgy5UObuikoGqonD1PcpubJ76/tDuLI1ZMtrdAmMp7nuRj7xl:Ah6FcgaFc9suxLTd1Mp7uRjH 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R1Cc35IEljWXcM\MMSLiD07 s_kV.bmp.BlackRouter 81.03 KB MD5: 3a396b3a53a2a4ef428bc8b1e217b0e5
SHA1: 296e1dfeb797749501e313fe7901081c583c45e6
SHA256: b597d45da19ca3c8f6349e1b3323a181b8b9876e205a4d4eb6de7a643e78fe03
SSDeep: 1536:5W2MDO4Slx9+WExdJ98rkhE05yYaG4c7im/2VLAopWAmrn:BMGxs/J+KE05yZ3vm/KLAkW5r 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7j5Ta.bmp.BlackRouter 95.42 KB MD5: 0528ef279f183ca06b9d3d7150009522
SHA1: b45363a35290aeb31b747ccb4eaac3f4bec93cee
SHA256: 02641992a57dd0da0ba7e7a1eecc3b5ac9078523dc2b2dfc4221aaff4d4bc98e
SSDeep: 1536:nqMcGLeP1ZG6lcBwjxofuOXK6Wp28b7EiMD3rcqNLAZHkMtqZagm9Rf3:nVLyPvG6I4cuOa6W3MDrcq10dgpqt 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\vMJGXm9HunV zSg.xlsx.BlackRouter 98.78 KB MD5: 01cfac9ac82a34f4754c810e2a77f156
SHA1: 7bd0e8cd38be69354a11d8c8ac7aaef685c3d821
SHA256: 806f235e214274aab5b02b79589df83ec899ad85e59445807487e7ec4a65b65c
SSDeep: 3072:uxOLitjXhEkzPTr+SITb+HIO7R9yeutfky:uout7hVzPT1zmeutcy 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fLMMPhg-_u7LnAV.avi.BlackRouter 45.97 KB MD5: 925dfb3472d4799ad9045da225c48f00
SHA1: 24281847877a7ba61f2138d5d00960bf68affd6d
SHA256: f9d487a0156a78a3b1c2ed9c346199075f3544a59eb9f80cedc1aa8d586dc8c2
SSDeep: 768:kDkyWSsaEiwB0ROZJjLG+eO5MOWrHHv5oL3GMC8078kJGwKTYjrohgWXTB/9ZT0o:+k4sFiwMOZJjLG+hvWrHHv6LWM9wpHb+ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\A98EDZHct GyJbhsO.mkv.BlackRouter 65.73 KB MD5: 169dc47c747b322ccb689e2849e71ade
SHA1: d166066b4a1bc0aba07c28558944097476bda967
SHA256: 6fb33f1aafedce5be0d5c52295336ba480a0afc6235f04d01cb6fb1aa8d1e036
SSDeep: 1536:2YayLwcbnRgl2G/CXjeWlFyLwzNviGnEsvbYO4uoooaF:rjnCl2LXjPFy4LnBjeuoooaF 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_sender.js.BlackRouter 51.53 KB MD5: a42d29a9e45106e9b6eab16aa49d7e94
SHA1: 92ad8a5a5c28c0c75848b8d454c00bec8defbe31
SHA256: a2d3d3d20b760f1b6fd66edcd88fa27894b9196087aa4ecf774281cde41e7629
SSDeep: 768:/sIDxtBIROXgoak581Si0OFa2KheR5C39IarjqPWVlZFwarILd+zgTCb9:/drqROsk58AXZeR5Tart3eaUJ+QCb9 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\jS3gz.mp3.BlackRouter 72.83 KB MD5: 28bca2a8aa9830247bcfdd3cfc845f7f
SHA1: f33b874d28c33e91aa35ed9f08394ef1eb573f64
SHA256: 187db1ab5200d9fb019a1cbb2eb6458401361c84fcb27c34507f3cb481bf1ee7
SSDeep: 1536:nqQkTcSIoc2Lg3gKJPzOsLw8nCzqxBz+K8DpgENSIFRWiy6sVlpZDFo3gQ1:qQks2gwQbZnC2xBzQD7NS88t60DS1 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\E8N_b.swf.BlackRouter 7.61 KB MD5: 07b9bdd00607b270fadcf28a8b1f7046
SHA1: 8e8915b70e3706638c742a175ee61babbc00c921
SHA256: 2203bc989604b0379a8c050ea752520f07252f2e574e67afdbb0b8f5ee5bb796
SSDeep: 192:f9roPsEG8jAhma2kxklYmxwFr7t2jjIl7Hi6pNeVy:lfqjom7VlYmxwuol7Hi+Nec 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\5rH2Hzzr2qp9E4VvLG47.pdf.BlackRouter 76.19 KB MD5: 921c8c92879f4fe21721fadb7832907d
SHA1: 476f811a8b715801edd5e0d0797fa87190da74f7
SHA256: 0a5af9b541470d6063c975a66a73279e93c8cd7dfff73cba165460da5a3aa9f9
SSDeep: 1536:3lVYils+IR3BFojhlq5nz2TdWZPueTc0RUO+wq2xb:3lV6vRxW6l2TdWZPx1qk 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap_unsigned.manifest.BlackRouter 1.36 KB MD5: c48182b9ecdb459828a7c17c51542c15
SHA1: dba299e8f41c0631b05d6e7a43e52f23a6027925
SHA256: ba59842878bffc6384dd6b171ec718e05366e1edeedd6f6d61524559817de972
SSDeep: 24:ItCvDNsU6BcHDK4jZF5A5QeaAtIf23QszC5xeN5TPnNL+PwgsxWtphpJWg9xWL:I6Du/Bcvjf5AeeBtP3QszCzcTPN+PAxn 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_maximize.png.BlackRouter 0.17 KB MD5: 54d8aa476e1920a39049a6f677d3e7e9
SHA1: 89571d6da831b85b85c5653db25f24c4e5ed26fe
SHA256: 134dbc07ae76d91dbcf088afb4e685d5d461388b18ef99e3ff6b58e1a07402d7
SSDeep: 3:G5UCaoRel9IpVBQjHsm3WGNmHFoZR5UmazwF+H/zCvhdYm3e1dP6bGa60pH+poaN:G/VeliI3u8zUpcE8tOXPva60p+dF 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_cast_streaming.js.BlackRouter 31.06 KB MD5: 39d0fb3a3f1968d7506b0775bff6c9df
SHA1: 095047729b6889d14b18cfdac7f7154266567eff
SHA256: a376face18a5bcf027cad9e1c7f422ab436704a18513164269b018391f14c58c
SSDeep: 768:IEpLlGr7sbY1nTgozqCfAJ555yfyGnXc639L62m:XGr7scU555y3nXc696F 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.BlackRouter 11.92 KB MD5: 2039836d38bbae76033289aa973a6c4c
SHA1: 983de1c152eef4c06e0338854ca2fc5745510db1
SHA256: b2aaf2e87ee04d93508d7069a0a23b563d93b865e91fa6ef5ce8f6c0d3841acb
SSDeep: 192:JYsQeNDulT88Nqtl1t8EtTztO32vm1B4ftftacV1QOKzExviem1FipPqeVOwrBoB:JQewbqEEtTAGystf4c7oExvigceVDlgp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\65UQRJsfH0n-ljBMHx5X.gif.BlackRouter 92.77 KB MD5: 69b0b533e8fff25a08fe66a507925116
SHA1: d9ee49f7ebe5c7a0e4803e276021131b98154110
SHA256: f7b7137c4f6648caddd3488a58c60439dbec22af7b738060b5df09f53b08efdb
SSDeep: 1536:h1vIEAFM5D6VXlrl8GYWYdqcG2M657VzDMYJD7JGGRgi5lsAIzescsqLmFKVGGxY:h1kvVVrl8VqsHRVzBt7gGRgAls7zesc+ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\MTT6uLi.ods.BlackRouter 66.09 KB MD5: adf6c7d871c18ea449c2f5f7e554660d
SHA1: 1ec6d647489752894e770c04654aeb18a896852a
SHA256: fdb601342365f86e16396ca1940ae4f4a6a7ed5e51bc22abd481c381efe5f643
SSDeep: 1536:Zw+27v2HPafEKXyH/MqzstleyH8toUzBbQp:527KyYEqzsVctosqp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\index.html.BlackRouter 2.05 KB MD5: 255e7225e08c8d716bb574553739485c
SHA1: a458ea6d738544cea0cf6391513d46491e39b5ca
SHA256: 7f10129902588129876503356a5265bed94258c59714986ec4f04fb843c42155
SSDeep: 48:9ErSwzUCbnKTiBv+4gWnKj07NAG7lmY3CctuaEXZuh4HEsgZCa:9ENzUKK+Z+qKABAGxm+TEJu5Ma 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0ePb.wav.BlackRouter 35.47 KB MD5: b881406647a7ecb4df150562ede0b58f
SHA1: 4dff47f20e5172ab2f84cb37a15b511c49912d4d
SHA256: 6b41bd35e50d74307ad4d432ff2c15dec9457ba31a568132b09c7287f6745395
SSDeep: 768:PI2r6D9KaiUUKPh7XdkzmmpcTgwnLFRG+UIIhruqqpHG:PIdK2UKPVdNmpcTgRRIIGpG 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\K0UTh6aEmFBRdiy0d.mp4.BlackRouter 26.62 KB MD5: 93500544cc9c6c90d2785da613267f7e
SHA1: 8221bd50bb121db83094232079911b2a392f5d02
SHA256: 17dedfa208d98beba53cd66a2b8f0f34b5c50cbb765273586c0fdeeeb2da19bc
SSDeep: 768:OY2U/6LrhbQSrl3i4SfiW53S41nEPA/jgGK:sTQSrNSKW5CCrm 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\7fJObA6NQ050pXt2IM9.rtf.BlackRouter 28.97 KB MD5: 99fd6ef00ad4722971aa96165cc5f79c
SHA1: 0c8c407b0e51b197f1a6be118bff6eb3e7e78af1
SHA256: 7d668d9ae01ea0e92c9dc175c52d17f7b709980baa7500a84aa5d32032acbe23
SSDeep: 768:XkHQb0ujmbuSW/aWTeRF6ph7v87Gs/0rWc4RkVdyXU:mvAef6zj8N0Lz4U 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CxmnXgEcKTBMICx.jpg.BlackRouter 22.06 KB MD5: 8b701306d74d7277129afd8af6463cc7
SHA1: 7cbbea16cc0a6216647af6da73f12a4f494b4b46
SHA256: 34f4ded7c7ab702c5f792733e49c780e6f12d08534441002670a538b67f50aa9
SSDeep: 384:xK9HOKUP34S1heyfNmS9WeKJIyGqGAsDhO12aFPYmhGo579mAO9sluC3iwLpJ5g0:xK9utoS1Tb94m3TDhO12ahYmhGo5RmDa 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_route_details.html.BlackRouter 68.48 KB MD5: 644f273d492afb93dc964c5516230b68
SHA1: 1d4f6a931240e0476bf0554e9bd6583c17578dca
SHA256: 5f2b180420b63780ef227a5372ebd97a7b25842befb10ac64c2f65e706215129
SSDeep: 1536:5nAN64E4i+fpU60cmYj4VfsgIc17oaFQSwqUY4AzyML:CNJ7KVEgIcRoqdHyML 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_hangouts.js.BlackRouter 485.20 KB MD5: 2ff833eb87a9d8cba8ce87467a8872d4
SHA1: b9bdfbe8023ea7e3b9444ab3ab78e010701eccc1
SHA256: d65c2524aa570b609fb725809602b3deb7e1a37b92f16af929a74faa2c68bd64
SSDeep: 12288:pfSKiPJlgwh9/A9/Mczv4mDrF8iboGnLHZJSHQKhwR:teY93zv4mDemhLHZJS7ho 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\E-fn.png.BlackRouter 13.89 KB MD5: 167d56a4dc76b64bc83fc66a184f9214
SHA1: f11d8328c53d4481fff865848da247fc7209e8f1
SHA256: 12b21369fb8b494f6a8e5bfa1116c0230797b5d0e17abb7992acb7c17596f84b
SSDeep: 192:2UYae+htrHxEeQteDuo8WIpwqn7bIMrBACTRTZAINhix4dvSb4AhCawU3EzAxwfV:2UYajD2j05/mBXJaINhixKvRAhC5b6Q1 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\flapper.gif.BlackRouter 68.72 KB MD5: 77f2073926790729ae0ec2bad359e227
SHA1: 9d2b831797ff15fbd9519fa769efdbf8100197b0
SHA256: d8d07fce15c7298f7a55cbad29d3ba85024cf4c70e42c0c9951a5c4181df9a7e
SSDeep: 1536:wGX7RYYYIVx5hKWNkGU3T+Gy/o3ErEcnBHOA9W:wmHkGU3L0rEcnI 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\common.js.BlackRouter 50.12 KB MD5: f696585c47ee1bf8ab49ffe9728dda76
SHA1: 7baac462aab0cdee42c160aa731b30f39a15d0ff
SHA256: 6213b54ea2f6fdb4251db98e9a9779b31f792cb6a1d96ab1a5d9fef34a553fe5
SSDeep: 768:rK5yzah1EwZYtjfHiiSG6fAT1s8PThq6ChqbIp9+hoQo5GRE4TdnFtmUko1gHkqx:ruh6m4rEfAT13borAdnSU6kqllCQSC 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uoaQuh_4Hf-xj1.wav.BlackRouter 27.34 KB MD5: 08e4222e0886c3bb2b459d4f36a12e5b
SHA1: 62ada1934fbc5ef6863852c98eb5813b12e2d068
SHA256: 95456102f00fb42c054cec67aeabc94f09e52171c0796cef1266fcb50a361181
SSDeep: 768:Nbk24jHtCJIgVGzrM8JcSpzMvAZIoZQQl/Up3veD:y2yHtCJvGndJca9WkQpW 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\devices.html.BlackRouter 0.06 KB MD5: cde7f4d6a2473167f09afa2ce184ed39
SHA1: 494a7812d6d2ffd6f5a1bf978a8c8ec822223200
SHA256: 3edd314fbb5e0a5624df78cf97da1081e78ae5114534d8c69cf4388fc66997e6
SSDeep: 3:Mpll2QcNU1x0ifMTEH/fIuCNn:MLl2ryftH3vCN 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\chromecast_logo_grey.png.BlackRouter 6.98 KB MD5: 1da3fadff63dbdfe631636b1ab210e0a
SHA1: b906ff4965c4771f4bfc022b8056dcf93a70a9e8
SHA256: 8ffc9ce5a559733015f19bc04c05c57650dea344cbf5437300d00db1a424f0c8
SSDeep: 192:HihYh1643Z9HU0WYFR9UaSUuXU/eW0MqdaawKU:HN/643jBFTUaS0/KMywKU 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CjnDwr2.mp3.BlackRouter 8.23 KB MD5: bd6caae23d71f350becfba089d27fd76
SHA1: 6c44369903daed5a41ae6c114383aa660d07d350
SHA256: 0113cc84b2ce9e5f1aba88e3e9e240a18561d1ae6c41fc671ff7ed06f4385b5b
SSDeep: 192:xiUkzHop5s8Y9lp2SlP+CverHUQEL6Dz8u3G/llCwh:8UkDtrp2Q+Cv6EL6DzZ3G//C2 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\l-oDHaOMc-pwahV m.mp4.BlackRouter 84.95 KB MD5: b39c942294a7d926e26e37e8da076487
SHA1: 898d8805140e13c77c84bf48487c2a4fb688aa15
SHA256: fd9eda03c32bbeccc84f7d1038c87361239de504ca5b0ca71e5c50e92c8ad0dd
SSDeep: 1536:ePlMO0KmmJjYNBTS2YXWhKXma2zH9g27PUtMxO09xyS9/nwXMfp:2mmJMTS2Y6KXmDzH93U+blvw4 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\llZwJrJbI.swf.BlackRouter 43.83 KB MD5: 5f536d473cf450fe41d11b77566a1382
SHA1: 0dafec91881f1933fb520cb4e3355e7f44d856aa
SHA256: e4e98db6f395104cbbde958fc20611ba7407de0264d6041d8a9f76faa6d1e121
SSDeep: 768:2E2d2H1nQZlfyt1Wiq8XoRRs04pmcp2D7IcWg2/BHMk6CN6JLvQl+jEHcjc:210VQZwt418XoRK04pmq2DscWg2/BHfz 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\KO3STzTZ_gO34A8AgZ.wav.BlackRouter 11.95 KB MD5: 628097d98d02fcc119562eb9801dbb08
SHA1: 9d6697d4521915b7b930491fdfeb8b9f356ed33a
SHA256: 6c15dcd506bd89a9ee8565d8125897f937f68cbfc7763d6f6c8b232f95e7ec3b
SSDeep: 192:pmHhDPLQ/9f0JbovG5zT7anDVxeb6Bc+eaKxMpLpUXD3w0zJ2uj+1BziwfWeKrlC:ihDPLQEoszT2nxx26BcgFQXD3w0t/jMD 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9m_tAUVGaKw61h5LC.mkv.BlackRouter 71.58 KB MD5: e613af03fa3442d15d4862293b2d0f64
SHA1: c152b76deab97f5b3f6f23ae1b741cc3f1f05597
SHA256: e4992ef0cf2e7f2ecb7689e75e52a39e27e372a855578392e57cc200ecb8df9f
SSDeep: 1536:/Su7HJznMoX8GOIvAPqFF1EVEBhiVnZ/wUkaxa4UepR00JPLaLo:6sHOI9EVKhun6vYxpRzx6o 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wf3JJ.docx.BlackRouter 84.42 KB MD5: ca20bf6975a691188eebb46a2b5ab3ad
SHA1: f84a454ea2f71948e43e9459c253647df853eb48
SHA256: 6f36f0249dc3174f53139fce9eb4b78552f26c61a36dee1ff767063c3ffd07a7
SSDeep: 1536:fhSaRCkCMGtL4V5oKo+ycDnVadDgbP7TLpMhYpPl0jvU38AC:fwaRCgGtIo8DnVQDOTLpMoUO8f 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_common.js.BlackRouter 171.48 KB MD5: 7fcabc273dd4ee790598d09bf46ce067
SHA1: e43363e21ab0c256152465b1b657a89ff6af729b
SHA256: 3a333caa39204ef18ff4a510df86a0979feb77962fcd32675a8a49df1750041a
SSDeep: 3072:WiLWoK9MwJYMPEOUV9iBZhYf8pCoHiFGblsNjTA7Acg5ghzlBSBu/HlT40Pm4hEv:Wp5jYQTUV9UYfoCaiFomJs7Cad2BmtFG 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\CcMvDeT9Jgh_AOb4ngG.odt.BlackRouter 42.23 KB MD5: e1f02d3aaf0a1c6e975c7fc3e05fe17d
SHA1: fdd4a4c50a476e0a6cae820b69b73f80a3485dd0
SHA256: 113859ab182c9d42093ffa487a29c9c7a3e283a62fc247afb80cdba4965046e0
SSDeep: 768:49Pblkky/AkJSCjcgRqiSEdUACLA00ojdIIjh2eEyw+Qp4k/UJD7jTlC:49Pzy4m6ZS+d5Q5V9yk8JbTQ 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\kJpR_sdA.xls.BlackRouter 27.33 KB MD5: f129a890115854e6537054d8b41f7790
SHA1: 25edb20852c45a07f2d78efc49775ec8cb377d71
SHA256: cf981d572f047f52f482337e3f0b70d36c02b0b1c1a294f2b6e94570e562593f
SSDeep: 384:6qVoYcwYB7UckZR8+ibpM5idLRkJJqRS98yNaO7MvbZh9uG7Hb8f5wgCcWsjfjYe:6ooYcwgzkZ+bpzLRkJJhSCeaWEwDsTjR 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\FQv6HJ.flv.BlackRouter 2.59 KB MD5: 6075e2dc5da23b4c92f048fdf72263a2
SHA1: 05a8cf0ff3a1fbdfbe937bfe350d13d29f452193
SHA256: bfb50807a91a593ae5673e14bc2b550df9282159c74d48b1e57aed1bf0914eb7
SSDeep: 48:JEu7PBo+Va0HbLVUtUS0emvycHskwmHU6eDrk/RwjBMCsmjl/Mq3KMTO9YZ8:J/W+0WlUm/JyGJwmHU7D0QdsOMq3KWOh 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\40i-SOEeWq5j 9nu.mkv.BlackRouter 66.09 KB MD5: 40612d84333298f4efb668323e805c98
SHA1: bd772e8443e0f6720d0341ee4973f76436a31177
SHA256: e931062025426d4504333ccffb0d6c5e02cd0a69822cd1d985061f60b8e4a416
SSDeep: 1536:UR7WB7lwSLCvXhaP0DrrD6EwTSoploMi6CQTT:UCzSXc8DrdwSopJCQf 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\b-Y6b7u.mp3.BlackRouter 90.72 KB MD5: 6dda58532638183b5c00cd385b840825
SHA1: 9b66e12d8624165e2a99685300485c3d2eea2fa6
SHA256: cf895560b2c5b6f363dbe50ae4d1ca45fef2442149426ce1ec2a2018637a822b
SSDeep: 1536:dgokwAsMU1w792xtjzP2WigQEcAt+JAnUiG0tzO/mGGBteKQ99Ndq6CThfAtubc6:MvmOWUpj6UinznGKIKixq/hfwkcqV5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\lZU_bvYu FIQ15J8h.jpg.BlackRouter 63.89 KB MD5: 40452324b15cb1a51c2f595154ece35a
SHA1: b7ab9e08ecd2ace83020b00430c7544e3088ca3c
SHA256: 88486a4a1276b69dd6e073e6462f528c0248eca3a67949b97c2d3f2169e8830d
SSDeep: 1536:eRkLYpya5SIsL8NZC+RWXGKwiNYGpuu8LHHvAU22pz6EUv9:EsYpya5SdcRyYPu8bH4T2pz6r 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav.BlackRouter 2.52 KB MD5: 36564d8a3120be3aa1e2d85e435061dc
SHA1: e81d0c92f1857fab7a62059a3408baedda5ae521
SHA256: 614cdbeb8ad130befa2c04f0d30a5849be32733d15d366e2b5f19c910d619b9b
SSDeep: 48:pnS4hTJ3+8Rl3r1aJtY0iKrgD2ghgWjw2syr8Q2/rErPjxcR//XGK3Yn8L:pFCA1rOFiBhC28j/rErP9cd2KA8L 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\_ZlzGl.rtf.BlackRouter 14.62 KB MD5: c2a59928bf4d83fc1863d99c96a67401
SHA1: 8eec6bf679129c7338a1d608139bc25e37638eb0
SHA256: 4a1dbff789873e026f8c7b1f1f36b5ad6986d0c98ffb4c91911ea91351d3b8be
SSDeep: 384:9v4Xf3CmmP2eMkBSQ836pmqXkj+vUj/4RrF41ap5RtU:1kEP2hk4R+BUCvUjwF+4q 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\E4lJw4wQdA.odt.BlackRouter 24.89 KB MD5: 2c164810bc2220f855fa4f6259015171
SHA1: cb92d2a43040339ec62018aaf63290ea911ea89a
SHA256: 77947bb26840393725476d04a0367d6f253e76289d7dca61108cee48ddd84b29
SSDeep: 768:1frW1vIx+c9BNPwVnIo4WbSMM7wsLuroUEigb0U5NnBGC:1TW1vIxzRwVnIgS/Burobiy0UvYC 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\w junN3Fxzof3.png.BlackRouter 75.09 KB MD5: 80dd99c469a18b1f5c6f1baf2d548b79
SHA1: 3a4423b06ef128e1a6e9ff6d46d8cc3723d52f6f
SHA256: c9bb7457cfb539d01ae9920d9809a1497b71b31f1deaea9a250e55c99fcfe0b0
SSDeep: 1536:q2/TFZsjer+lDzFWn8AuYZDXBzc5RT2nHB+IEqcOZ+OgKCq6N:EcIDmvDxgnT2H8ILcNHKCT 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\Czw3 eKG3I.mp4.BlackRouter 42.06 KB MD5: 98e1bf4eec6214fbdc56fd5c767108c0
SHA1: e1052c3d109e0f84f53081e1968e60c56104330f
SHA256: 06b8d90c2bb7b2c5f1c858f59e62d9f9101e6be6a7152ba46a5647a59d2699b5
SSDeep: 768:a68ycWmc/D/DsRarJKhwNkhArguWOt7FK7JVqrZYjYh/kTQ:Wy4cr/DAwk6sy0OrZwUl 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nFLeqCy.png.BlackRouter 20.58 KB MD5: cb4a6c30a229e48e260028693296ffcf
SHA1: dedcb9e7fa29a139096ba92e8883ae23cf9d7255
SHA256: 5ad9d36c2e350499313d5a922b89d614b6c43f915a292541d6a5bbfb956a5948
SSDeep: 384:BVe2/Q60/mBGnEexFLFhOQLuhlMYpiYyVnoO7Qpj961QIi/aSg/sYKY:SgQ6HBGEexjuhlZFj961f3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\page_embed_script.js.BlackRouter 0.23 KB MD5: 761173c6144e1384182de4dd6deedd74
SHA1: 9ec87c0197b0a1c3df8554e35e605b3c5bbd6c60
SHA256: e66a1a5fa710b56930a97088edeeca9eaa3f3d724ae8a88beeb126085d51a4ed
SSDeep: 6:7On+wlCqqLNvYu1uQsBcrP88a54nguw3veSSk3:7OhlSNB1uvmK4ng/3DP 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\mtM9260pBVgN ALlz6n.pps.BlackRouter 93.20 KB MD5: 23950696a02e74f3fbe00c59f7db317f
SHA1: 3676d7803484645bdd7606081560ebb9c3a86c02
SHA256: 4ffc722a76c46ea2526938a8c12840bf5b72db3f77e34500bdfd0579862bb0b7
SSDeep: 1536:d82VBeO/PlqunI0+ENbhkrqwBSKYVm7dRI8AV08pj7VnyhgDq6M6wxSWl1XhYl3r:xeOdIzENbhkmlmLzv8ptyMqfdp1XGNBp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Z2uO4GzD1H.mp3.BlackRouter 39.47 KB MD5: 02a944a03cb37cd727e9f906743a9765
SHA1: a1bfe227ca0567092b5cfb4aaa66db2e9eaa9e17
SHA256: a991b98a07f417fc2884a6bfb4ae0eb366eb44452fd202109a420132876081ea
SSDeep: 768:l1Yyk79kqyP6jwJIBaOGbbqrVyBmKp2yLkpSdUbHIcCaCsS/mcxuuxk7hHpU+Uq+:lLm9kXg7/rWlp24soyfCaE/Rxuuxk9Ho 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\contentscript_bin_prod.js.BlackRouter 4.27 KB MD5: ffb2aea1c3c2544d75f06aa7dde4c25c
SHA1: 555ebffa6bb247ff9a64d26a04547e7521c37ebd
SHA256: 0875bcbe4a52cd3f4ee34cfe85088c47948d3a5300b3ee8664317d6f35947ba5
SSDeep: 96:V+YW3AmKWGxB+aY14Q84Ps4PLexiKwvQ8FuTeS03F6qeht0JXD:V+7dKCd/8UlT2iKiLaeS03kq9 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\manifests\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.BlackRouter 11.56 KB MD5: dbae77e01426d2fabaa4bc09976d06a1
SHA1: 464af53d35ccdc80135ef548c1652019fe5a071f
SHA256: 7925223e7de35d7082ceb07718e2bf779257583e0bca915b5e6342fe0f8385f0
SSDeep: 192:h5RM2ZnTFVzIESi4bccTFVrAeXemgExE3Og+x1M8TP+EeHKOS4DTU/DI:PRnZnTFVzolTFVrkmgUE3b+x+8TP+EcF 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app.js.BlackRouter 136.47 KB MD5: fe1d0a085b91350ffd858d4ececcccda
SHA1: 691540973f23e3162c8bd27a6e6e23c00540b028
SHA256: 95b9fcf53f03dcefe9c33316a76e1f956583f75bbc3f71346f845d091c826cc0
SSDeep: 3072:gnnnV2YgZEWifCZbLgFYN+yItduYw07sRX451P5FflpbmiFnqHe0sRLITePzOFr:wXgZ2WcFQU7w07s65ptJq+nRLMWOFr 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\feedback_script.js.BlackRouter 10.80 KB MD5: a726282981ab9b682fa027ad00048669
SHA1: a65ad12170a332f1a7dd39547233da277e56ce8c
SHA256: 0f66d35d811f599700091d07792782c4284db38bb8ed7318d1cc162a11c4f5fc
SSDeep: 192:qFcDJx5ZhFtzVdz0ANE8mV02T5pQD6MScoNVE0Azwei1F8txXKMDFo1sp:qFO5ZhvVdz0AQXQvE40Mrrx6M61sp 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\2ocAepe x1O.bmp.BlackRouter 17.58 KB MD5: fd48ae577a6ef1ca8fb144c2cdb729cc
SHA1: 28b1576cbf7e4f0527eae9b0889478fa867a5427
SHA256: 650132396e3788101eee0a427318d99f2c3079f982a81fbe7e7e60ac099a8fb9
SSDeep: 384:SmLdbS9UEZnXDRFzHEwHKdXUwA+wJuHD5TqlI9Om:SmLdG9nzXqxUwtwJllIEm 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OYSQBPclZUW7U.xlsx.BlackRouter 77.20 KB MD5: 62184679ba7e758a58554405b6208215
SHA1: 010a26d86ce6d647ba1867e4932531a3aded5aa3
SHA256: e8dfe13adb20da3f578fc4086801b9c0b8118c599c112bdf47790a21e4926ab7
SSDeep: 1536:ZyoUSvGofztyCXv7ly39C74DijeU/ulGqx96HeqQF033G7CV6KyjAukN9v1:/Gz+jly393+S16Z60nTDN9v1 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button.png.BlackRouter 0.17 KB MD5: 1b8dde012f082c7b05f0138cf84ca47f
SHA1: 6df4b8995e0fc300032a52edf374664a10b208bd
SHA256: cb87636c61b0c4a9748ce6b16322c97e22b79eb6e9520054a1519fea39d15162
SSDeep: 3:G5UCaoRel9IpVBQjHsm3WGNmHllTafZQiFiJwcRbkYeiW8sgVGTlcwA2AKr3qQzZ:G/VeliI3uTN+kcCnjA3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Office\ONetConfig\350db95df4cbd94b2a1c300510e12e11.sig.BlackRouter 0.14 KB MD5: 818245a70464882d7829ef725755e9ee
SHA1: ca69fefa94eecfc55451744dfc1998a78267420a
SHA256: 74139f180e77ce5743de277fe27e66b2c4911e15152ec98f9bb62eb486471a27
SSDeep: 3:Ne5FkVBJOPSgfhPyV2wJk7X0Mj/DPxuCm44h5sAZsSXnn:cqlg5hwJk7XVjIC3s5sa3 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\6IoZr8UtIzewHwC48.jpg.BlackRouter 17.69 KB MD5: 529c2c47e05323f18c30f3f8c669856c
SHA1: 3124758d807fd32d40f8256e522804acf40b788e
SHA256: e23134006fb250d38a6e739d57c812a9efb7d4e1e310c6bcfb29295ed7bcab73
SSDeep: 384:lb2SJP2zspHyJoAz22yZbfzdcR6Y1PptEx8/U+8+XTKIDzrCrY:lbzP2IyT2TDmRgyMGXTKOh 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Q7Lgs1z_owxp9H.pptx.BlackRouter 19.11 KB MD5: ff1616cc060f1e92d7ec9b932bae3939
SHA1: ed36dae6a692f2036e848dc38999e985764f2151
SHA256: ef2453b0e7ebab2a1eb7f5f72183d7a92140a5937b63537e12a91cbc0fe29ee0
SSDeep: 384:jHTtpeu2BGkIzte9oJLq3PmaEWzHzCmd7SCFfCwota9Hbns8cnfm/O:jh0t4IoJ+/JVzHz77S8Cwotubns1n+/O 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\NUph7-HYL6 UaLZv.jpg.BlackRouter 56.92 KB MD5: c6dad6164fa0134f6f8ddec3749e247d
SHA1: 0a0411603ace0723b544889bec0e22f242a55426
SHA256: 70c14c9ebe3e2ad1e49ee4ecd6de6572e6ac70fe12b76eddbbce7b36c65762e8
SSDeep: 1536:kv8t47QRk7SL8RRDBlvIKUEnRcYpd54qETt+p5P84ms2gxQ1o:3cW/L8RRtpUUrFIIHpms2UQ1o 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_route_details.js.BlackRouter 232.59 KB MD5: d7f3726f68f0f95622fb5233f48c464e
SHA1: 4a1959a20e05c85a819f5b821243b819537efcfc
SHA256: e37c810718ed04951801529438c42f06e1ca5ff2b30fb94a11ab98384d732809
SSDeep: 6144:8O+anhaVpAvSlcjxnxGRdinYdTSm6cJUz3ybCSbTjIiBNXDt:8SnLjxxCinYdTSm6cmMCwIwXDt 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\angular.js.BlackRouter 560.19 KB MD5: 54045e9b0fe200c748269eeeb5e0116c
SHA1: afc251b53853713b0c1252e115b8cb3062b16c07
SHA256: c6f223a32847bdd1bb829d2804ca8abdc771efc53e59a9e58bb5c0d435358dd4
SSDeep: 12288:nTAjA1rpPy2b2/IbacnP2ASEokm62tpIo2KsV31:nTAjA72gug2ASEo0qsV31 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MIETsPYhZC8.mp3.BlackRouter 48.61 KB MD5: f74f0b2e147c083916b1320bcd63cbf5
SHA1: 7483a80b327409f8d3cfba2f61ef0d7a2847f448
SHA256: e8380d8c1884d4e391ce57a6f406cda4ca88b0b37ae605af70ec38cc5f717746
SSDeep: 1536:eRv2FN/fsnl66jtTdqiWMLRSTbjBVnnSV2i3:SgFMY6nqilSTbTS0s 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\feedback.html.BlackRouter 14.17 KB MD5: 6f744a26c352fe2534108e6c230acd80
SHA1: 3ec73fe7132439362ec9c4fa541d51c566cb5462
SHA256: 094bf74c0c2277df235fefff182b77207fe4f327ccadba5afc7a7c3c37eec350
SSDeep: 384:m0QdWbfhBidoRelQjKFsQPjkbRq7lo9sQ/zbdQswXG:QcbJ4dkGpjkb6lo9FdQFG 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico.BlackRouter 172.73 KB MD5: 053fe5954f3754fa28b0c7cb45a99b91
SHA1: 4577f5a3e0d43c243490b1ac4a1e8d87566418eb
SHA256: 4ab4e0373836e4bb3560b33315281a219a606738063f8b5786549548a16181d4
SSDeep: 3072:Vykwg6qK1iu9LW5EXh55jcht7DdPnb0/i5mgpVnEks76TGa/C8H1aWb:n6L1iupi4jj8t7DHoN6TGa9VZb 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\Lv8NKuLBK.odp.BlackRouter 41.75 KB MD5: 5daeb824595d14d2dc67d966bea26693
SHA1: 49eda3486d604c125136b9708a6ac45c57a6029b
SHA256: dc397a9a73e646b6cee6d1a0e0485d7dc2128253f811aefaca9e65689e2fadc9
SSDeep: 768:QwZKbgYJnFZXco4DrUdnXzriwMHjGP7xRsyxx4o4NUiM660boBDxL4:QwZKbrPXc6Fzqj27Zxx4hE0 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.BlackRouter 265.02 KB MD5: 80384c64603107c9115ee418905519bb
SHA1: 1f35c28c60d85514bf2588fe0a15c3f79f8ef322
SHA256: 685442229dc88adf2a1df64ec2f3b0c7fe3dde522ddb8e462bd481154fc04c92
SSDeep: 1536:dAEX1QdZmjVP7P2PY3QBc/mwc1RcUGyoBfYtsU:dAEXGdZm5tm3RcgQQuU 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\html\craw_window.html.BlackRouter 0.80 KB MD5: c38f8de4cb2476191f846985dd8cbaf8
SHA1: 949336abcdc93fe887c97de15ad773561601c2d2
SHA256: 398fbd953a1f981dbb0279d10554f5254a05642f740e142073e92d02132fa70e
SSDeep: 24:sxHZcyjLpPo5cgmkPGM2vQzay4xnyY3Tc:m5D2OgmkeM25y4E 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\_eFIyEVqkUSz2ZQewo3.bmp.BlackRouter 32.03 KB MD5: 8a59b3ec6bb5e75bf423f5ff0f28bd06
SHA1: d38e4a9d4a2f5db353b0f2ea3f339ce767ffc2d3
SHA256: 8b671146f7139b96ace1c0d1ab63815fe3f32db28000430c532fae714b7b28ec
SSDeep: 768:3JNAkCvz5LkDKj7KMJymSQvlBkQuhzQ1ujO23nQfC9oDISI9fv:skW1LBjWESQNq/ZQ1uycQqO/IZv 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\ygnUCsv.bmp.BlackRouter 73.91 KB MD5: 83e095ab3c8157448288aecbb832fea6
SHA1: 78abc99ba9c30942907fa62bb763362cc567f9cf
SHA256: 2d49db9f9d559dfb0df08bf6dfbef2909c41ae32c686e49d3cce69cdd0d95a23
SSDeep: 1536:DiDnVmkYZnfHHde51JX9JUb09dIHGq+NQZJqfk2t6D3JPfSpE:ebVmkYx45/9dIH1+Nx/ojJSy 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\gB_4Rb2oJ.swf.BlackRouter 3.58 KB MD5: ebe10c12df6e6dd1f79d8d25982557ae
SHA1: c60fe8f67623d929a1ff8efbfeb9334a6927f7b5
SHA256: 67fcadc5d34682b71c73a03a466509c3a8001a2818de635ee74bef7f0858135f
SSDeep: 96:NDU2zpBnbO6ZdUMBFnG9gzvCZtTSz9LeRFZrn/:vz7dUiFG9gzvCzWz5SFx 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DopI6Sgjvx1g.bmp.BlackRouter 78.17 KB MD5: ba76f3f019717592441d9e9a760df82a
SHA1: dff67e0ea5c350665b0f58501e3ed154ba193b24
SHA256: 42153b57143cdeb8b1085a73471e0ee9cda53a3f12dd894f066175cb32b781fc
SSDeep: 1536:iNOkbrpClzIWNs7CuMVjtPojgY9ujGDmD5gI93G7PYxCka/ZU+mY+ZmBuao1Eg:irCzVUCFVBo19SDqIa2CAw+ZmBs1Eg 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico.BlackRouter 163.50 KB MD5: a50a125a1c1d40bd0713fd471df394af
SHA1: c98b4c8c0d85432baf5499fb7fdbfd0a771216cd
SHA256: 237f271e01050e8939d95fad20a7bd2635b1786f925c2550b8d5a85166c2daf4
SSDeep: 1536:VtCqpvE+uglTm3lAffePLsOrGS86s7DVSKBHzXQa8m:VtC+E+uglTrfWPwOrGSXUDVHHJ8m 		False
...
Modified Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 7.25 KB MD5: c3d3039801d5379b9ae0a1bf00eb797e
SHA1: 3172cb56a0c56a114dc02dfeb1ae87c55a9f208e
SHA256: 11f518db44fb71b6ce96e7a9b4f2b70f2b0510c4db9a050e0741030944e1f45e
SSDeep: 192:P5EM9wAF21T7FXEnEr8wnyDcqODXO1iaW:POi21T7pHYFA1L 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\local\gdipfontcachev1.dat 106.27 KB MD5: 92e128dcb152d05f07faf5da64bd1c91
SHA1: 2174814ca563fc2b9679fffbf1b40bdf3ac9abec
SHA256: 11437a99f5f9c0a6df09c64abc8828ad3ecd8cf4fa601340ded86b8945edff43
SSDeep: 768:i8HrbdvVyZHgTl7ho5sZWN/Ys9byFRQ+AwqGuGyZoVyOF7rrlqTIyMnm:/pVyZHgTl7h6tKR7AwqlGyZQVO1Mnm 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 83.05 KB MD5: c810f52ed26edbb3573be5f5cc65cd77
SHA1: b8536417df5725ec7fad6830a24db94a6e41a0b8
SHA256: 4353a3e3173e5418536cd7d40eb3dab31ace7601fc36c45c107f607fd8ea124f
SSDeep: 1536:+9sIwJgBpFByECH+dm23O0hMMAwgHueO50mC+jDmZloIKncWMEenFWbL3fKg8:+99isd3CH+m235JFgHueOwAmZlo4Wxar 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp 70.69 KB MD5: 732c64aee6ceff8999516ccbf973802c
SHA1: b1d98bc159b6f33da30c2e7a64a52d417ee7d3f2
SHA256: 1097ccea279f7e27753acf36f5642aff7d96887cbb6483f7a78350ba9a1f0bf1
SSDeep: 1536:UNlqjcN7s/MIIpMhjFKxZhU3MV3zOZilX3nKsmmyhPNN:U/TN7bdgFKfhrVyZip3nt1ylNN 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp 76.00 KB MD5: 60305778578ad5bde04e866df9f71ae8
SHA1: d7481fe8624bc47f597a9824ee51395f43da9d90
SHA256: 0702a5bccd605ef2a943c8bdb68b3e0dd5a2d909a3bd6d6f6699e01b35ffb33b
SSDeep: 1536:GqgT5Rb+fkgAPKGcr1/FdyzA+xw2Wol04Nag/sUi4LSSbNvMrvJv2K65:3gT5RKMgAPKRR9dkew04NtUqbiJv2p5 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf 54.42 KB MD5: d3f001b344de3e768747160f7a2e1813
SHA1: 8b83418ff2cd6b36d7fd09e630903239e84fb3b5
SHA256: 08039fca8a23ad30312e96f1d47d9fa4b45d80dd8d583e541c71778891f14c36
SSDeep: 1536:tLunmr5uqso76TthLN/c0C3nVF6Iw7tvQnopAn4aZSi5:tLunkwRqMLg3mP1QKAn4WSi5 		False
...
Host Behavior
COM (8)
»
Operation Class Interface Additional Information Success Count Logfile
Create WbemDefaultPathParser IClassFactory cls_context = CLSCTX_INPROC_SERVER, CLSCTX_LOCAL_SERVER, CLSCTX_REMOTE_SERVER True 5
Fn
Create WBEMLocator IClassFactory cls_context = CLSCTX_INPROC_SERVER, CLSCTX_LOCAL_SERVER, CLSCTX_REMOTE_SERVER True 1
Fn
Create WBEMLocator IWbemLocator cls_context = CLSCTX_INPROC_SERVER True 1
Fn
Execute WBEMLocator IWbemLocator method_name = ConnectServer, network_resource = \\.\root\cimv2 True 1
Fn
File (2408)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\E-fn.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\E-fn.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\POiB 8ZeExMA-XS_pu.rtf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\POiB 8ZeExMA-XS_pu.rtf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\pqLKU8kKZ4_VNEV 85T0.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\pqLKU8kKZ4_VNEV 85T0.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\PoBa.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\PoBa.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\YjfbYM 8Ps mlYzHp.mkv desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\YjfbYM 8Ps mlYzHp.mkv desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\1bqrJe9Ya _Vsm.gif desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\1bqrJe9Ya _Vsm.gif desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\mNDuzjfXA_CNY3l.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\mNDuzjfXA_CNY3l.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\BC6N0ORr3hLk.jpg desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\BC6N0ORr3hLk.jpg desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 2
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aACnSXz37sfFLh0c.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aACnSXz37sfFLh0c.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CjnDwr2.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CjnDwr2.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dv87rG n4j69_Z.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dv87rG n4j69_Z.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MIETsPYhZC8.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MIETsPYhZC8.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NNW-jt-FJAJU14le.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NNW-jt-FJAJU14le.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0ePb.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0ePb.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cIufVz.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cIufVz.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uoaQuh_4Hf-xj1.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uoaQuh_4Hf-xj1.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PO syjAzNUL6_-c.swf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PO syjAzNUL6_-c.swf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fLMMPhg-_u7LnAV.avi desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fLMMPhg-_u7LnAV.avi desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Oi m.mp4 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Oi m.mp4 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9m_tAUVGaKw61h5LC.mkv desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9m_tAUVGaKw61h5LC.mkv desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VWpMSp1AQFXz.mkv desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VWpMSp1AQFXz.mkv desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2We046o-scG.gif desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2We046o-scG.gif desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Yk0B b-PPwV_dE_H.gif desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Yk0B b-PPwV_dE_H.gif desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NckKV8_xZjsWZGMLCFu9.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NckKV8_xZjsWZGMLCFu9.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nFLeqCy.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nFLeqCy.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\w junN3Fxzof3.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\w junN3Fxzof3.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DopI6Sgjvx1g.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DopI6Sgjvx1g.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aR9G7XBhKvZqu7fDuR05.jpg desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aR9G7XBhKvZqu7fDuR05.jpg desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CD1gMa1Z1d0Fc-ReZ.jpg desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CD1gMa1Z1d0Fc-ReZ.jpg desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CxmnXgEcKTBMICx.jpg desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CxmnXgEcKTBMICx.jpg desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\muiA05kkl.jpg desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\muiA05kkl.jpg desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eDF0mJ1fyTQppHOiiB.pdf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eDF0mJ1fyTQppHOiiB.pdf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\_ZlzGl.rtf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\_ZlzGl.rtf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\2T8Guyc4BQWYD8Mr.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\2T8Guyc4BQWYD8Mr.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\CcMvDeT9Jgh_AOb4ngG.odt desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\CcMvDeT9Jgh_AOb4ngG.odt desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\4LIdhJ4Mw.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\4LIdhJ4Mw.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\iocukbdo_b7ytLik88Yf.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\iocukbdo_b7ytLik88Yf.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\cyChrgOFbbD.xls desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\cyChrgOFbbD.xls desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\kJpR_sdA.xls desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\kJpR_sdA.xls desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\iJxoRKVKIBE0z.odp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\iJxoRKVKIBE0z.odp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\e5twKh6.pps desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\e5twKh6.pps desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\mtM9260pBVgN ALlz6n.pps desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\mtM9260pBVgN ALlz6n.pps desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\7JFZQPs.xls desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\7JFZQPs.xls desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\1GrYOfMmwFRQEIjz3.pdf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\1GrYOfMmwFRQEIjz3.pdf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\zxTbQnE5Z8.csv desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\zxTbQnE5Z8.csv desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\o3Nw9CMj6B59So2m.rtf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\o3Nw9CMj6B59So2m.rtf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\dx Q.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\dx Q.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\E4lJw4wQdA.odt desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\E4lJw4wQdA.odt desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\MTT6uLi.ods desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\MTT6uLi.ods desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\ItynyNuYhUEqZ4.doc desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\ItynyNuYhUEqZ4.doc desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\MaglUQPRLjF1M.rtf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\MaglUQPRLjF1M.rtf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\bsrpuKhid-cU.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\bsrpuKhid-cU.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\5rH2Hzzr2qp9E4VvLG47.pdf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\5rH2Hzzr2qp9E4VvLG47.pdf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\7fJObA6NQ050pXt2IM9.rtf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\7fJObA6NQ050pXt2IM9.rtf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\hSLacBAMjJwSzdL-BSV.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\hSLacBAMjJwSzdL-BSV.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\wTkAuj.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\wTkAuj.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\KwDmD.xls desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\KwDmD.xls desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\folder.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\folder.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 2
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\Lv8NKuLBK.odp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\Lv8NKuLBK.odp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\8OXe9rwyn_r.pps desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\8OXe9rwyn_r.pps desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JO3ODtj8GwVaKmN.pdf desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JO3ODtj8GwVaKmN.pdf desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\429LeDx_PvwhKO4M6o8.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\429LeDx_PvwhKO4M6o8.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Ojsy4NELZbRVu.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Ojsy4NELZbRVu.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LOMIUr.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LOMIUr.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvOY.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvOY.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Q7Lgs1z_owxp9H.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Q7Lgs1z_owxp9H.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v-8e8VzMCSllsc4I.pptx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v-8e8VzMCSllsc4I.pptx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3E xSqN-IRWH61UfHaIi.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3E xSqN-IRWH61UfHaIi.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OYSQBPclZUW7U.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OYSQBPclZUW7U.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SlxBqYu.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SlxBqYu.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\vMJGXm9HunV zSg.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\vMJGXm9HunV zSg.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_HP9NhGb.xlsx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_HP9NhGb.xlsx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\e2Fs9ZSZ.docx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\e2Fs9ZSZ.docx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hU7X8vaEMkz.docx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hU7X8vaEMkz.docx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rWPrndBwC_sHX.docx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rWPrndBwC_sHX.docx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wf3JJ.docx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wf3JJ.docx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_YsvsJDsD7RFSVU0u6.docx desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_YsvsJDsD7RFSVU0u6.docx desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\gxKocGgw\__lK3.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\gxKocGgw\__lK3.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\b-Y6b7u.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\b-Y6b7u.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\jS3gz.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\jS3gz.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\KzPEFwTNp.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\KzPEFwTNp.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\w7dh2iOa.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\w7dh2iOa.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\2TX9loK1_Ya1A-p3Jo.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\2TX9loK1_Ya1A-p3Jo.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\kzeZJlsxG1FW.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\kzeZJlsxG1FW.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\N1kqY3ISsu29lP.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\N1kqY3ISsu29lP.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\PfqPilgZ7WgjkG-_ePa.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\PfqPilgZ7WgjkG-_ePa.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\vAUmbFqVuAOM.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\vAUmbFqVuAOM.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\7 Uyy1x.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\7 Uyy1x.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\8JdDwvU-CgAJ.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\8JdDwvU-CgAJ.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Cu-nNe0mmo61lPzb99B.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Cu-nNe0mmo61lPzb99B.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\kTW2K2YM k8AJLZ.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\kTW2K2YM k8AJLZ.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\mx-rqY50Yr.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\mx-rqY50Yr.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\pz 2cx.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\pz 2cx.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Z2uO4GzD1H.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Z2uO4GzD1H.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\_2KZaW-bdXEPaPzni.mp3 desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\_2KZaW-bdXEPaPzni.mp3 desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\f6Ud7g.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\f6Ud7g.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\ffuQPel_JjV4J7.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\ffuQPel_JjV4J7.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\JpfkFOZUvZEBDBC i.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\JpfkFOZUvZEBDBC i.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\KO3STzTZ_gO34A8AgZ.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\KO3STzTZ_gO34A8AgZ.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\lGP3l7M_Cs.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\lGP3l7M_Cs.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\folder.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\folder.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\folder.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\netfol.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\netfol.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\pictures.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\pictures.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\ringtones.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\ringtones.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\settings.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\settings.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\sync.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\sync.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\wmp.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\wmp.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\folder.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\folder.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_pref.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_pref.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_property.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_property.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_queue.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\print_queue.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_property.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_property.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_settings.ico desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\scan_settings.ico desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile10.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile10.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile11.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile11.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile12.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile12.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile13.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile13.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile14.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile14.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile15.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile15.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile16.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile16.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile17.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile17.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile18.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile18.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile19.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile19.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile20.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile20.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile21.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile21.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile22.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile22.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile23.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile23.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile24.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile24.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile25.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile25.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile26.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile26.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile27.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile27.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile28.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile28.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile29.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile29.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile30.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile30.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile31.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile31.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile32.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile32.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile33.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile33.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile34.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile34.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile35.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile35.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile36.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile36.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile37.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile37.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile38.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile38.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile39.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile39.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile40.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile40.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile41.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile41.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile42.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile42.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile43.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile43.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile44.bmp desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\usertile44.bmp desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 1
Fn
Create C:\BOOTSECT.BAK desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\BOOTSECT.BAK desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ False 2
Fn
Create C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\ReadME-BlackRouter.txt desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ReadME-BlackRouter.txt desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ True 1
Fn
Create Pipe Anonymous read pipe size = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp type = file_type True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\Fhnfkf-GLMQjigSmPlt.odp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 type = file_type True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\8FbUCCyvq6OReZDGp.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 type = file_type True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\bf13ZC2xqWHs_lbEaT.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf type = file_type True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\GL41lmqRNrs1P.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\V0rFYHw_F9.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\E-fn.png type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\E-fn.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\POiB 8ZeExMA-XS_pu.rtf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\POiB 8ZeExMA-XS_pu.rtf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\pqLKU8kKZ4_VNEV 85T0.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\pqLKU8kKZ4_VNEV 85T0.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\PoBa.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\PoBa.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\YjfbYM 8Ps mlYzHp.mkv type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\YjfbYM 8Ps mlYzHp.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\1bqrJe9Ya _Vsm.gif type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\1bqrJe9Ya _Vsm.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\mNDuzjfXA_CNY3l.png type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\mNDuzjfXA_CNY3l.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\BC6N0ORr3hLk.jpg type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zKPykyV8Vy\ipm90_lxF\BC6N0ORr3hLk.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp type = file_type True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GNYcnHyWpXszrIh18p.odp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aACnSXz37sfFLh0c.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aACnSXz37sfFLh0c.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CjnDwr2.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CjnDwr2.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dv87rG n4j69_Z.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dv87rG n4j69_Z.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MIETsPYhZC8.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MIETsPYhZC8.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NNW-jt-FJAJU14le.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NNW-jt-FJAJU14le.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0ePb.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0ePb.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cIufVz.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cIufVz.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uoaQuh_4Hf-xj1.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uoaQuh_4Hf-xj1.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PO syjAzNUL6_-c.swf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PO syjAzNUL6_-c.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fLMMPhg-_u7LnAV.avi type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fLMMPhg-_u7LnAV.avi type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Oi m.mp4 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Oi m.mp4 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9m_tAUVGaKw61h5LC.mkv type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9m_tAUVGaKw61h5LC.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VWpMSp1AQFXz.mkv type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VWpMSp1AQFXz.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2We046o-scG.gif type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2We046o-scG.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Yk0B b-PPwV_dE_H.gif type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Yk0B b-PPwV_dE_H.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NckKV8_xZjsWZGMLCFu9.png type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NckKV8_xZjsWZGMLCFu9.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nFLeqCy.png type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nFLeqCy.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\w junN3Fxzof3.png type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\w junN3Fxzof3.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DopI6Sgjvx1g.bmp type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DopI6Sgjvx1g.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aR9G7XBhKvZqu7fDuR05.jpg type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aR9G7XBhKvZqu7fDuR05.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CD1gMa1Z1d0Fc-ReZ.jpg type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CD1gMa1Z1d0Fc-ReZ.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CxmnXgEcKTBMICx.jpg type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CxmnXgEcKTBMICx.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\muiA05kkl.jpg type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\muiA05kkl.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eDF0mJ1fyTQppHOiiB.pdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eDF0mJ1fyTQppHOiiB.pdf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\_ZlzGl.rtf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\_ZlzGl.rtf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\2T8Guyc4BQWYD8Mr.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\2T8Guyc4BQWYD8Mr.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\CcMvDeT9Jgh_AOb4ngG.odt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\CcMvDeT9Jgh_AOb4ngG.odt type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\4LIdhJ4Mw.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\4LIdhJ4Mw.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\iocukbdo_b7ytLik88Yf.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\iocukbdo_b7ytLik88Yf.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\cyChrgOFbbD.xls type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\cyChrgOFbbD.xls type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\kJpR_sdA.xls type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\kJpR_sdA.xls type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\iJxoRKVKIBE0z.odp type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\iJxoRKVKIBE0z.odp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\e5twKh6.pps type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\e5twKh6.pps type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\mtM9260pBVgN ALlz6n.pps type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\mtM9260pBVgN ALlz6n.pps type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\7JFZQPs.xls type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\7JFZQPs.xls type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\1GrYOfMmwFRQEIjz3.pdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\1GrYOfMmwFRQEIjz3.pdf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\zxTbQnE5Z8.csv type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\zxTbQnE5Z8.csv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\o3Nw9CMj6B59So2m.rtf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\o3Nw9CMj6B59So2m.rtf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\dx Q.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\rMgfwn\vi_9G GX-RvBXQh\9Y4w\dx Q.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\E4lJw4wQdA.odt type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\E4lJw4wQdA.odt type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\MTT6uLi.ods type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\MTT6uLi.ods type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\ItynyNuYhUEqZ4.doc type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\ItynyNuYhUEqZ4.doc type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\MaglUQPRLjF1M.rtf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\MaglUQPRLjF1M.rtf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\bsrpuKhid-cU.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\yUGHSHXX4h RBJ\IPM5tk73Ud_IceWt\bsrpuKhid-cU.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\5rH2Hzzr2qp9E4VvLG47.pdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\5rH2Hzzr2qp9E4VvLG47.pdf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\7fJObA6NQ050pXt2IM9.rtf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\7fJObA6NQ050pXt2IM9.rtf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\hSLacBAMjJwSzdL-BSV.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\hSLacBAMjJwSzdL-BSV.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\wTkAuj.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\wTkAuj.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\KwDmD.xls type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\YwqHscuwOg_wu7vaq\KwDmD.xls type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\folder.ico type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\Lv8NKuLBK.odp type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\Lv8NKuLBK.odp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\8OXe9rwyn_r.pps type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vuqa\8OXe9rwyn_r.pps type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JO3ODtj8GwVaKmN.pdf type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JO3ODtj8GwVaKmN.pdf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\429LeDx_PvwhKO4M6o8.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\429LeDx_PvwhKO4M6o8.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Ojsy4NELZbRVu.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Ojsy4NELZbRVu.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LOMIUr.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LOMIUr.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvOY.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvOY.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Q7Lgs1z_owxp9H.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Q7Lgs1z_owxp9H.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v-8e8VzMCSllsc4I.pptx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v-8e8VzMCSllsc4I.pptx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3E xSqN-IRWH61UfHaIi.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3E xSqN-IRWH61UfHaIi.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OYSQBPclZUW7U.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OYSQBPclZUW7U.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SlxBqYu.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SlxBqYu.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\vMJGXm9HunV zSg.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\vMJGXm9HunV zSg.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_HP9NhGb.xlsx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_HP9NhGb.xlsx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\e2Fs9ZSZ.docx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\e2Fs9ZSZ.docx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hU7X8vaEMkz.docx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hU7X8vaEMkz.docx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rWPrndBwC_sHX.docx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rWPrndBwC_sHX.docx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wf3JJ.docx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wf3JJ.docx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_YsvsJDsD7RFSVU0u6.docx type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_YsvsJDsD7RFSVU0u6.docx type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\gxKocGgw\__lK3.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\gxKocGgw\__lK3.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\b-Y6b7u.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\b-Y6b7u.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\jS3gz.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\jS3gz.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\KzPEFwTNp.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\KzPEFwTNp.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\w7dh2iOa.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\w7dh2iOa.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\2TX9loK1_Ya1A-p3Jo.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\2TX9loK1_Ya1A-p3Jo.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\kzeZJlsxG1FW.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\kzeZJlsxG1FW.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\N1kqY3ISsu29lP.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\N1kqY3ISsu29lP.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\PfqPilgZ7WgjkG-_ePa.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\PfqPilgZ7WgjkG-_ePa.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\vAUmbFqVuAOM.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Mn q50s6_K m\vAUmbFqVuAOM.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\7 Uyy1x.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\7 Uyy1x.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\8JdDwvU-CgAJ.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\8JdDwvU-CgAJ.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Cu-nNe0mmo61lPzb99B.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Cu-nNe0mmo61lPzb99B.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\kTW2K2YM k8AJLZ.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\kTW2K2YM k8AJLZ.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\mx-rqY50Yr.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\mx-rqY50Yr.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\pz 2cx.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\pz 2cx.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Z2uO4GzD1H.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Z2uO4GzD1H.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\_2KZaW-bdXEPaPzni.mp3 type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\_2KZaW-bdXEPaPzni.mp3 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\f6Ud7g.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\f6Ud7g.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\ffuQPel_JjV4J7.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\ffuQPel_JjV4J7.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\JpfkFOZUvZEBDBC i.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\JpfkFOZUvZEBDBC i.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\KO3STzTZ_gO34A8AgZ.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\KO3STzTZ_gO34A8AgZ.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\lGP3l7M_Cs.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\lGP3l7M_Cs.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\65UQRJsfH0n-ljBMHx5X.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\NeOnfI7ycBAvCv-RS.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\gzgPUh-9dyS0_ke9_L.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\yjSZbLeuEgVN7hL8xoE.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\0 nRnU2pOKjV1 7.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\gw_tKLN7N.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\s_2tYeIi.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\oWfkMlT.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\59v6TCkS3AJcd\lZU_bvYu FIQ15J8h.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\W7n71-ymge_j 2l5YBR.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\nkG7oM9.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\6IoZr8UtIzewHwC48.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\zU5YUGfB5ftmJPNYcO.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\TmQwbFLkGnzkbnDN.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\w6D2x-ERD0XtSOSO2V G.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\YT-bd Ihf.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\2ocAepe x1O.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\ml9wxw\jsNn\HIE4mlfqKskb\KM-VZHaomjBXvfepR\Sop_eB4pBkWVWYp.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\8EOlRM112D_CyMf5U.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\_IrQcH0h2xbgeeMatKNb.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\ygnUCsv.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\zZw0.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\_eFIyEVqkUSz2ZQewo3.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\9IlOSW oV08yR L0.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\eQ6OA4w4YW6y4kkx-.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\EWbrVeDTyXdBkGx\0GCl4uVxFO\piJ6\je7OWLdwf.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R1Cc35IEljWXcM\MMSLiD07 s_kV.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QePPgvr8.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7j5Ta.bmp type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\NUph7-HYL6 UaLZv.jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\sgnjv-Z u6dCE_6Y.avi type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\w7_m6fZv.avi type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\9jdxxgfjMh.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\jBFKIGSBGHjL__yZ4B.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\UQinYjJ70HeDUKlLY.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5D9Y1REjmdbi7ckhG\YeEAcrtGmr.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\dIYQ4KZnYJB8_m w.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\P7DvzSdMjzYKtoVfsTv.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\Czw3 eKG3I.mp4 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\K0UTh6aEmFBRdiy0d.mp4 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4poyrdoIfKheVZ2X\FQv6HJ.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\llZwJrJbI.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\vEDuhznOq3eAa.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\fOoWS4uacQpc.avi type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\WiIlvI5.avi type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\l-oDHaOMc-pwahV m.mp4 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\A98EDZHct GyJbhsO.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\9ZxG93RMiG.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\9g8LOuisZySW.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\gB_4Rb2oJ.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\R8NmCRrojZcupdi.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\VutX.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\J3ZGyh2CF7dPtVFGf.mp4 type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ssFH61LrbJb\HCIo7hd2D_NZf\arDd4WERbeulzRq1JRy.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\E8N_b.swf type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\40i-SOEeWq5j 9nu.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\RD6FjyPEMclj9pbj.mkv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\C3kGo51_AtVELB.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XYeB6f-IvPn448LqicJ.flv type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\GoogleUpdateSetup.exe type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap.exe type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\GoogleUpdateSetup.exe type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap.exe.manifest type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap_unsigned.manifest type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\manifests\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\manifests\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 3
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 4
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_16.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\main.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\main.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_16.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\contentscript_bin_prod.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\eventpage_bin_prod.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\page_embed_script.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\craw_background.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\craw_window.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\html\craw_window.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\flapper.gif type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\icon_128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\icon_16.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_close.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_hover.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_maximize.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\topbar_floating_button_pressed.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_route_details.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\feedback.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\angular.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\background_script.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_game_sender.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_route_details.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_sender.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\common.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\feedback_script.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_cast_streaming.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_common.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_hangouts.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_webrtc.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 3
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\devices.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\index.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\offers.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\setup.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app_redirect.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\chromecast_logo_grey.png type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.html type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000003.log type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\000003.log type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\brndlog.bak type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\brndlog.txt type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\xtwZAO hIZ7N.wav type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Office\ONetConfig\350db95df4cbd94b2a1c300510e12e11.sig type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\WindowsUpdate.log type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\adServer[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\only[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\Passport[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\postmessageRelay[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\search[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\528d82a2[1].js type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\advertisement.ad[1].js type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 3
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\ContainerTag[1].js type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\ContainerTag[2].js type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\plusone[1].js type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA3e3XC[2].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA3vOVA[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA42EP9[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA54rQj[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA61yi9[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AA8uCo4[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\AAdAVrM[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB1CcOi[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB46JmN[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB5kJAC[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB5kTiV[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB6Ma4a[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BB74fLs[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBg3ODX[2].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBiyCq[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBn4lUU[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBnMKeN[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBz3ebk[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\benefits-5-mobile[1].png type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBIqq8[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBL0ij[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBLhZX[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBNiEo[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBO1mQ[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBO3tl[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBO8dQ[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBOe7C[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBPThN[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBPUFJ[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBQxzx[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBseMP[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBsqNL[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBTpvW[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBVEOW[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBVGsM[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBVIzI[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBVJ4r[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBVxM8[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBz9wz[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBBzxW1[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC06Ub[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC095c[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0ALC[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0lYn[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0mlu[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0rDa[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0rDa[2].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBC0tCi[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBDK7Yy[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBDRbsH[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBDZoZR[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBE97O8[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBE9wSt[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEcHle[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEdE0f[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEdoQv[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEdqEy[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEdtWw[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEdXJj[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEeP0k[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEeTuf[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEfE6e[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEfjuT[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEg9QV[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgGSl[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgiYw[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgJfz[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgqtY[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgsz3[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgtcS[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgtcS[2].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgx5f[1].jpg type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgx5f[2].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBEgyIm[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\BBwGan9[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\chrome-new[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\fallback_728x90[1].jpg type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\css[2].txt type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9QH4S0GZ\ie8[1].txt type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\async_usersync[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\browser[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\eula_text[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\index[1].htm type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\1223855322-postmessagerelay[1].js type = file_attributes True 1
Fn
Get Info - type = size, size_out = 0 True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\adition[1].js type = file_attributes True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1Pz1V\G2A4\80K0 t-8fcr6-.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adformdsp[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adform[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adnxs[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtech[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@adtr02[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@advertising[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@api.bing[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@at.atwola[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@bing[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.bing[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@c.msn[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@doubleclick[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[3].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@google[4].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@linkedin[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@m.exactag[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@msn[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@skadtec[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@track.adform[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.bing[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\Low\5p5nrgjn0js_halpmcxz@www.msn[2].txt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.BlackRouter source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite True 1
Fn
For performance reasons, the remaining 1360 entries are omitted.
The remaining entries can be found in glog.xml.
Registry (33)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework - True 1
Fn
Open Key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion - True 1
Fn
Open Key HKEY_CURRENT_USER - True 1
Fn
Open Key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = TZI, type = REG_BINARY True 2
Fn
Data
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = FirstEntry, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = FirstEntry, data = 2007, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = LastEntry, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = LastEntry, data = 2008, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = 2007, type = REG_BINARY True 2
Fn
Data
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\Dynamic DST value_name = 2008, type = REG_BINARY True 2
Fn
Data
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Display, data = 0, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Display, data = @tzres.dll,-670, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Std, data = 0, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Std, data = @tzres.dll,-672, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Dlt, data = 0, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time value_name = MUI_Dlt, data = @tzres.dll,-671, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework value_name = DbgJITDebugLaunchSetting, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework value_name = DbgManagedDebugger, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run value_name = ‌‍‬‫‬‍‏‪‮‏‫‍‬‎‫‪​‌‌‮‫‫‮, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion value_name = InstallationType, data = 0, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion value_name = InstallationType, data = Client, type = REG_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework value_name = LegacyWPADSupport, type = REG_NONE False 1
Fn
Write Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run value_name = ‌‍‬‫‬‍‏‪‮‏‫‍‬‎‫‪​‌‌‮‫‫‮, data = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Psycho.ex_.exe, size = 106, type = REG_SZ True 1
Fn
Process (1)
»
Operation Process Additional Information Success Count Logfile
Create "cmd.exe" /c vssadmin.exe delete shadows /all /quiet os_pid = 0xb1c, creation_flags = CREATE_NO_WINDOW, startup_flags = STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
Module (341)
»
Operation Module Additional Information Success Count Logfile
Load C:\Windows\system32\en-US\tzres.dll.mui base_address = 0x270001 True 3
Fn
Load comctl32.dll base_address = 0x7fef8d20000 True 1
Fn
Load comctl32.dll base_address = 0x7fefc0f0000 True 1
Fn
Load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\wminet_utils.dll base_address = 0x7fef8270000 True 1
Fn
Get Handle comctl32.dll base_address = 0x0 False 2
Fn
Get Handle c:\windows\system32\user32.dll base_address = 0x77450000 True 1
Fn
Get Handle c:\users\5p5nrgjn0js halpmcxz\desktop\psycho.ex_.exe base_address = 0x11d0000 True 43
Fn
Get Handle c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll base_address = 0x7fef8d20000 True 206
Fn
Get Handle c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll base_address = 0x7fefc0f0000 True 33
Fn
Get Address c:\windows\system32\user32.dll function = DefWindowProcW, address_out = 0x7769b0ac True 1
Fn
Get Address Unknown module name function = ResetSecurity, address_out = 0x7fef8272738 True 1
Fn
Get Address Unknown module name function = SetSecurity, address_out = 0x7fef8272794 True 1
Fn
Get Address Unknown module name function = BlessIWbemServices, address_out = 0x7fef82719d0 True 1
Fn
Get Address Unknown module name function = BlessIWbemServicesObject, address_out = 0x7fef8271a70 True 1
Fn
Get Address Unknown module name function = GetPropertyHandle, address_out = 0x7fef82722a0 True 1
Fn
Get Address Unknown module name function = WritePropertyValue, address_out = 0x7fef82728e4 True 1
Fn
Get Address Unknown module name function = Clone, address_out = 0x7fef8271b10 True 2
Fn
Get Address Unknown module name function = VerifyClientKey, address_out = 0x7fef827283c True 1
Fn
Get Address Unknown module name function = GetQualifierSet, address_out = 0x7fef8272324 True 1
Fn
Get Address Unknown module name function = Get, address_out = 0x7fef8272124 True 1
Fn
Get Address Unknown module name function = Put, address_out = 0x7fef82723d4 True 1
Fn
Get Address Unknown module name function = Delete, address_out = 0x7fef8271ea0 True 1
Fn
Get Address Unknown module name function = GetNames, address_out = 0x7fef8272250 True 1
Fn
Get Address Unknown module name function = BeginEnumeration, address_out = 0x7fef82719b0 True 1
Fn
Get Address Unknown module name function = Next, address_out = 0x7fef8272354 True 1
Fn
Get Address Unknown module name function = EndEnumeration, address_out = 0x7fef8271f78 True 1
Fn
Get Address Unknown module name function = GetPropertyQualifierSet, address_out = 0x7fef8272310 True 1
Fn
Get Address Unknown module name function = GetObjectText, address_out = 0x7fef827228c True 1
Fn
Get Address Unknown module name function = SpawnDerivedClass, address_out = 0x7fef8272800 True 1
Fn
Get Address Unknown module name function = SpawnInstance, address_out = 0x7fef8272814 True 1
Fn
Get Address Unknown module name function = CompareTo, address_out = 0x7fef8271bd0 True 1
Fn
Get Address Unknown module name function = GetPropertyOrigin, address_out = 0x7fef82722f8 True 1
Fn
Get Address Unknown module name function = InheritsFrom, address_out = 0x7fef8272334 True 1
Fn
Get Address Unknown module name function = GetMethod, address_out = 0x7fef82721e4 True 1
Fn
Get Address Unknown module name function = PutMethod, address_out = 0x7fef82725b4 True 1
Fn
Get Address Unknown module name function = DeleteMethod, address_out = 0x7fef8271eb0 True 1
Fn
Get Address Unknown module name function = BeginMethodEnumeration, address_out = 0x7fef82719c0 True 1
Fn
Get Address Unknown module name function = NextMethod, address_out = 0x7fef8272398 True 1
Fn
Get Address Unknown module name function = EndMethodEnumeration, address_out = 0x7fef8271f84 True 1
Fn
Get Address Unknown module name function = GetMethodQualifierSet, address_out = 0x7fef8272238 True 1
Fn
Get Address Unknown module name function = GetMethodOrigin, address_out = 0x7fef8272220 True 1
Fn
Get Address Unknown module name function = QualifierSet_Get, address_out = 0x7fef827261c True 1
Fn
Get Address Unknown module name function = QualifierSet_Put, address_out = 0x7fef82726a4 True 1
Fn
Get Address Unknown module name function = QualifierSet_Delete, address_out = 0x7fef8272600 True 1
Fn
Get Address Unknown module name function = QualifierSet_GetNames, address_out = 0x7fef8272658 True 1
Fn
Get Address Unknown module name function = QualifierSet_BeginEnumeration, address_out = 0x7fef82725f0 True 1
Fn
Get Address Unknown module name function = QualifierSet_Next, address_out = 0x7fef827266c True 1
Fn
Get Address Unknown module name function = QualifierSet_EndEnumeration, address_out = 0x7fef8272610 True 1
Fn
Get Address Unknown module name function = GetCurrentApartmentType, address_out = 0x7fef8272324 True 1
Fn
Get Address Unknown module name function = GetDemultiplexedStub, address_out = 0x7fef8272168 True 1
Fn
Get Address Unknown module name function = CreateInstanceEnumWmi, address_out = 0x7fef8271de0 True 1
Fn
Get Address Unknown module name function = CreateClassEnumWmi, address_out = 0x7fef8271d24 True 1
Fn
Get Address Unknown module name function = ExecQueryWmi, address_out = 0x7fef827205c True 1
Fn
Get Address Unknown module name function = ExecNotificationQueryWmi, address_out = 0x7fef8271f94 True 1
Fn
Get Address Unknown module name function = PutInstanceWmi, address_out = 0x7fef82724e0 True 1
Fn
Get Address Unknown module name function = PutClassWmi, address_out = 0x7fef827240c True 1
Fn
Get Address Unknown module name function = CloneEnumWbemClassObject, address_out = 0x7fef8271b20 True 1
Fn
Get Address Unknown module name function = ConnectServerWmi, address_out = 0x7fef8271be8 True 1
Fn
Window (36)
»
Operation Window Name Additional Information Success Count Logfile
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create .NET-BroadcastEventWindow.4.0.0.0.141b42a.0 class_name = .NET-BroadcastEventWindow.4.0.0.0.141b42a.0, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.0.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create What's Happened to my computer? class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Psycho class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create : class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create : class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 00 class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create : class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 00 class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 00 class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 00 class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Time Left ( Payment Will be raised to 2x ) class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Step 2: Complete form for get Decryption tools class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Request Decrypt class_name = WindowsForms10.BUTTON.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Transaction Link Wallet 2: class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Transaction Link Wallet 1: class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Your Email class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.EDIT.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.tooltips_class32.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.EDIT.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.EDIT.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Your important files are encrypted. Many of your documents,photo,video,database,project and other files are no longer accessible because they have been encrypted. maybe you are busy looking for a way to recover your files, but do not waste your time. nobody can recover your files without our decryption service. class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Step 1: For Decrypt pay 300$ to two wallet class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create = class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create = class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Wallet 2: class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 200 $ class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 100 $ class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 1CqdSX7SwFB5SKNP8Y8Z21CcUrvHVXTsAd class_name = WindowsForms10.EDIT.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create Wallet 1: class_name = WindowsForms10.STATIC.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create 3BaS629MFciJ5cJKHSg4A5vncVok5Hxw7H class_name = WindowsForms10.EDIT.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r12_ad1, wndproc_parameter = 0 True 1
Fn
Keyboard (1)
»
Operation Additional Information Success Count Logfile
Get Info type = KB_LOCALE_ID, os_tid = 0, result_out = 67699721 True 1
Fn
System (312)
»
Operation Additional Information Success Count Logfile
Get Cursor x_out = 948, y_out = 68 True 4
Fn
Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Sleep duration = 1000 milliseconds (1.000 seconds) True 305
Fn
Sleep duration = 1000 milliseconds (1.000 seconds) True 2
Fn
Environment (9)
»
Operation Additional Information Success Count Logfile
Get Environment String name = COR_ENABLE_PROFILING False 1
Fn
Get Environment String name = USERPROFILE, result_out = C:\Users\5p5NrGJn0jS HALPmcxz True 6
Fn
Get Environment String name = PinnableBufferCache_System.Net.HttpWebRequest_Disabled False 1
Fn
Get Environment String name = PinnableBufferCache_System.Net.HttpWebRequest_MinCount False 1
Fn
Process #2: cmd.exe
60 0
»
Information Value
ID #2
File Name c:\windows\system32\cmd.exe
Command Line "cmd.exe" /c vssadmin.exe delete shadows /all /quiet
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:02:17, Reason: Child Process
Unmonitor End Time: 00:03:12, Reason: Self Terminated
Monitor Duration 00:00:55
OS Process Information
»
Information Value
PID 0xb1c
Parent PID 0x94c (c:\users\5p5nrgjn0js halpmcxz\desktop\psycho.ex_.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x B20
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
pagefile_0x00000000000d0000 0x000d0000 0x000d1fff Pagefile Backed Memory rw True False False -
private_0x00000000000e0000 0x000e0000 0x000e0fff Private Memory rw True False False -
private_0x00000000000f0000 0x000f0000 0x000f0fff Private Memory rw True False False -
private_0x0000000000130000 0x00130000 0x0013ffff Private Memory rw True False False -
private_0x0000000000210000 0x00210000 0x0030ffff Private Memory rw True False False -
private_0x0000000000310000 0x00310000 0x0040ffff Private Memory rw True False False -
private_0x0000000000490000 0x00490000 0x0058ffff Private Memory rw True False False -
pagefile_0x0000000000590000 0x00590000 0x00717fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000720000 0x00720000 0x008a0fff Pagefile Backed Memory r True False False -
pagefile_0x00000000008b0000 0x008b0000 0x01caffff Pagefile Backed Memory r True False False -
pagefile_0x0000000001cb0000 0x01cb0000 0x01ff2fff Pagefile Backed Memory r True False False -
sortdefault.nls 0x02000000 0x022cefff Memory Mapped File r False False False -
cmd.exe 0x49e60000 0x49eb8fff Memory Mapped File rwx True False False -
user32.dll 0x77450000 0x77549fff Memory Mapped File rwx False False False -
kernel32.dll 0x77550000 0x7766efff Memory Mapped File rwx False False False -
ntdll.dll 0x77670000 0x77818fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
winbrand.dll 0x7fef8ec0000 0x7fef8ec7fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd920000 0x7fefd98afff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefdb10000 0x7fefdbaefff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefdc90000 0x7fefdcf6fff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdd00000 0x7fefddc8fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefe0a0000 0x7fefe1a8fff Memory Mapped File rwx False False False -
lpk.dll 0x7fefe350000 0x7fefe35dfff Memory Mapped File rwx False False False -
imm32.dll 0x7feff950000 0x7feff97dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff990000 0x7feff990fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd6000 0x7fffffd6000 0x7fffffd6fff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Host Behavior
File (11)
»
Operation Filename Additional Information Success Count Logfile
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop type = file_attributes True 2
Fn
Get Info vssadmin.exe type = file_attributes False 1
Fn
Open STD_OUTPUT_HANDLE - True 4
Fn
Open STD_INPUT_HANDLE - True 4
Fn
Registry (17)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System - False 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Command Processor - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 24, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Process (1)
»
Operation Process Additional Information Success Count Logfile
Create C:\Windows\system32\vssadmin.exe os_pid = 0xb44, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Module (8)
»
Operation Module Additional Information Success Count Logfile
Get Handle c:\windows\system32\cmd.exe base_address = 0x49e60000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x77550000 True 2
Fn
Get Filename - process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadUILanguage, address_out = 0x77566d40 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CopyFileExW, address_out = 0x775623d0 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = IsDebuggerPresent, address_out = 0x77558290 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetConsoleInputExeNameW, address_out = 0x775617e0 True 1
Fn
System (2)
»
Operation Additional Information Success Count Logfile
Get Time type = System Time, time = 2019-01-05 23:47:09 (UTC) True 1
Fn
Get Time type = Ticks, time = 203269 True 1
Fn
Environment (19)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 7
Fn
Data
Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 2
Fn
Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 2
Fn
Get Environment String name = PROMPT False 1
Fn
Get Environment String name = COMSPEC, result_out = C:\Windows\system32\cmd.exe True 1
Fn
Get Environment String name = KEYS False 1
Fn
Set Environment String name = PROMPT, value = $P$G True 1
Fn
Set Environment String name = =C:, value = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop True 1
Fn
Set Environment String name = COPYCMD True 1
Fn
Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Set Environment String name = =ExitCodeAscii True 1
Fn
Process #3: vssadmin.exe
0 0
»
Information Value
ID #3
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin.exe delete shadows /all /quiet
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:02:18, Reason: Child Process
Unmonitor End Time: 00:03:11, Reason: Self Terminated
Monitor Duration 00:00:53
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xb44
Parent PID 0xb1c (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x B48
0x B4C
0x B50
0x B54
0x B58
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
pagefile_0x00000000000d0000 0x000d0000 0x000d1fff Pagefile Backed Memory rw True False False -
vssadmin.exe.mui 0x000e0000 0x000ecfff Memory Mapped File rw False False False -
private_0x00000000000f0000 0x000f0000 0x000f0fff Private Memory rw True False False -
private_0x0000000000100000 0x00100000 0x00100fff Private Memory rw True False False -
private_0x0000000000110000 0x00110000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00190fff Pagefile Backed Memory r True False False -
pagefile_0x00000000001a0000 0x001a0000 0x001a0fff Pagefile Backed Memory r True False False -
private_0x00000000001b0000 0x001b0000 0x002affff Private Memory rw True False False -
private_0x00000000002b0000 0x002b0000 0x003affff Private Memory rw True False False -
private_0x0000000000450000 0x00450000 0x0045ffff Private Memory rw True False False -
pagefile_0x0000000000460000 0x00460000 0x005e7fff Pagefile Backed Memory r True False False -
pagefile_0x00000000005f0000 0x005f0000 0x00770fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000780000 0x00780000 0x01b7ffff Pagefile Backed Memory r True False False -
private_0x0000000001bd0000 0x01bd0000 0x01c4ffff Private Memory rw True False False -
private_0x0000000001cf0000 0x01cf0000 0x01d6ffff Private Memory rw True False False -
private_0x0000000001e20000 0x01e20000 0x01e9ffff Private Memory rw True False False -
sortdefault.nls 0x01ea0000 0x0216efff Memory Mapped File r False False False -
private_0x0000000002270000 0x02270000 0x022effff Private Memory rw True False False -
user32.dll 0x77450000 0x77549fff Memory Mapped File rwx False False False -
kernel32.dll 0x77550000 0x7766efff Memory Mapped File rwx False False False -
ntdll.dll 0x77670000 0x77818fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
vssadmin.exe 0xfff20000 0xfff4cfff Memory Mapped File rwx False False False -
vsstrace.dll 0x7fef79b0000 0x7fef79c6fff Memory Mapped File rwx False False False -
vssapi.dll 0x7fef79d0000 0x7fef7b7ffff Memory Mapped File rwx False False False -
vss_ps.dll 0x7fef8e60000 0x7fef8e73fff Memory Mapped File rwx False False False -
atl.dll 0x7fefb070000 0x7fefb088fff Memory Mapped File rwx False False False -
rsaenh.dll 0x7fefcbb0000 0x7fefcbf6fff Memory Mapped File rwx False False False -
cryptsp.dll 0x7fefceb0000 0x7fefcec6fff Memory Mapped File rwx False False False -
cryptbase.dll 0x7fefd4b0000 0x7fefd4befff Memory Mapped File rwx False False False -
rpcrtremote.dll 0x7fefd5a0000 0x7fefd5b3fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd920000 0x7fefd98afff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefdb10000 0x7fefdbaefff Memory Mapped File rwx False False False -
oleaut32.dll 0x7fefdbb0000 0x7fefdc86fff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefdc90000 0x7fefdcf6fff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdd00000 0x7fefddc8fff Memory Mapped File rwx False False False -
ole32.dll 0x7fefddf0000 0x7fefdff2fff Memory Mapped File rwx False False False -
clbcatq.dll 0x7fefe000000 0x7fefe098fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefe0a0000 0x7fefe1a8fff Memory Mapped File rwx False False False -
sechost.dll 0x7fefe330000 0x7fefe34efff Memory Mapped File rwx False False False -
lpk.dll 0x7fefe350000 0x7fefe35dfff Memory Mapped File rwx False False False -
advapi32.dll 0x7feff740000 0x7feff81afff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7feff820000 0x7feff94cfff Memory Mapped File rwx False False False -
imm32.dll 0x7feff950000 0x7feff97dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff990000 0x7feff990fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd4000 0x7fffffd4000 0x7fffffd4fff Private Memory rw True False False -
private_0x000007fffffd6000 0x7fffffd6000 0x7fffffd7fff Private Memory rw True False False -
private_0x000007fffffd8000 0x7fffffd8000 0x7fffffd9fff Private Memory rw True False False -
private_0x000007fffffda000 0x7fffffda000 0x7fffffdbfff Private Memory rw True False False -
private_0x000007fffffdc000 0x7fffffdc000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Process #11: System
0 0
»
Information Value
ID #11
File Name System
Command Line -
Initial Working Directory -
Monitor Start Time: 00:04:18, Reason: Kernel Analysis
Unmonitor End Time: 00:04:33, Reason: Terminated by Timeout
Monitor Duration 00:00:15
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x4
Parent PID 0x0 (Unknown)
Is Created or Modified Executable False
Integrity Level System (Elevated)
Username NT AUTHORITY\SYSTEM
Enabled Privileges SeLockMemoryPrivilege, SeTcbPrivilege, SeSystemProfilePrivilege, SeProfileSingleProcessPrivilege, SeIncreaseBasePriorityPrivilege, SeCreatePagefilePrivilege, SeCreatePermanentPrivilege, SeDebugPrivilege, SeAuditPrivilege, SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege, SeIncreaseWorkingSetPrivilege, SeTimeZonePrivilege, SeCreateSymbolicLinkPrivilege
Thread IDs
0x 8
0x C8
0x C0
0x 40
0x 44
0x 64
0x C4
0x 4C
0x 48
0x 2C
0x B8
0x F4
0x F8
0x 104
0x 28
0x 108
0x 30
0x 5C
0x 100
0x 90
0x B0
0x FC
0x 9C
0x 78
0x 34
0x 110
0x 80
0x 8C
0x B4
0x 114
0x 84
0x 24
0x 68
0x 0
0x 12C
0x 130
0x 134
0x 138
0x 174
0x DC
0x 98
0x 60
0x 74
0x 268
0x 2E4
0x 88
0x 3B4
0x 20
0x 450
0x 468
0x 94
0x 570
0x 5B0
0x 5C0
0x 5C8
0x 5CC
0x 61C
0x 68C
0x 6A0
0x 6A8
0x 6B4
0x 6B8
0x 6C0
0x 50
0x 1C
0x 470
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
pagefile_0x0000000000010000 0x00010000 0x00032fff Pagefile Backed Memory rw True False False -
ntdll.dll 0x77c30000 0x77dd8fff Memory Mapped File rwx False False False -
ntdll.dll 0x77e10000 0x77f8ffff Memory Mapped File rwx False False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image