48559025...cccf | Grouped Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Target: win7_64_sp1 | exe
Classification: Trojan, Ransomware

485590253ddae051a4b2b83044f78b3e2a4a67975dc29f8450b9de429d53cccf (SHA256)

HonestSample_5b0305619931365644caebf2.exe

Windows Exe (x86-32)

Created at 2018-05-26 15:55:00

...

Notifications (2/2)

Every analysis has a preconfigured maximum VM disk size for temporary changes. This limit was reached during this analysis and, as an result, the analysis was terminated prematurely.

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x90c Analysis Target High (Elevated) honestsample_5b0305619931365644caebf2.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HonestSample_5b0305619931365644caebf2.exe" -

Behavior Information - Grouped by Category

Process #1: honestsample_5b0305619931365644caebf2.exe
3852 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\honestsample_5b0305619931365644caebf2.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HonestSample_5b0305619931365644caebf2.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:36, Reason: Analysis Target
Unmonitor End Time: 00:01:40, Reason: Terminated by Timeout
Monitor Duration 00:01:04
OS Process Information
»
Information Value
PID 0x90c
Parent PID 0x564 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 910
0x 91C
0x 994
0x 998
0x 99C
0x 9A0
0x 9DC
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory Readable, Writable True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory Readable, Writable True False False -
private_0x0000000000020000 0x00020000 0x00020fff Private Memory Readable, Writable True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory Readable, Writable True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory Readable, Writable True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File Readable, Writable, Executable False False False -
pagefile_0x0000000000050000 0x00050000 0x00053fff Pagefile Backed Memory Readable True False False -
pagefile_0x0000000000060000 0x00060000 0x00060fff Pagefile Backed Memory Readable True False False -
private_0x0000000000070000 0x00070000 0x00070fff Private Memory Readable, Writable True False False -
pagefile_0x0000000000080000 0x00080000 0x00080fff Pagefile Backed Memory Readable, Writable True False False -
private_0x0000000000090000 0x00090000 0x00090fff Private Memory Readable, Writable True False False -
private_0x0000000000090000 0x00090000 0x00092fff Private Memory Readable, Writable True False False -
pagefile_0x00000000000a0000 0x000a0000 0x000a6fff Pagefile Backed Memory Readable True False False -
private_0x00000000000b0000 0x000b0000 0x0012ffff Private Memory Readable, Writable True False False -
locale.nls 0x00130000 0x00196fff Memory Mapped File Readable False False False -
honestsample_5b0305619931365644caebf2.exe 0x001a0000 0x001affff Memory Mapped File Readable, Writable, Executable True True False
...
rsaenh.dll 0x001b0000 0x001ebfff Memory Mapped File Readable False False False -
pagefile_0x00000000001b0000 0x001b0000 0x001b1fff Pagefile Backed Memory Readable, Writable True False False -
private_0x00000000001c0000 0x001c0000 0x001c0fff Private Memory Readable, Writable True False False -
private_0x00000000001d0000 0x001d0000 0x001d0fff Private Memory Readable, Writable, Executable True False False -
private_0x00000000001d0000 0x001d0000 0x001d2fff Private Memory Readable, Writable True False False -
private_0x00000000001e0000 0x001e0000 0x001e6fff Private Memory Readable, Writable True False False -
private_0x00000000001f0000 0x001f0000 0x001f0fff Private Memory Readable, Writable True False False -
private_0x0000000000200000 0x00200000 0x00200fff Private Memory Readable, Writable True False False -
private_0x0000000000210000 0x00210000 0x00210fff Private Memory Readable, Writable True False False -
private_0x0000000000220000 0x00220000 0x00220fff Private Memory Readable, Writable True False False -
private_0x0000000000230000 0x00230000 0x00230fff Private Memory Readable, Writable True False False -
private_0x0000000000240000 0x00240000 0x00241fff Private Memory Readable, Writable True False False -
private_0x0000000000240000 0x00240000 0x00240fff Private Memory Readable, Writable, Executable True False False -
private_0x0000000000250000 0x00250000 0x0028ffff Private Memory Readable, Writable True False False -
private_0x0000000000290000 0x00290000 0x00290fff Private Memory Readable, Writable True False False -
private_0x00000000002a0000 0x002a0000 0x002a0fff Private Memory Readable, Writable, Executable True False False -
private_0x00000000002b0000 0x002b0000 0x002b0fff Private Memory Readable, Writable True False False -
private_0x00000000002c0000 0x002c0000 0x002c0fff Private Memory Readable, Writable, Executable True False False -
private_0x00000000002c0000 0x002c0000 0x002c1fff Private Memory Readable, Writable True False False -
private_0x00000000002d0000 0x002d0000 0x003cffff Private Memory Readable, Writable True False False -
private_0x00000000003d0000 0x003d0000 0x004cffff Private Memory Readable, Writable True False False -
private_0x00000000004d0000 0x004d0000 0x004d0fff Private Memory Readable, Writable, Executable True False False -
private_0x0000000000550000 0x00550000 0x0058ffff Private Memory Readable, Writable True False False -
private_0x00000000005c0000 0x005c0000 0x005fffff Private Memory Readable, Writable True False False -
private_0x0000000000620000 0x00620000 0x0062ffff Private Memory Readable, Writable True False False -
pagefile_0x0000000000630000 0x00630000 0x007b7fff Pagefile Backed Memory Readable True False False -
pagefile_0x00000000007c0000 0x007c0000 0x00940fff Pagefile Backed Memory Readable True False False -
pagefile_0x0000000000950000 0x00950000 0x01d4ffff Pagefile Backed Memory Readable True False False -
sortdefault.nls 0x01d50000 0x0201efff Memory Mapped File Readable False False False -
private_0x0000000002020000 0x02020000 0x0205ffff Private Memory Readable, Writable True False False -
private_0x0000000002070000 0x02070000 0x020affff Private Memory Readable, Writable True False False -
private_0x00000000020c0000 0x020c0000 0x021bffff Private Memory Readable, Writable True False False -
pagefile_0x00000000021c0000 0x021c0000 0x025b2fff Pagefile Backed Memory Readable True False False -
private_0x00000000025c0000 0x025c0000 0x025fffff Private Memory Readable, Writable True False False -
private_0x0000000002600000 0x02600000 0x0263ffff Private Memory Readable, Writable True False False -
private_0x0000000002640000 0x02640000 0x02740fff Private Memory Readable, Writable True False False -
private_0x00000000026c0000 0x026c0000 0x027bffff Private Memory Readable, Writable True False False -
private_0x00000000026e0000 0x026e0000 0x027dffff Private Memory Readable, Writable True False False -
private_0x00000000027e0000 0x027e0000 0x028e0fff Private Memory Readable, Writable True False False -
kernelbase.dll.mui 0x027e0000 0x0289ffff Memory Mapped File Readable, Writable False False False -
private_0x0000000002950000 0x02950000 0x02a4ffff Private Memory Readable, Writable True False False -
private_0x0000000002ad0000 0x02ad0000 0x02bcffff Private Memory Readable, Writable True False False -
private_0x0000000002bd0000 0x02bd0000 0x02cd0fff Private Memory Readable, Writable True False False -
private_0x0000000002ce0000 0x02ce0000 0x02de0fff Private Memory Readable, Writable True False False -
private_0x0000000002e40000 0x02e40000 0x02f3ffff Private Memory Readable, Writable True False False -
wow64cpu.dll 0x75360000 0x75367fff Memory Mapped File Readable, Writable, Executable False False False -
wow64win.dll 0x75370000 0x753cbfff Memory Mapped File Readable, Writable, Executable False False False -
wow64.dll 0x753d0000 0x7540efff Memory Mapped File Readable, Writable, Executable False False False -
browcli.dll 0x75720000 0x7572cfff Memory Mapped File Readable, Writable, Executable False False False -
netutils.dll 0x75730000 0x75738fff Memory Mapped File Readable, Writable, Executable False False False -
cscapi.dll 0x75740000 0x7574afff Memory Mapped File Readable, Writable, Executable False False False -
wkscli.dll 0x75750000 0x7575efff Memory Mapped File Readable, Writable, Executable False False False -
davhlpr.dll 0x75760000 0x75767fff Memory Mapped File Readable, Writable, Executable False False False -
davclnt.dll 0x75770000 0x75786fff Memory Mapped File Readable, Writable, Executable False False False -
ntlanman.dll 0x75790000 0x757a3fff Memory Mapped File Readable, Writable, Executable False False False -
winsta.dll 0x757b0000 0x757d8fff Memory Mapped File Readable, Writable, Executable False False False -
drprov.dll 0x757e0000 0x757e7fff Memory Mapped File Readable, Writable, Executable False False False -
rsaenh.dll 0x757f0000 0x7582afff Memory Mapped File Readable, Writable, Executable False False False -
cryptsp.dll 0x75830000 0x75845fff Memory Mapped File Readable, Writable, Executable False False False -
profapi.dll 0x75850000 0x7585afff Memory Mapped File Readable, Writable, Executable False False False -
mpr.dll 0x75860000 0x75871fff Memory Mapped File Readable, Writable, Executable False False False -
cryptbase.dll 0x75980000 0x7598bfff Memory Mapped File Readable, Writable, Executable False False False -
sspicli.dll 0x75990000 0x759effff Memory Mapped File Readable, Writable, Executable False False False -
sechost.dll 0x75a30000 0x75a48fff Memory Mapped File Readable, Writable, Executable False False False -
crypt32.dll 0x75a60000 0x75b7cfff Memory Mapped File Readable, Writable, Executable False False False -
kernelbase.dll 0x75bb0000 0x75bf5fff Memory Mapped File Readable, Writable, Executable False False False -
kernel32.dll 0x75fd0000 0x760dffff Memory Mapped File Readable, Writable, Executable False False False -
advapi32.dll 0x760e0000 0x7617ffff Memory Mapped File Readable, Writable, Executable False False False -
shlwapi.dll 0x76180000 0x761d6fff Memory Mapped File Readable, Writable, Executable False False False -
lpk.dll 0x763c0000 0x763c9fff Memory Mapped File Readable, Writable, Executable False False False -
msasn1.dll 0x763d0000 0x763dbfff Memory Mapped File Readable, Writable, Executable False False False -
user32.dll 0x763e0000 0x764dffff Memory Mapped File Readable, Writable, Executable False False False -
msvcrt.dll 0x76670000 0x7671bfff Memory Mapped File Readable, Writable, Executable False False False -
msctf.dll 0x76720000 0x767ebfff Memory Mapped File Readable, Writable, Executable False False False -
shell32.dll 0x76920000 0x77569fff Memory Mapped File Readable, Writable, Executable False False False -
imm32.dll 0x77570000 0x775cffff Memory Mapped File Readable, Writable, Executable False False False -
rpcrt4.dll 0x775d0000 0x776bffff Memory Mapped File Readable, Writable, Executable False False False -
ole32.dll 0x776c0000 0x7781bfff Memory Mapped File Readable, Writable, Executable False False False -
gdi32.dll 0x77820000 0x778affff Memory Mapped File Readable, Writable, Executable False False False -
usp10.dll 0x77990000 0x77a2cfff Memory Mapped File Readable, Writable, Executable False False False -
private_0x0000000077a30000 0x77a30000 0x77b4efff Private Memory Readable, Writable, Executable True False False -
private_0x0000000077b50000 0x77b50000 0x77c49fff Private Memory Readable, Writable, Executable True False False -
ntdll.dll 0x77c50000 0x77df8fff Memory Mapped File Readable, Writable, Executable False False False -
ntdll.dll 0x77e30000 0x77faffff Memory Mapped File Readable, Writable, Executable False False False -
private_0x000000007efa7000 0x7efa7000 0x7efa9fff Private Memory Readable, Writable True False False -
private_0x000000007efaa000 0x7efaa000 0x7efacfff Private Memory Readable, Writable True False False -
private_0x000000007efad000 0x7efad000 0x7efaffff Private Memory Readable, Writable True False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory Readable True False False -
private_0x000000007efd5000 0x7efd5000 0x7efd7fff Private Memory Readable, Writable True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory Readable, Writable True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory Readable, Writable True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory Readable, Writable True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory Readable, Writable True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory Readable True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory Readable True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory Readable True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory Readable True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory Readable True False False -
Created Files
»
Filename File Size Hash Values YARA Match Actions
c:\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\$recycle.bin\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\config.msi\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\msocache\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\perflogs\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\perflogs\admin\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\program files\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\program files\microsoft sql server compact edition\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\program files\microsoft sql server compact edition\v3.5\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\program files\microsoft sql server compact edition\v3.5\desktop\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\program files (x86)\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\recovery\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\collab\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\forms\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\javascripts\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\assetcache\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\assetcache\d5ntrc6r\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\headlights\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\linguistics\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\linguistics\dictionaries\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\logtransport2\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\identities\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\identities\{31810c36-5d23-4cce-a3b4-316ded195c38}\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\#sharedobjects\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\#sharedobjects\p7y3f7qb\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\sys\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\addins\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\credentials\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\14\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\excel\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\excel\xlstart\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ime12\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp12\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp8_1\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp9_0\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\65ux3yg0\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\ay721qdr\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\dzbkzbic\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\vrlzoz0e\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\mmc\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\1033\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\pbk\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\pbk\_hiddenpbk\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\powerpoint\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\proof\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher building blocks\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\speech\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\certificates\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\crls\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\ctls\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\templates\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\uproof\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\word\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\word\startup\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\extensions\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\crash reports\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\818200132aebmoouht\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\minidumps\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webapps\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\cookies\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\qzix\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\restore-sigrun.txt 11.57 KB MD5: 630982ca9f17cb718137a791b32fa899
SHA1: 83e15e85aee8f861eb78a92dca12b87d9a5a8992
SHA256: 1c2f127cd4c29165c5712e4ac51a626b107320b06807c9a22186edc9e2b0c3bf 		False
...
c:\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\$recycle.bin\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\config.msi\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\msocache\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\perflogs\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\perflogs\admin\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\program files\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\program files\microsoft sql server compact edition\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\program files\microsoft sql server compact edition\v3.5\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\program files\microsoft sql server compact edition\v3.5\desktop\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\program files (x86)\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\recovery\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\collab\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\forms\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\javascripts\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\assetcache\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\flash player\assetcache\d5ntrc6r\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\headlights\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\linguistics\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\linguistics\dictionaries\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\logtransport2\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\identities\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\identities\{31810c36-5d23-4cce-a3b4-316ded195c38}\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\#sharedobjects\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\#sharedobjects\p7y3f7qb\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\sys\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\addins\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\credentials\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\14\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\excel\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\excel\xlstart\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ime12\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp12\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp8_1\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\imjp9_0\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\65ux3yg0\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\ay721qdr\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\dzbkzbic\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\vrlzoz0e\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\mmc\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\1033\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\pbk\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\network\connections\pbk\_hiddenpbk\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\powerpoint\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\proof\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher building blocks\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\speech\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\certificates\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\crls\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\systemcertificates\my\ctls\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\templates\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\uproof\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\word\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\word\startup\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\extensions\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\crash reports\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\818200132aebmoouht\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\minidumps\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webapps\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\cookies\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\qzix\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\restore-sigrun.html 26.51 KB MD5: 003744ea9aae7bb45a7e0326803ddf9d
SHA1: 2f662862f177d7ddd9d6808cc33333b36dcc4783
SHA256: e1103ab4aa154c44fca98fc089f59114e1f6c0fb1a00a2a67ba1bfcf3c26372b 		False
...
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.sigrun 3.02 MB MD5: d2369a28d49caf86438258f7ddbb3a21
SHA1: 34a864e8a7079fcd72a95f0234f2d49faac1a98e
SHA256: eb97d403644d10a8fb986e8085e136d6d6094016f943ac9680634e4c05e79641 		False
...
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\winre.wim.sigrun 10.00 MB MD5: 4cf8919c69ba5baef06ffb1ee6c1c4b1
SHA1: 55af5bcba4522e62e1516a23ad719e90f82f9f8c
SHA256: 9c190472244ff8a63cdf63bbb8a0b02f446a928ca07bb7103069796eb929944f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\0ivgwmel3gx z.m4a.sigrun 5.40 KB MD5: ecabf7e45a7feeb2b74a59fcebb32011
SHA1: cf880d09fb8fc7dd8a86646f7b199416a6eb9c36
SHA256: eb86d66907f3efee0a396f317c05b9e51fe2d56fbc327aff91039488cde4a55b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\31cnyx6z.ods.sigrun 73.97 KB MD5: 43446ab896d495e87bad8061ca49b32b
SHA1: 197b8ede3b5ef920daa86c678afc6bd830d6fe32
SHA256: fd3982ace5c2bda4615b65b886768130f45569150dddea372c5a8536df1c8b32 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\7l6jzgfya.mp4.sigrun 33.94 KB MD5: 57000399556c89ac4f75c84666851ffd
SHA1: eff53449349893000ef5791d182ec106d4a7301c
SHA256: 2d48da81d0dd68d48e7464bfe13c3a964df4427b3f06bf4ecd8f1627fe0fe30e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\javascripts\glob.settings.js.sigrun 0.52 KB MD5: aa1c19e6e8c4a9fa372d0fe28f9ebd09
SHA1: 7634943b8b79f2a22be24d243e6312c818efba51
SHA256: 7e606e23a64a91207c0cf8b5997b27c5338acbd3ef0ac55144d2d397de8fbf52 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\addressbook.acrodata.sigrun 5.78 KB MD5: a757f016c73bd06530f78f012385d7a8
SHA1: ad4e8f174b7400c339df20c87a9d23b8b458ba39
SHA256: 828f851c9e93600aeaeebd54bc6fd8e14f29221755bd7138fa6aed184f037da4 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl.sigrun 1.42 KB MD5: 14bc1fac4d37da126258880b9e3c4d9d
SHA1: 3c23189fdd72b2b86b6c60ecee96703fc548e93f
SHA256: c3e3562d502b482f04bbf3c14c765a1f104bb9f2a92a257976f8d54ebfd0c46f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl.sigrun 37.33 KB MD5: 9d0cf0318a182911c734ebb539203670
SHA1: 6b603716c6a785e7ac846fc454a9ad38e46ffb2d
SHA256: 860c98032e65b0f0ebb6e78c4cd541328451fd3308f0895ef080f185c32d1278 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\apznc47ztyq.avi.sigrun 76.56 KB MD5: fafbfc3d34ba52a3fc5b3f0223c33864
SHA1: d05d6f6d8d56ffe181d316552f3cb162bb5196a5
SHA256: 066e5a61297b663ae592b5f1de6b889f6b8c2890b37d69ea8b219496845779ac 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\bf-ckv7r4vw.bmp.sigrun 28.00 KB MD5: b8a4c46228afa42a79074cc8ae66a2d1
SHA1: f98f02729d5484135398c86a537c2914c28dfdc0
SHA256: 46da2390fd54662826be8e07c2d65e381fc0851bbed13fd1bd621463961e09fd 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\bopnvdbgfhjdsfqhb.rtf.sigrun 5.88 KB MD5: b553ab17a260ccae4684fedeee5e8800
SHA1: f3a93f4f49f3688c17c231cbc0e411c68f0601ca
SHA256: 7e19833d0742bdf5a402ce135ca28fe9d4e02788260226025006bf98d6464d20 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\btfiddqsb46e.gif.sigrun 67.72 KB MD5: 2ef5973913b6681404be507ce4e30c69
SHA1: e47705b2e2775e477f741bcb4b4543c93ebfa18e
SHA256: 2b733567340de1d301dddf5cffdea12c2d741fbac994d81eca71877209cdfea1 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\efzxo_h7d.m4a.sigrun 65.61 KB MD5: 7e0025a02c29462d8eafefc7d9ec3325
SHA1: 12d111ccd847612f856136823f6c0731a3868ad9
SHA256: 2b598f1332f088902d25f0a9827f8af15315a7411a7dd61767c8cd2653512da4 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\e_8hqorvct7_xflkis.m4a.sigrun 62.54 KB MD5: 8c649711006cd1f8ef479439b8f3bc8d
SHA1: 263bd1fbc70ffda2c2493b50939618f6cfe93463
SHA256: 3f975bde3a32b9ab10fcce197d703c454ef842a3e7b73f4c18d271c24e1eb957 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\hqyoufzgc.mkv.sigrun 63.62 KB MD5: 49a4b888cfbba989e4c00eec85220be3
SHA1: dfd58663aa853b0fdb4c7843f1c709ce959cf1b7
SHA256: 844a14938b5bef13fd63f1b78e8d999d980100bfe043488ddfaedea1f6a8c2f3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\hrl3ftjkaf24ket7qusf.avi.sigrun 8.63 KB MD5: 80c44ed4ff494ee72c3b452472ba2132
SHA1: 1f4c8d9bf914752c950ece106d54318a3f9ade93
SHA256: 2972a57c9d633aab6625d695195c53b35a732027a0fbdea6a59479d4d91e9d6a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\i3nogoglgh6cro.doc.sigrun 11.96 KB MD5: 0a22e5067f5d7026f3d01a84649a8340
SHA1: 932fca7d6c0478417bd9f0954776ab44adc4c0ad
SHA256: b021ebbba0013c49298901f15914c6a8911d76f91d1b7cdf547fee6db82149f0 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\lqnsqq5tr-e84t.mp3.sigrun 12.33 KB MD5: 3f37ef0644e999843c96d4d266b0d744
SHA1: 3797bef799582e1760a2930b18f45c29377ea9dc
SHA256: b419d8082a1bc7fcdb08a9867c50121b3a67072a26cd474f9ad659243369d415 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\m-xtn.bmp.sigrun 1.89 KB MD5: 0b3cafb91b8bf66420e6fcdd97706116
SHA1: db95cc7651159b5cda0bc9b4a79ff07b85a67afa
SHA256: 2d240f815de2410dc075ab37afb5a8dee84f383da656c29880b7029d7b550b2f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\m0zkhxb5.pdf.sigrun 32.93 KB MD5: f69603453cbb0decbb19d4efd77bdae4
SHA1: d05c5454f283d4b432f9075b805d0cc1fb9e0271
SHA256: 6ecf250c0616f01be6678d9a532545eddffaa27b4aa32142f610cd776cc72dde 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol.sigrun 0.97 KB MD5: 2e496215f8b32acbfff61b70e218f1b9
SHA1: 8b3ecfdf2a498f8fa24e9e4f4c28d03c125d1d54
SHA256: 9056b04cd078b297c49351c4d397a0fbc4987b24ba38619751585fef8468c8f8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\metjnf-r.m4a.sigrun 59.46 KB MD5: cdc106444c5df74235a9645f03f2de19
SHA1: d8c6e485d8551163efaf0dc77f9bf8d6a3e3a8bb
SHA256: cc137fe548fac163d06c79927de1a3e7b6793bcdd04c523b3022d575148abe7b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun 0.55 KB MD5: ebf34cf957e8ad1962f69c4ab37d510d
SHA1: f2132093cc39333239ce735b6a29b0ef7cf9eb71
SHA256: bbc9beda6d71b8e681d47f1e5941e4dc0f6e67ba355b442a6337c40bd754d870 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun 0.59 KB MD5: 4fbc6215915eef8bda8ab8839d370a3f
SHA1: 672b3e12bb19dc965092cfe44b025fa37e60f2be
SHA256: 96502cdbb0dc43cc0484116a6b92ec139b46e506429be95cfa4bebe9de6c9fc0 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun 0.57 KB MD5: 3af6a1a5975a5b71d2c418816ffb7eec
SHA1: 1be94e191cff35436c6df59242dbcfef188fa1ea
SHA256: 54bb2004231099a3bb6dfc538e75f939e08a17dc7eb59f54f8f3c4918eb5182b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\14\built-in building blocks.dotx.sigrun 3.99 MB MD5: 37e37f7e0c2bb0fd48a4a9c1b537d585
SHA1: e0ecb2fd8648fb697a5dbfecd9ab81580bd56d08
SHA256: 62e06d1c8c1cb96dc98c554cc6ad16d13cfa1897e1df4e8e9465f99d95d15c04 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\index.dat.sigrun 32.51 KB MD5: e9998b0e2480692948e75d6bf1c2105c
SHA1: 28f85f1270e3e6a0561f8a1c4d397da4709fb661
SHA256: 48ca1b932cab41a41a2763df4b9d4ae215c8190ff7418fe54ee67b3f7db82b60 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\1033\global.mpt.sigrun 382.01 KB MD5: 1c36c48bf4f3218974f034bc2efef4db
SHA1: 6e5de8c3d9dadd0195a04e9698df8547244acf0d
SHA256: bc825c67a05956f917c0231e8abdf366eb2bd363d915a2d0caf7306cd2ae66e1 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\mso1033.acl.sigrun 37.38 KB MD5: 2b1e8740931651ae318f82e6fa470ec8
SHA1: 6897c3d89daedc11f07a17ae71e93bfba3603677
SHA256: 03b4948e0972eb52c0b9040895a8ca1c1b39adf5538c92abf929065622397c3a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\global.lnk.sigrun 1.91 KB MD5: 10494e1c31a953cc1fb20185f433509b
SHA1: 1eddb6da60080bd1d19c4cc99ca81de4a72011ef
SHA256: 0d02f3f815cafb53f7166cb90983b5e522ffe0d7d904ad3f3736a16b37b7ddec 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\index.dat.sigrun 0.56 KB MD5: dbbd60053e546d22a335e760e72ec7fa
SHA1: 23713fda0fa2a486ee6a16dadc513dee99ffbb47
SHA256: 3ee071833217ff4a27245b87bc2962f2e62c8de48e1b615f9e91313d3d2daf0c 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\templates.lnk.sigrun 1.62 KB MD5: bd9de6a7caea3124ce74568b06073a13
SHA1: b2f3b344f422d3ac7a7b18ba84c0ecfbf7397f91
SHA256: 2a987dff0c13a2477b3de756bf525842f51b5300e15f4aca88ec09ab6f0f8d1a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\outlook.srs.sigrun 3.01 KB MD5: 4c8bcbf9f535952ad18fd08ad538da40
SHA1: 2beea996397a382292b2bdf9f9dada65259796ef
SHA256: f1218b4035729219a6803c60b0cf2eaeb2e2cf49f806dea50323794e29349798 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\outlook.xml.sigrun 2.92 KB MD5: df0b545f827412b59b453ca67798bb1b
SHA1: dc00df7df924e594c99c8fb89ff6085232bf4af8
SHA256: e0003a47e098e8f292350792e8583e4383d9406d68e344b4351d0f233c5a6607 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\credhist.sigrun 0.67 KB MD5: 6fc667bd7b1481b7ff8ca73100aea5e7
SHA1: 562e58dc718136e53e7830482fa4f5136546ba88
SHA256: 8a34fe247fa95a9a2ac7385864a3a7f1cf6be24e51ea7e3acf1aa8cc9383d76e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.sigrun 0.96 KB MD5: 24441cac752f16a63183087d6c00e8d4
SHA1: 63ca07a7f9b3e27f866b68b3d19edfe1a68da70b
SHA256: 0b72dbb50963ceffbf0e36f304ca4be9482c574d03a2ab22820fb0f27e7466f6 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\preferred.sigrun 0.53 KB MD5: 58b1d316ad683140f301cebfea9c8cfd
SHA1: a6cdb2b784d3670f216ac812adb372dc344c029b
SHA256: e3639b996ba7f009df748e670e3c7f001c0f2eaef1090ec5f815c90aeb2240db 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.sigrun 0.96 KB MD5: 990c33b81685a60cd100db3552ee0bac
SHA1: 33739ab664871ef1d8759cbc5874f924c547d022
SHA256: 37cde366fa261ab4921f815269133d34c0ed1685d21db65bfae8a64126ea3074 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.sigrun 0.96 KB MD5: 36cb0022c71ab37ee31e4b63966e0179
SHA1: f5fd3dadb994013921b884a5ff8686bf954173d9
SHA256: 4934aa157c2b9b20a13f2cf0efa44e7a9ac90d58e1daefcfacf1ba185418d7c3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.sigrun 0.96 KB MD5: 1bced8f76b3989e3f83e94dcb284aa3d
SHA1: 53b8b2346486c64b4cad1170e93498f288de7351
SHA256: 0a9cecefd2deb457f71d8dd6f1315333750ac13d636bbd06554409fc8b6df070 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\preferred.sigrun 0.53 KB MD5: a9a5729657e5c88552e905fa323cbc1b
SHA1: 15adcca93e790330c2b4ad0238e5f06d971f58d5
SHA256: 58e0921eb36f603d393d617f63342e40758895c9117783a73f7527ff41547102 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\synchist.sigrun 0.58 KB MD5: c43a3a21c33f1a98e4f777a26df5b6f3
SHA1: 81cc6ec4adb9cdc00a0cd94fcca45eef40f97250
SHA256: 2f4899c046ad999c39b9384b5530ac8c5532f4b6924051dcca027c08ad67211e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher building blocks\contentstore.xml.sigrun 0.67 KB MD5: 0ec047dd26cf98fd7e9961a1dcec4482
SHA1: cde4bdebfbec803ad189d9033eeb475cac106dd8
SHA256: afd3b3cbe77b6332b3418df03d31385bfe38699a47f7ad14868707797c19f7f8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\templates\normal.dotm.sigrun 20.66 KB MD5: b88f6a36161d0295eb4893f1d4154790
SHA1: 79ab7cfc76751f6bf6b0bdc5764061ba2e8fa105
SHA256: 79e1b34d6a05b2f2dbd067e1b1876b173c6deca5ad1fe62da020701f2acd74a8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\uproof\custom.dic.sigrun 0.51 KB MD5: 6263b37a1f025d660ca354470e379398
SHA1: 8d97b6491d5378338c25ecea3c0fdade4128c0e2
SHA256: 3caaf451626cf84f6ca754fa34b5d9211f0a60ffe55a868ed0584ebb85bee5e3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\crash reports\installtime20131025151332.sigrun 0.52 KB MD5: 52255b343e791ddf94806c6bc974cf76
SHA1: 3bd85ad122129faa566c0cf0b6a13cbb00ababcf
SHA256: e56cf900ecd2d384375fd83602392d2da1741490e0836ce0f1aad09fb83ea174 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\addons.json.sigrun 0.53 KB MD5: 6d6a3960e7aaddb5f67a83cada04826a
SHA1: 27e5ea543156d4094e186f468ca922861aad2f9e
SHA256: 70b992eeb982fbe80e7712d0d7931ba98108eaf3b713c862a4a306785ef0b060 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.sigrun 3.47 KB MD5: 8d49c3f8063a976de15af6b2d56f0717
SHA1: 1074824d25e891f93f0f8d8a1469be7602acc831
SHA256: 3fbb6cf048c74b33fdfee645093e979bbcbd37dcc4829bdd182fb08913d3d835 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json.sigrun 3.47 KB MD5: 018b1bc02a949dfbf6fa9449d14c481c
SHA1: 02ac456bd1be9d0beec61e5dbb829db1ee0e59c0
SHA256: 2d8118abf7992f69785c8f51260943d56ff17724221b2d9a22261c7544e6bc4b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\cert8.db.sigrun 64.51 KB MD5: 121702d8f0671fce05c68af947ff58de
SHA1: 8b360fc76ef0677aab388b56ddb0ed43267f967f
SHA256: a4edc17359ff5a81b5740917e29bdb78cc25a50e1c52a46fbe12206044dcd961 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\compatibility.ini.sigrun 0.71 KB MD5: cacb4f1b2552408ea891e64e8cb3e9f3
SHA1: f3c369d87038cd57b57908e45465671bf2a20a43
SHA256: 98eef3721e3911d32b5e88e262604e01864d9a46180df4f1e407edfbf227d362 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\content-prefs.sqlite.sigrun 224.51 KB MD5: cdc830464469d5cfd2404be3746538d6
SHA1: 473f3086d3c45249bed5f6c2e3f282997f4537bb
SHA256: 9d2b2416cdf5f0a1237f5bcc5edfd7890b0bf8574abc9248320adb78082ad5d5 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\cookies.sqlite.sigrun 512.51 KB MD5: 57dac0db5e4f26523dd68e4de43085dc
SHA1: f21df099c5cb98b5f3a53169c28270ffb29efa5d
SHA256: cc626b31986072cec2ffaa27c4c9c8153a6fa0b80ead2d358b45c87118d739e3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\downloads.sqlite.sigrun 96.51 KB MD5: 84f050f869a7c620ca4b6b30930f75fb
SHA1: 628516fae82706d9025822460880c31763b1a9e7
SHA256: dd85df7a965c71c4cf589ad06af067ddcab4a0fdd1af80d3063ed81b11b6b616 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\extensions.ini.sigrun 0.65 KB MD5: 6d608b5983d409ff334fd802a2ebdde9
SHA1: d807697e6e11607a7f91e83d0b98a4e75dfc4ce7
SHA256: c01ab12a416a50f4860ac7b648c20773078fe1df71ed8168f7c0830977a1fe2d 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\extensions.sqlite.sigrun 448.51 KB MD5: 167b1238e09d4f59260b8ebd0f6e96c3
SHA1: baa634a373b5eb62f38941e2ed61ceba849337fe
SHA256: 7b806aab018a3c65811099c82962d8a669b9a87e666ac7844d2bafb80b9ba163 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\818200132aebmoouht.sqlite.sigrun 640.51 KB MD5: 6dfb0ac15f8b0969276a60a3b63b3d31
SHA1: eb3b1e857969f2e561fb81feae10b7b648f73fdf
SHA256: c40c246b727a672d9f9dd26be73078accf11ed53c3131dc669e9009e9a089878 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\key3.db.sigrun 16.51 KB MD5: 089113d8d1f9a0938865404b700c1245
SHA1: 60470b2e4b6e518d10c51a471e40e88abbebb56b
SHA256: fd1fd221db80ec317bc6d0f39356041dfabc9c37026e6e5ee879f1232bfbc63f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\localstore.rdf.sigrun 1.76 KB MD5: 0003cf57ad16c77fcb331acfb021b605
SHA1: a0d7fc60dd7e6b0f652c02561abdf87a0e5d49da
SHA256: 7e8fe18c2755b6327084bc630dd34d9a37e7cd62371bbd02b42234329c22fa61 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\marionette.log.sigrun 0.56 KB MD5: ffbbe6ab6df64644766048e675c2761a
SHA1: dfb3822f450662e9d61969a5a7fbc916788a85e3
SHA256: 610ccc75f915d8f70f895834eb1dce2eee9c75399a7ced7b0cc96db3dd44555f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\mimetypes.rdf.sigrun 4.25 KB MD5: 0fade7c3189a0d2912f0c0cc2960c3f7
SHA1: 91cc5d55a4edbcd0841a1d98cad1627a67f13169
SHA256: 51b2baaa8318847674a522ca91ea4b57368566662cce89a05c09e970c1758879 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\permissions.sqlite.sigrun 64.51 KB MD5: 2ecd27a23984934402b769291eab7656
SHA1: f690f2507dd003df2b39d9ef7fa6dc04e897bf76
SHA256: c14cf09f84337a4c3e781687d875eaca65bf23c27909bab5ac168f004f378f0d 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\places.sqlite.sigrun 10.00 MB MD5: 5d0b4ef69161691970c93eae762d738d
SHA1: d9d7bed0a7600c7add7f19750711f16db10dd4ea
SHA256: 838e0d53ae29c73443438961469c0d34b7dc3da8f92f5499e84f977e2bb44813 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\pluginreg.dat.sigrun 4.03 KB MD5: 9be9ee63cca5512a90e13312eb52b1d1
SHA1: f0053b35dd7cb92523404d16f9e2fcc7f0897fab
SHA256: 08dc211c6faaa6409f2859b040059d94345961a5104d6c51a7dc358c2f216e83 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\prefs.js.sigrun 4.47 KB MD5: dbf91f5e823ab44cf58d16897076ae54
SHA1: 007bf07a833386c86c2af87b2d079776a93bacf5
SHA256: ccb4d08d2cb63a04d3c915e756c8036fdebd23132b785abd4774e9959471935b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\search.json.sigrun 16.89 KB MD5: c3a2c5e0403fb47fac880f010f6d4e2e
SHA1: 99831285ca166e49b3e6ed78db2a0e224ead0a31
SHA256: ab84ae98d7d921126fbf21a5d50254e63dfd813ddcb3eff7c599f728d3d6e2b9 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\secmod.db.sigrun 16.51 KB MD5: 715d1e35171d3d6f4049a9e544558208
SHA1: 3fbaeeaf405414c12a30f69e232f4d2ed1be051e
SHA256: 40e31be6f586510d0c544bcab30da9915c34eb2864a9456975edee63479e7165 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\sessionstore.bak.sigrun 1.47 KB MD5: b19616e96a9832caa681ecf4ff48c846
SHA1: 8bdaa3dc438d9f2139f26910ff317763e8f462e8
SHA256: f535256b2dbb93fb3e849199c23e77cd93bb33e620c848913375f59eb00b7913 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\sessionstore.js.sigrun 3.45 KB MD5: 83a0aadc157168f0108fdf0df60b5a50
SHA1: 8ae384cfee34de5072cf4f03aebbc60b93971446
SHA256: 8e09498747df81dd7c5c1cbe199149e46c87ec092fc63f7f70f115a4dad1612c 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\signons.sqlite.sigrun 320.51 KB MD5: a89ed2cd3b2ebd7c16a00ff474aed6e0
SHA1: 270a9ee734a17e506f57656df1954eb81ea0d943
SHA256: b1d005e7cb4eafa02891621b3be6bb58dd971581039ad7a8b190163ad00ad108 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\times.json.sigrun 0.54 KB MD5: 8c915c572d7f3ad374805161f389b1c6
SHA1: dc2db8f4279d9c5c300c295f828c84e51393f6f7
SHA256: b464e6ee116df79ea2db78838aceecb1f1b1e9d4df83910bb034b8f9ca6da398 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webapps\webapps.json.sigrun 0.51 KB MD5: 97bde50d73274a3f3dd79cab0d10b62a
SHA1: 4ba0f6391488a5954fd46135a06a61b7af9bae80
SHA256: 75b65e8b1692672f926ceafbff55a21bbb063dee95289549feb5e244256f5f0a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webappsstore.sqlite.sigrun 96.51 KB MD5: 3005401abd5b1e3a671a01352ddbdc34
SHA1: 83854f17b62225481c05d6651cb6d9f9adf4485f
SHA256: a80dd37df3a46c7291ce786867f53ca22c3082a5b4c1031d64367951d53bcaae 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles.ini.sigrun 0.62 KB MD5: 5eb96b7e7bd5e08e18f8623f1e9bec6b
SHA1: 09a7c8ecbf02b19161ac5915b9b0ba0d77fd5d9b
SHA256: 7e3b3baf800f7f36331b06d427c0d7e504febb37abe07e17a4a19a7c1f366027 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\n3n8fe.bmp.sigrun 16.52 KB MD5: 51ab4edbcd84b279fcc7de7d6c85eb9f
SHA1: 7a8f069588b1e599b41da9dc09bfeabd7fd013d4
SHA256: cc4d72dbf187564a89b5e4b2d4f9565cc304bb79c1b984138b57f8ca1312df65 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\pewbcp0.mp4.sigrun 100.09 KB MD5: 2f8ea4b1aad58644a448b3cafa6b5ef2
SHA1: 08445288e93a696c41ba733f5049627b8a8dca59
SHA256: d947a5ddf224df3a5831692306d6ac7cb4ff2b6f384724ef923de32963ec87c5 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\ptgwon39bwss7g3.wav.sigrun 32.77 KB MD5: 3d59a288bb50a338d337c7f186a3fc19
SHA1: 510748a9f1f8c2b2275ff1ee1815ef668722ea9a
SHA256: 55f0c8a8dde47ce8a5816b4fc202ed2df3180410d339dce9d8b113f4d8c54460 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qg4x8sfnychm2b1m.mp3.sigrun 38.04 KB MD5: 138278addb70f98b7c7eb533b2a08250
SHA1: 2a12d997a6ab59b226b311af8d6e302c7823efcb
SHA256: f5e73ed9383cfb51ac0cc3f6934df58789fcb65b03b514d8808da771445f463a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qgsi2bhgiwnojo.jpg.sigrun 59.34 KB MD5: ab72909d66b345664cbdb0c9dcb6d8f7
SHA1: 7d7f762b9e311811d4eca1def87a155d792c0a18
SHA256: d650dfcf006010b96ae3bdcf9c7e39b000081acad1ee73a65e12c78a9042bfce 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qkxv9qswvxny3pgepazt.wav.sigrun 2.35 KB MD5: 8bc7ce313595fd90190ca5778f21eb88
SHA1: b7db2336fa4a578277f3fd5ab75c96d247c15451
SHA256: 8cac818a5317591134d70803cf7b9620de35539f7304635d7b3f4e0fe835ea6b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\s3ogtiz-9dwah.swf.sigrun 4.82 KB MD5: 80e726e6908850a27e47ed385be60257
SHA1: 8e6102018863589ff464d6545d46f3f91ef2754d
SHA256: 4d06ece6a18c0e2e9b8a8088832b925ab9467263b80b45dccf9c59f8edaf6c02 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\tbcif77pzt.m4a.sigrun 83.23 KB MD5: 3861fff5490e1f3b767a88663d259f82
SHA1: 7b7fbe70c6d5c59afd772f55e5ca90ec5d367a8b
SHA256: 95e6450ed210f791c1d6f3790cb7da4c4940f3a41d133ead561b4b45f1052356 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\u6tucobnq7fxzifsu.docx.sigrun 28.32 KB MD5: 8c32c0d8f3b6388257a1c64a0061f027
SHA1: a1f2fe99eb67da01fd597a5910084440576290b1
SHA256: e67958b7dead19a39c03dcbb132b08e8377edf35e67e1e31651cca554da7aef7 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\whhrq-wgvscgaidxujxh.png.sigrun 6.49 KB MD5: 3940a15f987a6bbafa3cb83013dc1f2a
SHA1: 6a84f4a8e148d3b4620a68dbd34ce530f8159615
SHA256: ff148821b2294162549a6736dd492eba7c8cbb832e209a90780e59fb1308d80f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\y4liqwysv0j.wav.sigrun 69.98 KB MD5: e82ed74053c8333c196d1e1167e41f98
SHA1: 1e0bcf3774c2a375cdc2ed0a5776cc6f9c729c54
SHA256: edf1420cd9c1656f686387e0b4f7394f24a4b46166fe9040eb9cb71b9afe3e1a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\z2cfga3x9yca5.flv.sigrun 27.08 KB MD5: 0add3573816d5a6540dcd731ba97ef02
SHA1: b1a29f3efc102e2ed936cb2846f1bb4b3c8c7d69
SHA256: a6186cb6987c666c03f7b2a8c4a7063faf7d91c845d7f7fa87efbd4b33d7746b 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\aclviho asldjfl.contact.sigrun 1.66 KB MD5: 2df25c7144696ebbc08b1858d56a423e
SHA1: 58d813bedd077c0891a54b0dbc6c99ecb06064e6
SHA256: 40ebf5674def2369723ddf51b2e7f9930e8d2181fc3d98a147f388fd488d36db 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\administrator.contact.sigrun 67.29 KB MD5: a7b35d3a9329f124d9a3a9b7b04a098f
SHA1: 6d18c453f9e1ef90df523bb8bd110a0b5346354b
SHA256: da528bd30761d77e88b93cccebb2fc297b861722921330985fb82e1987480dbb 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\asdlfk poopvy.contact.sigrun 1.65 KB MD5: 62fee5cc5ae01c1349f01b081d762b3a
SHA1: 8935ca14d0300d91f0c2f1c5ff254ebe6404305a
SHA256: 8c5a5b01325c75743c8e8a6747a5136130d21a7c36149595163e58375d693e02 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\chucu jadnvk.contact.sigrun 1.66 KB MD5: 6a86b7d8327aca740412cf0398278489
SHA1: f21c01f7ce5e3578ff56eee02a9556b8077de68b
SHA256: 6457b30da62eaad9e8c10173c1c9a68f5a241e7e23d53437d304fbcac312f05d 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\lulcit amkdfe.contact.sigrun 1.65 KB MD5: 870e9cfdfc1eb960c7eb507e2dd31156
SHA1: f9fab4accc6c7d45d96bef2fa577b2ebeb0d8559
SHA256: e2fa3d1eb2320dcad18fc0b3dea96eee72fd3cee505f738bf4dc0306df3c3e2a 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\sikvnb huvuib.contact.sigrun 1.65 KB MD5: e0586ffbb00782f3c116176ded7e5190
SHA1: 2ca66dc4b317a108bb2622511358044dc2179529
SHA256: 16eab74b2792f9806f1a0b932320ea719d1798fb2c58df8a09bc1dc849de4c3f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\2vzsh1uctwq_-psbgdwb.odt.sigrun 56.20 KB MD5: b908396e41900cb79705feaff882cf77
SHA1: 109c776822b7d1a3df0a292238140a82b6ade7c2
SHA256: bdb100e7dc781472e29d7b193d9a4639cfcc7a79af555be1de67f59a831ad265 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\3 ik_1n4fkd.avi.sigrun 96.53 KB MD5: c57d21e5b08af1c46746770e5f6584eb
SHA1: 864c3eca27f965a00792c11923a80ca3a5fb5212
SHA256: a8b25f51ac0e703c42a33670b02434554903770c2be074647d93e223e9cb31ad 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\3lfsixinsrxonqrcv1v.doc.sigrun 26.34 KB MD5: f859e22f1b21a13d43f8940f34e520cb
SHA1: 0c0e31285e5d57b76b6b0809a03ec5b1c423553a
SHA256: d1bbdb74065eb20e626c6ef9052519f5f909fb5c6a4ce01f13366b6ce83a9244 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\4vdcku8n1dr-p.jpg.sigrun 10.22 KB MD5: 3071c1a2a4c7964ffbbddd94395bfaf9
SHA1: ff5e62ce9d89e3cfe5ea9cb24d85222550e6a83f
SHA256: 54caa7320644dbd478e621b324017fe1f431a1857bf50ab0cb7e5e8e7d52ec4b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\5dy2ipxrtc2uqydppd2.jpg.sigrun 10.21 KB MD5: 7c876409364b84cf0468b8f4a6b03ab5
SHA1: 866478eea04ecc521fc3c92e2e849169a7467bf9
SHA256: 1e688d0a4ef78b1a92a3aad93b0d562583b9171bcc39bae136e95e84a75459b8 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\8asuoplfamr3.png.sigrun 68.81 KB MD5: c9046c8062027fbe99809048620e92dc
SHA1: 8955371005d8178a357d8c9d241091b49b23a34e
SHA256: e2b6ccb2906e8610ff8e23179bfd8384e33cfdb87c2451be05f60b3e3fb8762d 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\8i olc-r5.mp3.sigrun 14.42 KB MD5: 0c8e83ad6baa64b9fb6ea6998b9f2fc6
SHA1: 8d9002eb8b57e5a86313eaa3bed3a03c39c87f3b
SHA256: 64a9e6726224f80d6d83be6524f95b20a1a872506b5a33af1e4e586afea92cc9 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\eckaybf8s.mp3.sigrun 95.58 KB MD5: 33cecdbd1e32e818c9bce1d24e16f90e
SHA1: ce706cd1d2073534b5c317b91ce85250eb9f131a
SHA256: eafa91d01078b7d102e2bbc4038eb96b43d832fde5357c1fe0c3741f6cad0f62 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ggnnutddeb1nm8mjbb2x.mp4.sigrun 89.64 KB MD5: d86bb05e9ec5aa53dd24028ea4dcc395
SHA1: 1f5e773666c5e18c69b98a8125d41108347f5e80
SHA256: e5fad38162eed9279fa60e7d1e853e57cdfecafc1e5a112f2749156a44479ab9 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\gnhyqzuovfmpez_yz.ods.sigrun 74.80 KB MD5: bded80b315f9e726efe38a56cb51458a
SHA1: ebe1ce8f6b3df084d5b1fdc2625551b8eab054c1
SHA256: adbbba67601e068dc1e34ed33b7dff67704fe61e179ecae860289282258171d5 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ibw7b-ro.mkv.sigrun 66.76 KB MD5: b92a1aed25053b914454ac17b40716f3
SHA1: 65119b1a103062670522b98412e64cf4b6b1d430
SHA256: 2b141db6e71e736d3e86e01d9b90ce5fcc26373dc255216de508111d46fbb07f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ik_0e4m9ys8gjr4lfseb.flv.sigrun 37.35 KB MD5: d3dcad1e35a8b12d199a4cfd100eb6d5
SHA1: 61386dbdfbdc0a77889d792a5c0924cc7b406a4d
SHA256: b12e5618e9285b7d50564710a7c6218678c617646a1f99a92d15d2f440e6b2ce 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\0q-evsqx66qcbe2j.flv.sigrun 30.92 KB MD5: ecca85a418a951b0bea4fe002f5351ee
SHA1: fba3fc8a4f9e45beba0100a45d1a41879b970f0d
SHA256: 2ae08595ff32fd9fdc1a2c7f726d90caa22444e0b378c16095d43da561ea53d2 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\gxdr7c.swf.sigrun 14.94 KB MD5: 993ac39f76d3dd7e9deb12165bbf9b26
SHA1: 26312afaa6616d48eb4ac46ceb37ed983bde7417
SHA256: 91c1c7d5b0fef91dfd914a88cf48624122026ac3db881124f7a807a855c2b798 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\hwktm38kmcixdd.gif.sigrun 18.53 KB MD5: 8145305cc70d07c082bb5204cdae8c97
SHA1: ee307e5cbf49427806a91abd7f40336e4a78dc51
SHA256: f9cd06a5b6b76595e588457efded25bff9b68130b0c17c3c0217d511e1a3491e 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\qzix\0fukg.swf.sigrun 23.35 KB MD5: 55dc2bc7194e5fee134d5b07a7e65cbb
SHA1: 9cb39cc0b3ed185e26edc02d77133468ceae61df
SHA256: eaa3a218c535ffa8a07d97a9926497685afe31860a0095ac27112d0098c3b793 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\rszn0v.mp4.sigrun 22.08 KB MD5: 3eef234d271b47d16a94b13ced8ffbe0
SHA1: 53c6ad17dce9e558ca136d3e49ccb7ece1a73bf5
SHA256: c02c00e7fa4fe0ebb94d4113f837c7076dd448175eb13163aba84dd180528527 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\voed0.jpg.sigrun 23.88 KB MD5: 32646acd5bcdbcf96edd777cb0088dd4
SHA1: 969e846deb24f078a0703c7c4080871267a9fa9d
SHA256: dcc0e17268b0298cbc5aa6b53c06cfa8e1f04849ca532b5ff844e525e41a934b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\poknej.mp3.sigrun 10.53 KB MD5: 36124ea4579f191fe823303de646fbc4
SHA1: d1ace4a528658878651df28e7a38513d95d5f3d5
SHA256: 5a18395eb92ef2f12f08c07c999ec10184421b3ff6effd47240a58acf04bcc66 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\qq56l.ots.sigrun 42.03 KB MD5: e29ad373a2f27bf4e90dcf0493ccf562
SHA1: 5cd57d3098e70b15230429cca126a80dec8a68b3
SHA256: 527c62dc6285c52d590ba12e671b43fc5baed20d421c6ef0fe9903d4864cdcef 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\qu2.csv.sigrun 76.68 KB MD5: 07514cfb5356784b7cb3fdf88a732f11
SHA1: 798c674d43c1e229ec0238228d35c324d554064b
SHA256: 9ac6926f1e2c0177a801aa081703be5c80ec2c5e504b25e295df52953da21e90 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\9xipoeapy_9bv4e2u.wav.sigrun 19.18 KB MD5: 24971d48c485771d4cfbaf8b15a5fa97
SHA1: 678b3f5853e6de5dd5e517e716993cbf257b7956
SHA256: 911cbe91475a7d4963b0610b76b83219f1f1df5446aa8de78cb8b4f81fbeff9c 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\dvdyggmdkmkre.wav.sigrun 19.83 KB MD5: 9f7261d1574687129622b2ef87635ca2
SHA1: 3c1e052bad520608ecab7b066ed380d414ef394b
SHA256: f88a69af0864beead577f722cdaeef8da6eece7a6a2a164cff3a30f2bf5fc522 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\ioki yd-8qb13.png.sigrun 49.70 KB MD5: 2cfcc333e79bfba38f54e3f0f43a5646
SHA1: 548381b2cd4092b98033b57649e03b78cbcba58f
SHA256: 2797d4c2b2df284febb28358b3ae5da54b5f667f78ffcf27222555458d649f8f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\2wseenoue.gif.sigrun 32.29 KB MD5: 38527e3610e08e57c2ad475d669f5141
SHA1: d1e7b0bc1f3c63c04217c1cfd73a78abcbc45e13
SHA256: 402ec04c5499a1b6627bbadb0c7d0d4ec1f392981001d2f66e08df3f48e502d2 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\4as58sstf.mp4.sigrun 71.67 KB MD5: 4466e9b3b1926510974b7ebaf40c9e54
SHA1: b90d406efbb1ec986063c0c8b0cc9b186fb687e0
SHA256: c69243770221a41cc95967e594fee3b6f5743cd4cdeda04ce694f5fdb2b8557b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\yyabkn7df.m4a.sigrun 84.00 KB MD5: 8d77fe195a56b29f0dc9944706c33c96
SHA1: 97852ed73c6a024a35a2d2eaa5f7750a37d9e1ee
SHA256: 522b58e0526e9356db8bc54523b8d09d8dcdeb3566e54b0f2ee4f83f6040d30c 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\rbnzcwkhxwntck-9.ppt.sigrun 33.78 KB MD5: 14aeca97db654a9d24446b1951f85c53
SHA1: 2d76ef627d42d9a7389a2528521566faa5d4c7f5
SHA256: f0a1aadbd841227d5593caeefb31da9d81289977a522437373200c7e1c2a2ace 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\rnra7r-m.bmp.sigrun 56.59 KB MD5: 54fcef26b745b7f6c2dd065dfae5a1d4
SHA1: 581c759aa118006ef1ec76c7bd74e5004c89c8bb
SHA256: 76727b31e3f8923646aedb13cbba4177cb03bd8dba98591d59ec207743ea9302 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\l9d0vqdafkd_yzfjw0ld.png.sigrun 9.99 KB MD5: 01fc7e7f897da2e424fd94b01cfd1dce
SHA1: a168c234b972a7c3f501103cc36d6b3c53ccf939
SHA256: 435b9307580065d1c95aa09b121d41921f7c19ac00bff8da13cfb4d97c97cee0 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\lb9fqbi_nq00ge-xs.m4a.sigrun 34.36 KB MD5: a1ed3bc128f8c6437337b989ee172c83
SHA1: ba711f49169c92127d2b0aad507501431bd01286
SHA256: 5d288d9eea202a7c73fdd18c5dbdb07ea0ca0b26f51ce48bc6d4968af502fecd 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\md100mhw_cfho-.m4a.sigrun 37.56 KB MD5: 50f9b1890a13cdd5b28a5f2dd8697956
SHA1: 02c6a81ff04d86a772c63f08a339b4e30e407960
SHA256: 7d0fed7677614e250c46d02a7fe96673bde80218c4aaac185a28b727d32bd48b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\nneaea5.gif.sigrun 76.51 KB MD5: 5e6deff3687e29bd6fb4739fa1766f7c
SHA1: f47384233b07bc9b2b6df50888d99086ca7f2aea
SHA256: 4244d949ff106189293e2dceaf603501d874e2324b5af25820f39150420a08f4 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\tcmtpqzq a7g0f5fph76.mp4.sigrun 58.93 KB MD5: 4894ecc1a34cebcea747086368047aa7
SHA1: da629b264e8ece9c76345efe355d569528237dbb
SHA256: 0aa1c829eb16ca43b57eaf3afdd357a7387fdd1e71cca96e6a22337928266a69 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\vx4hc7zxgv.bmp.sigrun 13.95 KB MD5: 0cd57bed11591f139112e273e09aa8d8
SHA1: d0ead7ac052e932aa956b8378e9dc1a8435ebb28
SHA256: 4dfc9f9b205cfb33616d704ad4bfab4aa0442bd2c87fc649f32e0bcc5353db52 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\wvwt2uzsrn6hiwo.jpg.sigrun 76.25 KB MD5: 5efb05f381bd8d4a8f5ade028021cf02
SHA1: f2923008310ae578e34fc8b5e1e210c8b1d37011
SHA256: 32c33f9eb17b3db1236df9df6bfde6f5f8463ddbbff7af67bf2245e996dbaa51 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\xx4ymq.xlsx.sigrun 29.32 KB MD5: c5ce322af96a96d3ae1361f14e3274dd
SHA1: 2bf8b2516341b4390fe5a241ff214abcfeee288c
SHA256: 8b52f32dbd455c95a7270d8c2c7c0ced1574b8be1eb1825eb2bab33eaf414c94 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\xy6sf2vnkewicyvfwu.png.sigrun 22.46 KB MD5: 0fb24a716592fba791b8d96f1f9d0a2a
SHA1: 384c2b4634f644b30b763bb61d85d3b4c7d2591c
SHA256: e42b58d4dce8941cd373b145eacc72ac04d9830f6273ca7224448a4bced5bb15 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\yf8rpuossyjgzfx-h.docx.sigrun 74.14 KB MD5: 401fb8bc6f6e725cbf21ed385592f2fb
SHA1: fc11c27b1228654061a3af7dcbcd01dc10b8bd28
SHA256: 36608b07a5a73140711a901b1f337ec67e47b64506e5e7e2b97786ccf3298842 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\zjxv8yw1v3i e6yndd.flv.sigrun 72.47 KB MD5: 0f8604cceb7e63697b8f8253487534f0
SHA1: d7a1bc1df1dac102980275d372ab4fdb243e344f
SHA256: 7c1bb483f2470dead5ec7669ddb963fb2cdeb73132d2757259b910ed0ca5913e 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\_7kezc85ofi6jnbs.mp4.sigrun 68.87 KB MD5: 30d07c198d82e8293d6a893f453f0e6c
SHA1: c32f59cba1c2d24815411bd3668903c0abdd5957
SHA256: 452a59407e43b477b9925c755b2da513669c6465e07947e51478858a5c797dee 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\3xy6rlkdg0p3b3s4q.ppt.sigrun 41.52 KB MD5: 661eed56a372196471e1c5d07e0486c9
SHA1: 455a4d4fbb28f22fe91eba3732195292d440be81
SHA256: 4b9d4ac431395d8ddcda3dd80f8ffd6e5de51418d769be12c9e50ada3c66fd03 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\5r5_9jwdsac7vy.docx.sigrun 79.02 KB MD5: d1c139d87ab77cf774976e1b8391f82a
SHA1: ca9858935afef371e0d1f55789eb7249a29aa9fb
SHA256: ab9c6e671f66e696812b5c1acd56af4fc04d4381e86546183f4da495ecb0d119 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\7jjtak.pptx.sigrun 90.71 KB MD5: f6ecc4a9358b5663def6d3057d423ba5
SHA1: 7add3077ee27d2328718c3213218b7c85d04f048
SHA256: 99ee8537d5c96d6ee07f6cab1a6c29612a003df0ff914ece4b50a6b23040af31 		False
...
Modified Files
»
Filename File Size Hash Values YARA Match Actions
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi 3.02 MB MD5: d2369a28d49caf86438258f7ddbb3a21
SHA1: 34a864e8a7079fcd72a95f0234f2d49faac1a98e
SHA256: eb97d403644d10a8fb986e8085e136d6d6094016f943ac9680634e4c05e79641 		False
...
c:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\winre.wim 10.00 MB MD5: 4cf8919c69ba5baef06ffb1ee6c1c4b1
SHA1: 55af5bcba4522e62e1516a23ad719e90f82f9f8c
SHA256: 9c190472244ff8a63cdf63bbb8a0b02f446a928ca07bb7103069796eb929944f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\0ivgwmel3gx z.m4a 5.40 KB MD5: ecabf7e45a7feeb2b74a59fcebb32011
SHA1: cf880d09fb8fc7dd8a86646f7b199416a6eb9c36
SHA256: eb86d66907f3efee0a396f317c05b9e51fe2d56fbc327aff91039488cde4a55b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\31cnyx6z.ods 73.97 KB MD5: 43446ab896d495e87bad8061ca49b32b
SHA1: 197b8ede3b5ef920daa86c678afc6bd830d6fe32
SHA256: fd3982ace5c2bda4615b65b886768130f45569150dddea372c5a8536df1c8b32 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\7l6jzgfya.mp4 33.94 KB MD5: 57000399556c89ac4f75c84666851ffd
SHA1: eff53449349893000ef5791d182ec106d4a7301c
SHA256: 2d48da81d0dd68d48e7464bfe13c3a964df4427b3f06bf4ecd8f1627fe0fe30e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\javascripts\glob.settings.js 0.52 KB MD5: aa1c19e6e8c4a9fa372d0fe28f9ebd09
SHA1: 7634943b8b79f2a22be24d243e6312c818efba51
SHA256: 7e606e23a64a91207c0cf8b5997b27c5338acbd3ef0ac55144d2d397de8fbf52 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\addressbook.acrodata 5.78 KB MD5: a757f016c73bd06530f78f012385d7a8
SHA1: ad4e8f174b7400c339df20c87a9d23b8b458ba39
SHA256: 828f851c9e93600aeaeebd54bc6fd8e14f29221755bd7138fa6aed184f037da4 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl 1.42 KB MD5: 14bc1fac4d37da126258880b9e3c4d9d
SHA1: 3c23189fdd72b2b86b6c60ecee96703fc548e93f
SHA256: c3e3562d502b482f04bbf3c14c765a1f104bb9f2a92a257976f8d54ebfd0c46f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl 37.33 KB MD5: 9d0cf0318a182911c734ebb539203670
SHA1: 6b603716c6a785e7ac846fc454a9ad38e46ffb2d
SHA256: 860c98032e65b0f0ebb6e78c4cd541328451fd3308f0895ef080f185c32d1278 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\apznc47ztyq.avi 76.56 KB MD5: fafbfc3d34ba52a3fc5b3f0223c33864
SHA1: d05d6f6d8d56ffe181d316552f3cb162bb5196a5
SHA256: 066e5a61297b663ae592b5f1de6b889f6b8c2890b37d69ea8b219496845779ac 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\bf-ckv7r4vw.bmp 28.00 KB MD5: b8a4c46228afa42a79074cc8ae66a2d1
SHA1: f98f02729d5484135398c86a537c2914c28dfdc0
SHA256: 46da2390fd54662826be8e07c2d65e381fc0851bbed13fd1bd621463961e09fd 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\bopnvdbgfhjdsfqhb.rtf 5.88 KB MD5: b553ab17a260ccae4684fedeee5e8800
SHA1: f3a93f4f49f3688c17c231cbc0e411c68f0601ca
SHA256: 7e19833d0742bdf5a402ce135ca28fe9d4e02788260226025006bf98d6464d20 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\btfiddqsb46e.gif 67.72 KB MD5: 2ef5973913b6681404be507ce4e30c69
SHA1: e47705b2e2775e477f741bcb4b4543c93ebfa18e
SHA256: 2b733567340de1d301dddf5cffdea12c2d741fbac994d81eca71877209cdfea1 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\efzxo_h7d.m4a 65.61 KB MD5: 7e0025a02c29462d8eafefc7d9ec3325
SHA1: 12d111ccd847612f856136823f6c0731a3868ad9
SHA256: 2b598f1332f088902d25f0a9827f8af15315a7411a7dd61767c8cd2653512da4 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\e_8hqorvct7_xflkis.m4a 62.54 KB MD5: 8c649711006cd1f8ef479439b8f3bc8d
SHA1: 263bd1fbc70ffda2c2493b50939618f6cfe93463
SHA256: 3f975bde3a32b9ab10fcce197d703c454ef842a3e7b73f4c18d271c24e1eb957 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\hqyoufzgc.mkv 63.62 KB MD5: 49a4b888cfbba989e4c00eec85220be3
SHA1: dfd58663aa853b0fdb4c7843f1c709ce959cf1b7
SHA256: 844a14938b5bef13fd63f1b78e8d999d980100bfe043488ddfaedea1f6a8c2f3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\hrl3ftjkaf24ket7qusf.avi 8.63 KB MD5: 80c44ed4ff494ee72c3b452472ba2132
SHA1: 1f4c8d9bf914752c950ece106d54318a3f9ade93
SHA256: 2972a57c9d633aab6625d695195c53b35a732027a0fbdea6a59479d4d91e9d6a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\i3nogoglgh6cro.doc 11.96 KB MD5: 0a22e5067f5d7026f3d01a84649a8340
SHA1: 932fca7d6c0478417bd9f0954776ab44adc4c0ad
SHA256: b021ebbba0013c49298901f15914c6a8911d76f91d1b7cdf547fee6db82149f0 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\lqnsqq5tr-e84t.mp3 12.33 KB MD5: 3f37ef0644e999843c96d4d266b0d744
SHA1: 3797bef799582e1760a2930b18f45c29377ea9dc
SHA256: b419d8082a1bc7fcdb08a9867c50121b3a67072a26cd474f9ad659243369d415 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\m-xtn.bmp 1.89 KB MD5: 0b3cafb91b8bf66420e6fcdd97706116
SHA1: db95cc7651159b5cda0bc9b4a79ff07b85a67afa
SHA256: 2d240f815de2410dc075ab37afb5a8dee84f383da656c29880b7029d7b550b2f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\m0zkhxb5.pdf 32.93 KB MD5: f69603453cbb0decbb19d4efd77bdae4
SHA1: d05c5454f283d4b432f9075b805d0cc1fb9e0271
SHA256: 6ecf250c0616f01be6678d9a532545eddffaa27b4aa32142f610cd776cc72dde 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol 0.97 KB MD5: 2e496215f8b32acbfff61b70e218f1b9
SHA1: 8b3ecfdf2a498f8fa24e9e4f4c28d03c125d1d54
SHA256: 9056b04cd078b297c49351c4d397a0fbc4987b24ba38619751585fef8468c8f8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\metjnf-r.m4a 59.46 KB MD5: cdc106444c5df74235a9645f03f2de19
SHA1: d8c6e485d8551163efaf0dc77f9bf8d6a3e3a8bb
SHA256: cc137fe548fac163d06c79927de1a3e7b6793bcdd04c523b3022d575148abe7b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f 0.55 KB MD5: ebf34cf957e8ad1962f69c4ab37d510d
SHA1: f2132093cc39333239ce735b6a29b0ef7cf9eb71
SHA256: bbc9beda6d71b8e681d47f1e5941e4dc0f6e67ba355b442a6337c40bd754d870 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f 0.59 KB MD5: 4fbc6215915eef8bda8ab8839d370a3f
SHA1: 672b3e12bb19dc965092cfe44b025fa37e60f2be
SHA256: 96502cdbb0dc43cc0484116a6b92ec139b46e506429be95cfa4bebe9de6c9fc0 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\crypto\rsa\s-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f 0.57 KB MD5: 3af6a1a5975a5b71d2c418816ffb7eec
SHA1: 1be94e191cff35436c6df59242dbcfef188fa1ea
SHA256: 54bb2004231099a3bb6dfc538e75f939e08a17dc7eb59f54f8f3c4918eb5182b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\document building blocks\1033\14\built-in building blocks.dotx 3.99 MB MD5: 37e37f7e0c2bb0fd48a4a9c1b537d585
SHA1: e0ecb2fd8648fb697a5dbfecd9ab81580bd56d08
SHA256: 62e06d1c8c1cb96dc98c554cc6ad16d13cfa1897e1df4e8e9465f99d95d15c04 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\userdata\low\index.dat 32.51 KB MD5: e9998b0e2480692948e75d6bf1c2105c
SHA1: 28f85f1270e3e6a0561f8a1c4d397da4709fb661
SHA256: 48ca1b932cab41a41a2763df4b9d4ae215c8190ff7418fe54ee67b3f7db82b60 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\ms project\14\1033\global.mpt 382.01 KB MD5: 1c36c48bf4f3218974f034bc2efef4db
SHA1: 6e5de8c3d9dadd0195a04e9698df8547244acf0d
SHA256: bc825c67a05956f917c0231e8abdf366eb2bd363d915a2d0caf7306cd2ae66e1 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\mso1033.acl 37.38 KB MD5: 2b1e8740931651ae318f82e6fa470ec8
SHA1: 6897c3d89daedc11f07a17ae71e93bfba3603677
SHA256: 03b4948e0972eb52c0b9040895a8ca1c1b39adf5538c92abf929065622397c3a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\global.lnk 1.91 KB MD5: 10494e1c31a953cc1fb20185f433509b
SHA1: 1eddb6da60080bd1d19c4cc99ca81de4a72011ef
SHA256: 0d02f3f815cafb53f7166cb90983b5e522ffe0d7d904ad3f3736a16b37b7ddec 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\index.dat 0.56 KB MD5: dbbd60053e546d22a335e760e72ec7fa
SHA1: 23713fda0fa2a486ee6a16dadc513dee99ffbb47
SHA256: 3ee071833217ff4a27245b87bc2962f2e62c8de48e1b615f9e91313d3d2daf0c 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\office\recent\templates.lnk 1.62 KB MD5: bd9de6a7caea3124ce74568b06073a13
SHA1: b2f3b344f422d3ac7a7b18ba84c0ecfbf7397f91
SHA256: 2a987dff0c13a2477b3de756bf525842f51b5300e15f4aca88ec09ab6f0f8d1a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\outlook.srs 3.01 KB MD5: 4c8bcbf9f535952ad18fd08ad538da40
SHA1: 2beea996397a382292b2bdf9f9dada65259796ef
SHA256: f1218b4035729219a6803c60b0cf2eaeb2e2cf49f806dea50323794e29349798 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\outlook\outlook.xml 2.92 KB MD5: df0b545f827412b59b453ca67798bb1b
SHA1: dc00df7df924e594c99c8fb89ff6085232bf4af8
SHA256: e0003a47e098e8f292350792e8583e4383d9406d68e344b4351d0f233c5a6607 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\credhist 0.67 KB MD5: 6fc667bd7b1481b7ff8ca73100aea5e7
SHA1: 562e58dc718136e53e7830482fa4f5136546ba88
SHA256: 8a34fe247fa95a9a2ac7385864a3a7f1cf6be24e51ea7e3acf1aa8cc9383d76e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 0.96 KB MD5: 24441cac752f16a63183087d6c00e8d4
SHA1: 63ca07a7f9b3e27f866b68b3d19edfe1a68da70b
SHA256: 0b72dbb50963ceffbf0e36f304ca4be9482c574d03a2ab22820fb0f27e7466f6 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3111613574-2524581245-2586426736-500\preferred 0.53 KB MD5: 58b1d316ad683140f301cebfea9c8cfd
SHA1: a6cdb2b784d3670f216ac812adb372dc344c029b
SHA256: e3639b996ba7f009df748e670e3c7f001c0f2eaef1090ec5f815c90aeb2240db 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c 0.96 KB MD5: 990c33b81685a60cd100db3552ee0bac
SHA1: 33739ab664871ef1d8759cbc5874f924c547d022
SHA256: 37cde366fa261ab4921f815269133d34c0ed1685d21db65bfae8a64126ea3074 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d 0.96 KB MD5: 36cb0022c71ab37ee31e4b63966e0179
SHA1: f5fd3dadb994013921b884a5ff8686bf954173d9
SHA256: 4934aa157c2b9b20a13f2cf0efa44e7a9ac90d58e1daefcfacf1ba185418d7c3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d 0.96 KB MD5: 1bced8f76b3989e3f83e94dcb284aa3d
SHA1: 53b8b2346486c64b4cad1170e93498f288de7351
SHA256: 0a9cecefd2deb457f71d8dd6f1315333750ac13d636bbd06554409fc8b6df070 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\s-1-5-21-3388679973-3930757225-3770151564-1000\preferred 0.53 KB MD5: a9a5729657e5c88552e905fa323cbc1b
SHA1: 15adcca93e790330c2b4ad0238e5f06d971f58d5
SHA256: 58e0921eb36f603d393d617f63342e40758895c9117783a73f7527ff41547102 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\protect\synchist 0.58 KB MD5: c43a3a21c33f1a98e4f777a26df5b6f3
SHA1: 81cc6ec4adb9cdc00a0cd94fcca45eef40f97250
SHA256: 2f4899c046ad999c39b9384b5530ac8c5532f4b6924051dcca027c08ad67211e 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\publisher building blocks\contentstore.xml 0.67 KB MD5: 0ec047dd26cf98fd7e9961a1dcec4482
SHA1: cde4bdebfbec803ad189d9033eeb475cac106dd8
SHA256: afd3b3cbe77b6332b3418df03d31385bfe38699a47f7ad14868707797c19f7f8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\templates\normal.dotm 20.66 KB MD5: b88f6a36161d0295eb4893f1d4154790
SHA1: 79ab7cfc76751f6bf6b0bdc5764061ba2e8fa105
SHA256: 79e1b34d6a05b2f2dbd067e1b1876b173c6deca5ad1fe62da020701f2acd74a8 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\uproof\custom.dic 0.51 KB MD5: 6263b37a1f025d660ca354470e379398
SHA1: 8d97b6491d5378338c25ecea3c0fdade4128c0e2
SHA256: 3caaf451626cf84f6ca754fa34b5d9211f0a60ffe55a868ed0584ebb85bee5e3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\crash reports\installtime20131025151332 0.52 KB MD5: 52255b343e791ddf94806c6bc974cf76
SHA1: 3bd85ad122129faa566c0cf0b6a13cbb00ababcf
SHA256: e56cf900ecd2d384375fd83602392d2da1741490e0836ce0f1aad09fb83ea174 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\addons.json 0.53 KB MD5: 6d6a3960e7aaddb5f67a83cada04826a
SHA1: 27e5ea543156d4094e186f468ca922861aad2f9e
SHA256: 70b992eeb982fbe80e7712d0d7931ba98108eaf3b713c862a4a306785ef0b060 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json 3.47 KB MD5: 8d49c3f8063a976de15af6b2d56f0717
SHA1: 1074824d25e891f93f0f8d8a1469be7602acc831
SHA256: 3fbb6cf048c74b33fdfee645093e979bbcbd37dcc4829bdd182fb08913d3d835 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json 3.47 KB MD5: 018b1bc02a949dfbf6fa9449d14c481c
SHA1: 02ac456bd1be9d0beec61e5dbb829db1ee0e59c0
SHA256: 2d8118abf7992f69785c8f51260943d56ff17724221b2d9a22261c7544e6bc4b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\cert8.db 64.51 KB MD5: 121702d8f0671fce05c68af947ff58de
SHA1: 8b360fc76ef0677aab388b56ddb0ed43267f967f
SHA256: a4edc17359ff5a81b5740917e29bdb78cc25a50e1c52a46fbe12206044dcd961 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\compatibility.ini 0.71 KB MD5: cacb4f1b2552408ea891e64e8cb3e9f3
SHA1: f3c369d87038cd57b57908e45465671bf2a20a43
SHA256: 98eef3721e3911d32b5e88e262604e01864d9a46180df4f1e407edfbf227d362 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\content-prefs.sqlite 224.51 KB MD5: cdc830464469d5cfd2404be3746538d6
SHA1: 473f3086d3c45249bed5f6c2e3f282997f4537bb
SHA256: 9d2b2416cdf5f0a1237f5bcc5edfd7890b0bf8574abc9248320adb78082ad5d5 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\cookies.sqlite 512.51 KB MD5: 57dac0db5e4f26523dd68e4de43085dc
SHA1: f21df099c5cb98b5f3a53169c28270ffb29efa5d
SHA256: cc626b31986072cec2ffaa27c4c9c8153a6fa0b80ead2d358b45c87118d739e3 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\downloads.sqlite 96.51 KB MD5: 84f050f869a7c620ca4b6b30930f75fb
SHA1: 628516fae82706d9025822460880c31763b1a9e7
SHA256: dd85df7a965c71c4cf589ad06af067ddcab4a0fdd1af80d3063ed81b11b6b616 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\extensions.ini 0.65 KB MD5: 6d608b5983d409ff334fd802a2ebdde9
SHA1: d807697e6e11607a7f91e83d0b98a4e75dfc4ce7
SHA256: c01ab12a416a50f4860ac7b648c20773078fe1df71ed8168f7c0830977a1fe2d 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\extensions.sqlite 448.51 KB MD5: 167b1238e09d4f59260b8ebd0f6e96c3
SHA1: baa634a373b5eb62f38941e2ed61ceba849337fe
SHA256: 7b806aab018a3c65811099c82962d8a669b9a87e666ac7844d2bafb80b9ba163 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\indexeddb\moz-safe-about+home\idb\818200132aebmoouht.sqlite 640.51 KB MD5: 6dfb0ac15f8b0969276a60a3b63b3d31
SHA1: eb3b1e857969f2e561fb81feae10b7b648f73fdf
SHA256: c40c246b727a672d9f9dd26be73078accf11ed53c3131dc669e9009e9a089878 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\key3.db 16.51 KB MD5: 089113d8d1f9a0938865404b700c1245
SHA1: 60470b2e4b6e518d10c51a471e40e88abbebb56b
SHA256: fd1fd221db80ec317bc6d0f39356041dfabc9c37026e6e5ee879f1232bfbc63f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\localstore.rdf 1.76 KB MD5: 0003cf57ad16c77fcb331acfb021b605
SHA1: a0d7fc60dd7e6b0f652c02561abdf87a0e5d49da
SHA256: 7e8fe18c2755b6327084bc630dd34d9a37e7cd62371bbd02b42234329c22fa61 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\marionette.log 0.56 KB MD5: ffbbe6ab6df64644766048e675c2761a
SHA1: dfb3822f450662e9d61969a5a7fbc916788a85e3
SHA256: 610ccc75f915d8f70f895834eb1dce2eee9c75399a7ced7b0cc96db3dd44555f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\mimetypes.rdf 4.25 KB MD5: 0fade7c3189a0d2912f0c0cc2960c3f7
SHA1: 91cc5d55a4edbcd0841a1d98cad1627a67f13169
SHA256: 51b2baaa8318847674a522ca91ea4b57368566662cce89a05c09e970c1758879 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\permissions.sqlite 64.51 KB MD5: 2ecd27a23984934402b769291eab7656
SHA1: f690f2507dd003df2b39d9ef7fa6dc04e897bf76
SHA256: c14cf09f84337a4c3e781687d875eaca65bf23c27909bab5ac168f004f378f0d 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\places.sqlite 10.00 MB MD5: 5d0b4ef69161691970c93eae762d738d
SHA1: d9d7bed0a7600c7add7f19750711f16db10dd4ea
SHA256: 838e0d53ae29c73443438961469c0d34b7dc3da8f92f5499e84f977e2bb44813 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\pluginreg.dat 4.03 KB MD5: 9be9ee63cca5512a90e13312eb52b1d1
SHA1: f0053b35dd7cb92523404d16f9e2fcc7f0897fab
SHA256: 08dc211c6faaa6409f2859b040059d94345961a5104d6c51a7dc358c2f216e83 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\prefs.js 4.47 KB MD5: dbf91f5e823ab44cf58d16897076ae54
SHA1: 007bf07a833386c86c2af87b2d079776a93bacf5
SHA256: ccb4d08d2cb63a04d3c915e756c8036fdebd23132b785abd4774e9959471935b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\search.json 16.89 KB MD5: c3a2c5e0403fb47fac880f010f6d4e2e
SHA1: 99831285ca166e49b3e6ed78db2a0e224ead0a31
SHA256: ab84ae98d7d921126fbf21a5d50254e63dfd813ddcb3eff7c599f728d3d6e2b9 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\secmod.db 16.51 KB MD5: 715d1e35171d3d6f4049a9e544558208
SHA1: 3fbaeeaf405414c12a30f69e232f4d2ed1be051e
SHA256: 40e31be6f586510d0c544bcab30da9915c34eb2864a9456975edee63479e7165 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\sessionstore.bak 1.47 KB MD5: b19616e96a9832caa681ecf4ff48c846
SHA1: 8bdaa3dc438d9f2139f26910ff317763e8f462e8
SHA256: f535256b2dbb93fb3e849199c23e77cd93bb33e620c848913375f59eb00b7913 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\sessionstore.js 3.45 KB MD5: 83a0aadc157168f0108fdf0df60b5a50
SHA1: 8ae384cfee34de5072cf4f03aebbc60b93971446
SHA256: 8e09498747df81dd7c5c1cbe199149e46c87ec092fc63f7f70f115a4dad1612c 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\signons.sqlite 320.51 KB MD5: a89ed2cd3b2ebd7c16a00ff474aed6e0
SHA1: 270a9ee734a17e506f57656df1954eb81ea0d943
SHA256: b1d005e7cb4eafa02891621b3be6bb58dd971581039ad7a8b190163ad00ad108 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\times.json 0.54 KB MD5: 8c915c572d7f3ad374805161f389b1c6
SHA1: dc2db8f4279d9c5c300c295f828c84e51393f6f7
SHA256: b464e6ee116df79ea2db78838aceecb1f1b1e9d4df83910bb034b8f9ca6da398 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webapps\webapps.json 0.51 KB MD5: 97bde50d73274a3f3dd79cab0d10b62a
SHA1: 4ba0f6391488a5954fd46135a06a61b7af9bae80
SHA256: 75b65e8b1692672f926ceafbff55a21bbb063dee95289549feb5e244256f5f0a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles\silmbjec.default\webappsstore.sqlite 96.51 KB MD5: 3005401abd5b1e3a671a01352ddbdc34
SHA1: 83854f17b62225481c05d6651cb6d9f9adf4485f
SHA256: a80dd37df3a46c7291ce786867f53ca22c3082a5b4c1031d64367951d53bcaae 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\mozilla\firefox\profiles.ini 0.62 KB MD5: 5eb96b7e7bd5e08e18f8623f1e9bec6b
SHA1: 09a7c8ecbf02b19161ac5915b9b0ba0d77fd5d9b
SHA256: 7e3b3baf800f7f36331b06d427c0d7e504febb37abe07e17a4a19a7c1f366027 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\n3n8fe.bmp 16.52 KB MD5: 51ab4edbcd84b279fcc7de7d6c85eb9f
SHA1: 7a8f069588b1e599b41da9dc09bfeabd7fd013d4
SHA256: cc4d72dbf187564a89b5e4b2d4f9565cc304bb79c1b984138b57f8ca1312df65 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\pewbcp0.mp4 100.09 KB MD5: 2f8ea4b1aad58644a448b3cafa6b5ef2
SHA1: 08445288e93a696c41ba733f5049627b8a8dca59
SHA256: d947a5ddf224df3a5831692306d6ac7cb4ff2b6f384724ef923de32963ec87c5 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\ptgwon39bwss7g3.wav 32.77 KB MD5: 3d59a288bb50a338d337c7f186a3fc19
SHA1: 510748a9f1f8c2b2275ff1ee1815ef668722ea9a
SHA256: 55f0c8a8dde47ce8a5816b4fc202ed2df3180410d339dce9d8b113f4d8c54460 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qg4x8sfnychm2b1m.mp3 38.04 KB MD5: 138278addb70f98b7c7eb533b2a08250
SHA1: 2a12d997a6ab59b226b311af8d6e302c7823efcb
SHA256: f5e73ed9383cfb51ac0cc3f6934df58789fcb65b03b514d8808da771445f463a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qgsi2bhgiwnojo.jpg 59.34 KB MD5: ab72909d66b345664cbdb0c9dcb6d8f7
SHA1: 7d7f762b9e311811d4eca1def87a155d792c0a18
SHA256: d650dfcf006010b96ae3bdcf9c7e39b000081acad1ee73a65e12c78a9042bfce 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\qkxv9qswvxny3pgepazt.wav 2.35 KB MD5: 8bc7ce313595fd90190ca5778f21eb88
SHA1: b7db2336fa4a578277f3fd5ab75c96d247c15451
SHA256: 8cac818a5317591134d70803cf7b9620de35539f7304635d7b3f4e0fe835ea6b 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\s3ogtiz-9dwah.swf 4.82 KB MD5: 80e726e6908850a27e47ed385be60257
SHA1: 8e6102018863589ff464d6545d46f3f91ef2754d
SHA256: 4d06ece6a18c0e2e9b8a8088832b925ab9467263b80b45dccf9c59f8edaf6c02 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\tbcif77pzt.m4a 83.23 KB MD5: 3861fff5490e1f3b767a88663d259f82
SHA1: 7b7fbe70c6d5c59afd772f55e5ca90ec5d367a8b
SHA256: 95e6450ed210f791c1d6f3790cb7da4c4940f3a41d133ead561b4b45f1052356 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\u6tucobnq7fxzifsu.docx 28.32 KB MD5: 8c32c0d8f3b6388257a1c64a0061f027
SHA1: a1f2fe99eb67da01fd597a5910084440576290b1
SHA256: e67958b7dead19a39c03dcbb132b08e8377edf35e67e1e31651cca554da7aef7 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\whhrq-wgvscgaidxujxh.png 6.49 KB MD5: 3940a15f987a6bbafa3cb83013dc1f2a
SHA1: 6a84f4a8e148d3b4620a68dbd34ce530f8159615
SHA256: ff148821b2294162549a6736dd492eba7c8cbb832e209a90780e59fb1308d80f 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\y4liqwysv0j.wav 69.98 KB MD5: e82ed74053c8333c196d1e1167e41f98
SHA1: 1e0bcf3774c2a375cdc2ed0a5776cc6f9c729c54
SHA256: edf1420cd9c1656f686387e0b4f7394f24a4b46166fe9040eb9cb71b9afe3e1a 		False
...
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\z2cfga3x9yca5.flv 27.08 KB MD5: 0add3573816d5a6540dcd731ba97ef02
SHA1: b1a29f3efc102e2ed936cb2846f1bb4b3c8c7d69
SHA256: a6186cb6987c666c03f7b2a8c4a7063faf7d91c845d7f7fa87efbd4b33d7746b 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\aclviho asldjfl.contact 1.66 KB MD5: 2df25c7144696ebbc08b1858d56a423e
SHA1: 58d813bedd077c0891a54b0dbc6c99ecb06064e6
SHA256: 40ebf5674def2369723ddf51b2e7f9930e8d2181fc3d98a147f388fd488d36db 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\administrator.contact 67.29 KB MD5: a7b35d3a9329f124d9a3a9b7b04a098f
SHA1: 6d18c453f9e1ef90df523bb8bd110a0b5346354b
SHA256: da528bd30761d77e88b93cccebb2fc297b861722921330985fb82e1987480dbb 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\asdlfk poopvy.contact 1.65 KB MD5: 62fee5cc5ae01c1349f01b081d762b3a
SHA1: 8935ca14d0300d91f0c2f1c5ff254ebe6404305a
SHA256: 8c5a5b01325c75743c8e8a6747a5136130d21a7c36149595163e58375d693e02 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\chucu jadnvk.contact 1.66 KB MD5: 6a86b7d8327aca740412cf0398278489
SHA1: f21c01f7ce5e3578ff56eee02a9556b8077de68b
SHA256: 6457b30da62eaad9e8c10173c1c9a68f5a241e7e23d53437d304fbcac312f05d 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\lulcit amkdfe.contact 1.65 KB MD5: 870e9cfdfc1eb960c7eb507e2dd31156
SHA1: f9fab4accc6c7d45d96bef2fa577b2ebeb0d8559
SHA256: e2fa3d1eb2320dcad18fc0b3dea96eee72fd3cee505f738bf4dc0306df3c3e2a 		False
...
c:\users\5p5nrgjn0js halpmcxz\contacts\sikvnb huvuib.contact 1.65 KB MD5: e0586ffbb00782f3c116176ded7e5190
SHA1: 2ca66dc4b317a108bb2622511358044dc2179529
SHA256: 16eab74b2792f9806f1a0b932320ea719d1798fb2c58df8a09bc1dc849de4c3f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\2vzsh1uctwq_-psbgdwb.odt 56.20 KB MD5: b908396e41900cb79705feaff882cf77
SHA1: 109c776822b7d1a3df0a292238140a82b6ade7c2
SHA256: bdb100e7dc781472e29d7b193d9a4639cfcc7a79af555be1de67f59a831ad265 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\3 ik_1n4fkd.avi 96.53 KB MD5: c57d21e5b08af1c46746770e5f6584eb
SHA1: 864c3eca27f965a00792c11923a80ca3a5fb5212
SHA256: a8b25f51ac0e703c42a33670b02434554903770c2be074647d93e223e9cb31ad 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\3lfsixinsrxonqrcv1v.doc 26.34 KB MD5: f859e22f1b21a13d43f8940f34e520cb
SHA1: 0c0e31285e5d57b76b6b0809a03ec5b1c423553a
SHA256: d1bbdb74065eb20e626c6ef9052519f5f909fb5c6a4ce01f13366b6ce83a9244 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\4vdcku8n1dr-p.jpg 10.22 KB MD5: 3071c1a2a4c7964ffbbddd94395bfaf9
SHA1: ff5e62ce9d89e3cfe5ea9cb24d85222550e6a83f
SHA256: 54caa7320644dbd478e621b324017fe1f431a1857bf50ab0cb7e5e8e7d52ec4b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\5dy2ipxrtc2uqydppd2.jpg 10.21 KB MD5: 7c876409364b84cf0468b8f4a6b03ab5
SHA1: 866478eea04ecc521fc3c92e2e849169a7467bf9
SHA256: 1e688d0a4ef78b1a92a3aad93b0d562583b9171bcc39bae136e95e84a75459b8 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\8asuoplfamr3.png 68.81 KB MD5: c9046c8062027fbe99809048620e92dc
SHA1: 8955371005d8178a357d8c9d241091b49b23a34e
SHA256: e2b6ccb2906e8610ff8e23179bfd8384e33cfdb87c2451be05f60b3e3fb8762d 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\8i olc-r5.mp3 14.42 KB MD5: 0c8e83ad6baa64b9fb6ea6998b9f2fc6
SHA1: 8d9002eb8b57e5a86313eaa3bed3a03c39c87f3b
SHA256: 64a9e6726224f80d6d83be6524f95b20a1a872506b5a33af1e4e586afea92cc9 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\eckaybf8s.mp3 95.58 KB MD5: 33cecdbd1e32e818c9bce1d24e16f90e
SHA1: ce706cd1d2073534b5c317b91ce85250eb9f131a
SHA256: eafa91d01078b7d102e2bbc4038eb96b43d832fde5357c1fe0c3741f6cad0f62 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ggnnutddeb1nm8mjbb2x.mp4 89.64 KB MD5: d86bb05e9ec5aa53dd24028ea4dcc395
SHA1: 1f5e773666c5e18c69b98a8125d41108347f5e80
SHA256: e5fad38162eed9279fa60e7d1e853e57cdfecafc1e5a112f2749156a44479ab9 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\gnhyqzuovfmpez_yz.ods 74.80 KB MD5: bded80b315f9e726efe38a56cb51458a
SHA1: ebe1ce8f6b3df084d5b1fdc2625551b8eab054c1
SHA256: adbbba67601e068dc1e34ed33b7dff67704fe61e179ecae860289282258171d5 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ibw7b-ro.mkv 66.76 KB MD5: b92a1aed25053b914454ac17b40716f3
SHA1: 65119b1a103062670522b98412e64cf4b6b1d430
SHA256: 2b141db6e71e736d3e86e01d9b90ce5fcc26373dc255216de508111d46fbb07f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\ik_0e4m9ys8gjr4lfseb.flv 37.35 KB MD5: d3dcad1e35a8b12d199a4cfd100eb6d5
SHA1: 61386dbdfbdc0a77889d792a5c0924cc7b406a4d
SHA256: b12e5618e9285b7d50564710a7c6218678c617646a1f99a92d15d2f440e6b2ce 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\0q-evsqx66qcbe2j.flv 30.92 KB MD5: ecca85a418a951b0bea4fe002f5351ee
SHA1: fba3fc8a4f9e45beba0100a45d1a41879b970f0d
SHA256: 2ae08595ff32fd9fdc1a2c7f726d90caa22444e0b378c16095d43da561ea53d2 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\gxdr7c.swf 14.94 KB MD5: 993ac39f76d3dd7e9deb12165bbf9b26
SHA1: 26312afaa6616d48eb4ac46ceb37ed983bde7417
SHA256: 91c1c7d5b0fef91dfd914a88cf48624122026ac3db881124f7a807a855c2b798 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\hwktm38kmcixdd.gif 18.53 KB MD5: 8145305cc70d07c082bb5204cdae8c97
SHA1: ee307e5cbf49427806a91abd7f40336e4a78dc51
SHA256: f9cd06a5b6b76595e588457efded25bff9b68130b0c17c3c0217d511e1a3491e 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\qzix\0fukg.swf 23.35 KB MD5: 55dc2bc7194e5fee134d5b07a7e65cbb
SHA1: 9cb39cc0b3ed185e26edc02d77133468ceae61df
SHA256: eaa3a218c535ffa8a07d97a9926497685afe31860a0095ac27112d0098c3b793 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\rszn0v.mp4 22.08 KB MD5: 3eef234d271b47d16a94b13ced8ffbe0
SHA1: 53c6ad17dce9e558ca136d3e49ccb7ece1a73bf5
SHA256: c02c00e7fa4fe0ebb94d4113f837c7076dd448175eb13163aba84dd180528527 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\7l_p\voed0.jpg 23.88 KB MD5: 32646acd5bcdbcf96edd777cb0088dd4
SHA1: 969e846deb24f078a0703c7c4080871267a9fa9d
SHA256: dcc0e17268b0298cbc5aa6b53c06cfa8e1f04849ca532b5ff844e525e41a934b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\poknej.mp3 10.53 KB MD5: 36124ea4579f191fe823303de646fbc4
SHA1: d1ace4a528658878651df28e7a38513d95d5f3d5
SHA256: 5a18395eb92ef2f12f08c07c999ec10184421b3ff6effd47240a58acf04bcc66 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\qq56l.ots 42.03 KB MD5: e29ad373a2f27bf4e90dcf0493ccf562
SHA1: 5cd57d3098e70b15230429cca126a80dec8a68b3
SHA256: 527c62dc6285c52d590ba12e671b43fc5baed20d421c6ef0fe9903d4864cdcef 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\8kawuygwd\qu2.csv 76.68 KB MD5: 07514cfb5356784b7cb3fdf88a732f11
SHA1: 798c674d43c1e229ec0238228d35c324d554064b
SHA256: 9ac6926f1e2c0177a801aa081703be5c80ec2c5e504b25e295df52953da21e90 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\9xipoeapy_9bv4e2u.wav 19.18 KB MD5: 24971d48c485771d4cfbaf8b15a5fa97
SHA1: 678b3f5853e6de5dd5e517e716993cbf257b7956
SHA256: 911cbe91475a7d4963b0610b76b83219f1f1df5446aa8de78cb8b4f81fbeff9c 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\dvdyggmdkmkre.wav 19.83 KB MD5: 9f7261d1574687129622b2ef87635ca2
SHA1: 3c1e052bad520608ecab7b066ed380d414ef394b
SHA256: f88a69af0864beead577f722cdaeef8da6eece7a6a2a164cff3a30f2bf5fc522 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\ioki yd-8qb13.png 49.70 KB MD5: 2cfcc333e79bfba38f54e3f0f43a5646
SHA1: 548381b2cd4092b98033b57649e03b78cbcba58f
SHA256: 2797d4c2b2df284febb28358b3ae5da54b5f667f78ffcf27222555458d649f8f 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\2wseenoue.gif 32.29 KB MD5: 38527e3610e08e57c2ad475d669f5141
SHA1: d1e7b0bc1f3c63c04217c1cfd73a78abcbc45e13
SHA256: 402ec04c5499a1b6627bbadb0c7d0d4ec1f392981001d2f66e08df3f48e502d2 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\4as58sstf.mp4 71.67 KB MD5: 4466e9b3b1926510974b7ebaf40c9e54
SHA1: b90d406efbb1ec986063c0c8b0cc9b186fb687e0
SHA256: c69243770221a41cc95967e594fee3b6f5743cd4cdeda04ce694f5fdb2b8557b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\phpddeaaqz1eul5\yyabkn7df.m4a 84.00 KB MD5: 8d77fe195a56b29f0dc9944706c33c96
SHA1: 97852ed73c6a024a35a2d2eaa5f7750a37d9e1ee
SHA256: 522b58e0526e9356db8bc54523b8d09d8dcdeb3566e54b0f2ee4f83f6040d30c 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\rbnzcwkhxwntck-9.ppt 33.78 KB MD5: 14aeca97db654a9d24446b1951f85c53
SHA1: 2d76ef627d42d9a7389a2528521566faa5d4c7f5
SHA256: f0a1aadbd841227d5593caeefb31da9d81289977a522437373200c7e1c2a2ace 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\kctiq69bayn\rnra7r-m.bmp 56.59 KB MD5: 54fcef26b745b7f6c2dd065dfae5a1d4
SHA1: 581c759aa118006ef1ec76c7bd74e5004c89c8bb
SHA256: 76727b31e3f8923646aedb13cbba4177cb03bd8dba98591d59ec207743ea9302 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\l9d0vqdafkd_yzfjw0ld.png 9.99 KB MD5: 01fc7e7f897da2e424fd94b01cfd1dce
SHA1: a168c234b972a7c3f501103cc36d6b3c53ccf939
SHA256: 435b9307580065d1c95aa09b121d41921f7c19ac00bff8da13cfb4d97c97cee0 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\lb9fqbi_nq00ge-xs.m4a 34.36 KB MD5: a1ed3bc128f8c6437337b989ee172c83
SHA1: ba711f49169c92127d2b0aad507501431bd01286
SHA256: 5d288d9eea202a7c73fdd18c5dbdb07ea0ca0b26f51ce48bc6d4968af502fecd 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\md100mhw_cfho-.m4a 37.56 KB MD5: 50f9b1890a13cdd5b28a5f2dd8697956
SHA1: 02c6a81ff04d86a772c63f08a339b4e30e407960
SHA256: 7d0fed7677614e250c46d02a7fe96673bde80218c4aaac185a28b727d32bd48b 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\nneaea5.gif 76.51 KB MD5: 5e6deff3687e29bd6fb4739fa1766f7c
SHA1: f47384233b07bc9b2b6df50888d99086ca7f2aea
SHA256: 4244d949ff106189293e2dceaf603501d874e2324b5af25820f39150420a08f4 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\tcmtpqzq a7g0f5fph76.mp4 58.93 KB MD5: 4894ecc1a34cebcea747086368047aa7
SHA1: da629b264e8ece9c76345efe355d569528237dbb
SHA256: 0aa1c829eb16ca43b57eaf3afdd357a7387fdd1e71cca96e6a22337928266a69 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\vx4hc7zxgv.bmp 13.95 KB MD5: 0cd57bed11591f139112e273e09aa8d8
SHA1: d0ead7ac052e932aa956b8378e9dc1a8435ebb28
SHA256: 4dfc9f9b205cfb33616d704ad4bfab4aa0442bd2c87fc649f32e0bcc5353db52 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\wvwt2uzsrn6hiwo.jpg 76.25 KB MD5: 5efb05f381bd8d4a8f5ade028021cf02
SHA1: f2923008310ae578e34fc8b5e1e210c8b1d37011
SHA256: 32c33f9eb17b3db1236df9df6bfde6f5f8463ddbbff7af67bf2245e996dbaa51 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\xx4ymq.xlsx 29.32 KB MD5: c5ce322af96a96d3ae1361f14e3274dd
SHA1: 2bf8b2516341b4390fe5a241ff214abcfeee288c
SHA256: 8b52f32dbd455c95a7270d8c2c7c0ced1574b8be1eb1825eb2bab33eaf414c94 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\xy6sf2vnkewicyvfwu.png 22.46 KB MD5: 0fb24a716592fba791b8d96f1f9d0a2a
SHA1: 384c2b4634f644b30b763bb61d85d3b4c7d2591c
SHA256: e42b58d4dce8941cd373b145eacc72ac04d9830f6273ca7224448a4bced5bb15 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\yf8rpuossyjgzfx-h.docx 74.14 KB MD5: 401fb8bc6f6e725cbf21ed385592f2fb
SHA1: fc11c27b1228654061a3af7dcbcd01dc10b8bd28
SHA256: 36608b07a5a73140711a901b1f337ec67e47b64506e5e7e2b97786ccf3298842 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\zjxv8yw1v3i e6yndd.flv 72.47 KB MD5: 0f8604cceb7e63697b8f8253487534f0
SHA1: d7a1bc1df1dac102980275d372ab4fdb243e344f
SHA256: 7c1bb483f2470dead5ec7669ddb963fb2cdeb73132d2757259b910ed0ca5913e 		False
...
c:\users\5p5nrgjn0js halpmcxz\desktop\_7kezc85ofi6jnbs.mp4 68.87 KB MD5: 30d07c198d82e8293d6a893f453f0e6c
SHA1: c32f59cba1c2d24815411bd3668903c0abdd5957
SHA256: 452a59407e43b477b9925c755b2da513669c6465e07947e51478858a5c797dee 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\3xy6rlkdg0p3b3s4q.ppt 41.52 KB MD5: 661eed56a372196471e1c5d07e0486c9
SHA1: 455a4d4fbb28f22fe91eba3732195292d440be81
SHA256: 4b9d4ac431395d8ddcda3dd80f8ffd6e5de51418d769be12c9e50ada3c66fd03 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\5r5_9jwdsac7vy.docx 79.02 KB MD5: d1c139d87ab77cf774976e1b8391f82a
SHA1: ca9858935afef371e0d1f55789eb7249a29aa9fb
SHA256: ab9c6e671f66e696812b5c1acd56af4fc04d4381e86546183f4da495ecb0d119 		False
...
c:\users\5p5nrgjn0js halpmcxz\documents\7jjtak.pptx 90.71 KB MD5: f6ecc4a9358b5663def6d3057d423ba5
SHA1: 7add3077ee27d2328718c3213218b7c85d04f048
SHA256: 99ee8537d5c96d6ee07f6cab1a6c29612a003df0ff914ece4b50a6b23040af31 		False
...
Host Behavior
File (2241)
»
Operation Filename Additional Information Success Count Logfile
Create C:\ProgramData\4E1AA5A1.lock desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_DELETE_ON_CLOSE True 1
Fn
Create C:\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\bootmgr desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Config.Msi\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Config.Msi\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Documents and Settings\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Documents and Settings\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\MSOCache\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\MSOCache\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\PerfLogs\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\PerfLogs\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\PerfLogs\Admin\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\PerfLogs\Admin\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files (x86)\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files (x86)\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Recovery\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Recovery\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\System Volume Information\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\0ivGWMEL3gX Z.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31CNYX6Z.ods desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\7l6jzGfyA.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Collab\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Collab\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Forms\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Forms\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\D5NTRC6R\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\D5NTRC6R\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Headlights\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Headlights\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\Dictionaries\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\Dictionaries\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\LogTransport2\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\LogTransport2\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\aPZNC47ZTyq.avi desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bf-CKV7r4VW.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BopnVdBGfHjDSfQhB.rtf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bTfiddQsB46E.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EFzXo_h7d.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E_8HQoRVCT7_XFlkIs.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HqYOUFZgC.mkv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HRl3FtjkAf24KEt7QuSF.avi desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\I3nOGoGlgH6Cro.doc desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lQnsQQ5tr-e84T.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m-xtn.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m0zkhXB5.pdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7Y3F7QB\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7Y3F7QB\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MetjNF-r.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\AddIns\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\AddIns\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Credentials\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Credentials\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\XLSTART\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\XLSTART\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IME12\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IME12\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP12\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP12\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP8_1\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP8_1\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP9_0\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP9_0\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\65UX3YG0\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\65UX3YG0\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\AY721QDR\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\AY721QDR\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\DZBKZBIC\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\DZBKZBIC\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\VRLZOZ0E\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\VRLZOZ0E\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MMC\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MMC\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\PowerPoint\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\PowerPoint\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Proof\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Proof\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Speech\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Speech\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\STARTUP\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\STARTUP\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Extensions\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Extensions\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\minidumps\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\minidumps\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\N3N8fE.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\peWBcp0.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\PTGwOn39Bwss7g3.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Qg4x8sfnyChm2b1M.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\QGSi2BhGIwNoJO.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\qkxV9qSWVxNy3pGEPAzt.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\s3oGTiZ-9DwaH.swf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tBCIF77PzT.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u6tucOBnq7fXzIFsU.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\whHRQ-WgvsCGaiDxuJXh.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\y4liQWysv0J.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\z2Cfga3x9yCa5.flv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Application Data\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Cookies\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Cookies\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2VzSh1uCTwQ_-PsbGDwb.odt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3 ik_1n4fkD.avi desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3LfsiXiNSRxONqRcV1V.doc desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4vDcKU8N1dR-p.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5DY2ipXrtc2uQYdppD2.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8aSUOpLfAMr3.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8i Olc-r5.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eckaybf8s.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GgNnuTdDEB1nM8MjBB2x.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GnhYqzuovFmPEZ_Yz.ods desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iBw7b-RO.mkv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ik_0E4M9Ys8gJr4LFSEb.flv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\0q-Evsqx66qcBE2j.flv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\gxDR7c.swf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\hwKtM38kmcixDd.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\0FuKg.swf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\RsZN0v.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\VOED0.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\POKnEj.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\QQ56L.ots desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\qU2.csv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\9xIpOEaPy_9bV4E2U.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\dVDyGgmdKmKrE.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\ioKi YD-8qb13.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\2WseENouE.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\4AS58ssTf.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\YyAbKN7dF.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rbnzCwkhxWNtCk-9.ppt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rNrA7R-M.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l9D0vQdafKD_YZfJW0LD.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LB9FQbI_nq00Ge-Xs.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mD100Mhw_CfHO-.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nnEAea5.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\TcMTpQZq A7g0f5FPH76.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vx4hc7zXgv.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WVwt2uzSRn6HIwO.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Xx4Ymq.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xy6Sf2VNkeWiCyvfwU.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yF8RpUOSSYJGzFX-H.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjXV8Yw1v3i e6YNDd.flv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_7KeZC85ofi6jNbS.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3XY6rLKDg0P3b3S4q.ppt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5R5_9JwdSac7VY.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7jjtAK.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\83HhIdvE8.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\D 6pHI4Z.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ELLslHiszx60nm.odp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\hZ-.csv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jbHS.odt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\h_QF7xq3opvctoM.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\IT_r-z10.csv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\Pi1biaW8T PR_0h8H.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\JYzCa6W6DCboI.ods desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\MXVmdutcdetajO7L.ppt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\9HvOn30TmS.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\G499cCqVOazpgDxLk.rtf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\_288Joi6sSDVRm.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ReSRz7.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\f1RYCAMB.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Fcv os4TANHGrz6.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FJwdIT jl05vH.doc desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JJO_xmHAlEZGz.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\dnkq97y gBzYOZWcT.pps desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\J90dNZg1LIyR6XX.rtf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Music\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Music\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Pictures\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Pictures\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Videos\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Videos\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\nDzIQKFQZgA27s3lIGXy.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\PS80UrvCoB6I9nz4W_.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rUAtoBZ-Sz-LA.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SiocV3eZS9.pdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\4B-3UdT.pdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\cR8H4 4.rtf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\IHusvM3HMHs98.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\NDyVSPQ5pnrztERoUY.pps desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\qJ72Jr9t5Zn.odp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\SVirUWUaMQpqkg.pdf desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\tmjcnobskipEzXrL0YGY.pps desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\cPR kO55kBO.ppt desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\WyPq2.pps desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UDcQmymh.xlsx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WAnTJBykQePksy.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wX vwA.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\zhUZbFpA5hJ9i.docx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_yOMWsK4Ym7mJ1.pptx desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Links\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Links\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\1v3MNJ66o4IUa6G.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\6R3twdqS__QHBvTMn.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\B05bBhbQv.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\bKO3VzW40.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\2X7Z2zPcCv.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\4BX4G83B2Of.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\D_S7iFvLgtdiqHYM.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\e3DO_W4zQ0i9xVLhhVw.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\faYtw9.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\frzvCDy7C.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\Hbu-ypVByW4aKJ.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\oyA7AJVh_.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\qZLhxjE zo.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\--fK-7kqK3r9sfv.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\2J O4OjnVZqWqWSMfO.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\39bGa.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\47Yqzs_v_Gkhm.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\7-Wnbd.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\9VRhZo5wPND6-4.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\byGp7OF.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ez8mj50P8Xmdbolj8Q.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\GrsNAudgg.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\JuJVgtoes3sCO9FuRyGB.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\nMzIz.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\pjAWiTwygQDqEeqpg8Xu.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\r_8VRBXf_x-3KYw1n3.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\UavRfJ7AV.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\udE4sVm2H.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ySK-MRrH.wav desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\zWenPmR_5qnlexiu.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\mjmj.m4a desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\PNTFODwh.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\s6d5e5e7J-eH7.mp3 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\My Documents\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\NetHood\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\NetHood\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\4VzM-t3oIK.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\-Ewcn79s8R4f.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\0HkLJgJnSNeH8EcNvtb.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\6FqkM2.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\AuABCWnCFT-ZsDL.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\b4dt0jk3u.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\dH3PcbgUOGAb.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\gHZ7j2.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lcY0A3Dkkd.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lgRvanS.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\LNU7dP8Tl5X1S.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\movgFcvD flj-flb.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\mSzOqdr_rNwle.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\OEl7tS8dm.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\qG2M8_B3IddQUZa.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\RVWW.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\wjel9LwJQl.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\z5-LcJ2A.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\zhlh4.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\aU9j9RcD.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\CPyx1hKbgABqOovqtE.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Hb-dF2iBWzvj8.bmp desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mfO2mkZ 8 FW XZZPnG.png desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\MMx1GzD.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T AzS629pw.gif desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uG5FX5j.jpg desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\PrintHood\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\PrintHood\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Recent\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Recent\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Searches\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Searches\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\SendTo\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\SendTo\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Start Menu\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Start Menu\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Templates\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Templates\\RESTORE-SIGRUN.html desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\\RESTORE-SIGRUN.txt desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2Zc_P_7aK3xdRVs.mp4 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4Vf5mqxB.flv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\AG0f.mkv desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Move C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.sigrun source_filename = C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi True 1
Fn
Move C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.sigrun source_filename = C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\0ivGWMEL3gX Z.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\0ivGWMEL3gX Z.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31CNYX6Z.ods.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31CNYX6Z.ods True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\7l6jzGfyA.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\7l6jzGfyA.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\aPZNC47ZTyq.avi.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\aPZNC47ZTyq.avi True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bf-CKV7r4VW.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bf-CKV7r4VW.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BopnVdBGfHjDSfQhB.rtf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BopnVdBGfHjDSfQhB.rtf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bTfiddQsB46E.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bTfiddQsB46E.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EFzXo_h7d.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EFzXo_h7d.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E_8HQoRVCT7_XFlkIs.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E_8HQoRVCT7_XFlkIs.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HqYOUFZgC.mkv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HqYOUFZgC.mkv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HRl3FtjkAf24KEt7QuSF.avi.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HRl3FtjkAf24KEt7QuSF.avi True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\I3nOGoGlgH6Cro.doc.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\I3nOGoGlgH6Cro.doc True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lQnsQQ5tr-e84T.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lQnsQQ5tr-e84T.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m-xtn.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m-xtn.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m0zkhXB5.pdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m0zkhXB5.pdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MetjNF-r.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MetjNF-r.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\N3N8fE.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\N3N8fE.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\peWBcp0.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\peWBcp0.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\PTGwOn39Bwss7g3.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\PTGwOn39Bwss7g3.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Qg4x8sfnyChm2b1M.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Qg4x8sfnyChm2b1M.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\QGSi2BhGIwNoJO.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\QGSi2BhGIwNoJO.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\qkxV9qSWVxNy3pGEPAzt.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\qkxV9qSWVxNy3pGEPAzt.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\s3oGTiZ-9DwaH.swf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\s3oGTiZ-9DwaH.swf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tBCIF77PzT.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tBCIF77PzT.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u6tucOBnq7fXzIFsU.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u6tucOBnq7fXzIFsU.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\whHRQ-WgvsCGaiDxuJXh.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\whHRQ-WgvsCGaiDxuJXh.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\y4liQWysv0J.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\y4liQWysv0J.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\z2Cfga3x9yCa5.flv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\z2Cfga3x9yCa5.flv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2VzSh1uCTwQ_-PsbGDwb.odt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2VzSh1uCTwQ_-PsbGDwb.odt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3 ik_1n4fkD.avi.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3 ik_1n4fkD.avi True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3LfsiXiNSRxONqRcV1V.doc.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3LfsiXiNSRxONqRcV1V.doc True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4vDcKU8N1dR-p.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4vDcKU8N1dR-p.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5DY2ipXrtc2uQYdppD2.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5DY2ipXrtc2uQYdppD2.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8aSUOpLfAMr3.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8aSUOpLfAMr3.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8i Olc-r5.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8i Olc-r5.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eckaybf8s.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eckaybf8s.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GgNnuTdDEB1nM8MjBB2x.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GgNnuTdDEB1nM8MjBB2x.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GnhYqzuovFmPEZ_Yz.ods.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GnhYqzuovFmPEZ_Yz.ods True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iBw7b-RO.mkv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iBw7b-RO.mkv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ik_0E4M9Ys8gJr4LFSEb.flv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ik_0E4M9Ys8gJr4LFSEb.flv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\0q-Evsqx66qcBE2j.flv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\0q-Evsqx66qcBE2j.flv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\gxDR7c.swf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\gxDR7c.swf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\hwKtM38kmcixDd.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\hwKtM38kmcixDd.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\0FuKg.swf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\0FuKg.swf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\RsZN0v.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\RsZN0v.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\VOED0.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\VOED0.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\POKnEj.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\POKnEj.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\QQ56L.ots.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\QQ56L.ots True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\qU2.csv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\qU2.csv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\9xIpOEaPy_9bV4E2U.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\9xIpOEaPy_9bV4E2U.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\dVDyGgmdKmKrE.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\dVDyGgmdKmKrE.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\ioKi YD-8qb13.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\ioKi YD-8qb13.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\2WseENouE.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\2WseENouE.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\4AS58ssTf.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\4AS58ssTf.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\YyAbKN7dF.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\YyAbKN7dF.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rbnzCwkhxWNtCk-9.ppt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rbnzCwkhxWNtCk-9.ppt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rNrA7R-M.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rNrA7R-M.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l9D0vQdafKD_YZfJW0LD.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l9D0vQdafKD_YZfJW0LD.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LB9FQbI_nq00Ge-Xs.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LB9FQbI_nq00Ge-Xs.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mD100Mhw_CfHO-.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mD100Mhw_CfHO-.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nnEAea5.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nnEAea5.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\TcMTpQZq A7g0f5FPH76.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\TcMTpQZq A7g0f5FPH76.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vx4hc7zXgv.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vx4hc7zXgv.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WVwt2uzSRn6HIwO.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WVwt2uzSRn6HIwO.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Xx4Ymq.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Xx4Ymq.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xy6Sf2VNkeWiCyvfwU.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xy6Sf2VNkeWiCyvfwU.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yF8RpUOSSYJGzFX-H.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yF8RpUOSSYJGzFX-H.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjXV8Yw1v3i e6YNDd.flv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjXV8Yw1v3i e6YNDd.flv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_7KeZC85ofi6jNbS.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_7KeZC85ofi6jNbS.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3XY6rLKDg0P3b3S4q.ppt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3XY6rLKDg0P3b3S4q.ppt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5R5_9JwdSac7VY.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5R5_9JwdSac7VY.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7jjtAK.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7jjtAK.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\83HhIdvE8.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\83HhIdvE8.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\D 6pHI4Z.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\D 6pHI4Z.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ELLslHiszx60nm.odp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ELLslHiszx60nm.odp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\hZ-.csv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\hZ-.csv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jbHS.odt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jbHS.odt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\h_QF7xq3opvctoM.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\h_QF7xq3opvctoM.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\IT_r-z10.csv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\IT_r-z10.csv True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\Pi1biaW8T PR_0h8H.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\Pi1biaW8T PR_0h8H.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\JYzCa6W6DCboI.ods.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\JYzCa6W6DCboI.ods True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\MXVmdutcdetajO7L.ppt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\MXVmdutcdetajO7L.ppt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\9HvOn30TmS.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\9HvOn30TmS.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\G499cCqVOazpgDxLk.rtf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\G499cCqVOazpgDxLk.rtf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\_288Joi6sSDVRm.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\_288Joi6sSDVRm.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ReSRz7.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ReSRz7.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\f1RYCAMB.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\f1RYCAMB.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Fcv os4TANHGrz6.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Fcv os4TANHGrz6.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FJwdIT jl05vH.doc.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FJwdIT jl05vH.doc True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JJO_xmHAlEZGz.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JJO_xmHAlEZGz.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\dnkq97y gBzYOZWcT.pps.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\dnkq97y gBzYOZWcT.pps True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\J90dNZg1LIyR6XX.rtf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\J90dNZg1LIyR6XX.rtf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\nDzIQKFQZgA27s3lIGXy.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\nDzIQKFQZgA27s3lIGXy.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\PS80UrvCoB6I9nz4W_.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\PS80UrvCoB6I9nz4W_.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rUAtoBZ-Sz-LA.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rUAtoBZ-Sz-LA.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SiocV3eZS9.pdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SiocV3eZS9.pdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\4B-3UdT.pdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\4B-3UdT.pdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\cR8H4 4.rtf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\cR8H4 4.rtf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\IHusvM3HMHs98.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\IHusvM3HMHs98.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\NDyVSPQ5pnrztERoUY.pps.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\NDyVSPQ5pnrztERoUY.pps True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\qJ72Jr9t5Zn.odp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\qJ72Jr9t5Zn.odp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\SVirUWUaMQpqkg.pdf.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\SVirUWUaMQpqkg.pdf True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\tmjcnobskipEzXrL0YGY.pps.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\tmjcnobskipEzXrL0YGY.pps True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\cPR kO55kBO.ppt.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\cPR kO55kBO.ppt True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\WyPq2.pps.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\WyPq2.pps True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UDcQmymh.xlsx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UDcQmymh.xlsx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WAnTJBykQePksy.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WAnTJBykQePksy.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wX vwA.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wX vwA.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\zhUZbFpA5hJ9i.docx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\zhUZbFpA5hJ9i.docx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_yOMWsK4Ym7mJ1.pptx.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_yOMWsK4Ym7mJ1.pptx True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\1v3MNJ66o4IUa6G.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\1v3MNJ66o4IUa6G.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\6R3twdqS__QHBvTMn.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\6R3twdqS__QHBvTMn.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\B05bBhbQv.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\B05bBhbQv.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\bKO3VzW40.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\bKO3VzW40.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\2X7Z2zPcCv.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\2X7Z2zPcCv.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\4BX4G83B2Of.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\4BX4G83B2Of.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\D_S7iFvLgtdiqHYM.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\D_S7iFvLgtdiqHYM.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\e3DO_W4zQ0i9xVLhhVw.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\e3DO_W4zQ0i9xVLhhVw.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\faYtw9.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\faYtw9.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\frzvCDy7C.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\frzvCDy7C.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\Hbu-ypVByW4aKJ.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\Hbu-ypVByW4aKJ.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\oyA7AJVh_.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\oyA7AJVh_.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\qZLhxjE zo.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\qZLhxjE zo.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\--fK-7kqK3r9sfv.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\--fK-7kqK3r9sfv.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\2J O4OjnVZqWqWSMfO.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\2J O4OjnVZqWqWSMfO.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\39bGa.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\39bGa.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\47Yqzs_v_Gkhm.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\47Yqzs_v_Gkhm.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\7-Wnbd.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\7-Wnbd.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\9VRhZo5wPND6-4.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\9VRhZo5wPND6-4.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\byGp7OF.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\byGp7OF.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ez8mj50P8Xmdbolj8Q.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ez8mj50P8Xmdbolj8Q.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\GrsNAudgg.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\GrsNAudgg.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\JuJVgtoes3sCO9FuRyGB.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\JuJVgtoes3sCO9FuRyGB.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\nMzIz.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\nMzIz.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\pjAWiTwygQDqEeqpg8Xu.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\pjAWiTwygQDqEeqpg8Xu.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\r_8VRBXf_x-3KYw1n3.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\r_8VRBXf_x-3KYw1n3.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\UavRfJ7AV.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\UavRfJ7AV.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\udE4sVm2H.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\udE4sVm2H.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ySK-MRrH.wav.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\ySK-MRrH.wav True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\zWenPmR_5qnlexiu.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\K87bMuzInie9\uyc3sGG\zWenPmR_5qnlexiu.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\mjmj.m4a.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\mjmj.m4a True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\PNTFODwh.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\PNTFODwh.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Music\s6d5e5e7J-eH7.mp3.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\s6d5e5e7J-eH7.mp3 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\4VzM-t3oIK.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\4VzM-t3oIK.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\-Ewcn79s8R4f.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\-Ewcn79s8R4f.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\0HkLJgJnSNeH8EcNvtb.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\0HkLJgJnSNeH8EcNvtb.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\6FqkM2.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\6FqkM2.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\AuABCWnCFT-ZsDL.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\AuABCWnCFT-ZsDL.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\b4dt0jk3u.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\b4dt0jk3u.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\dH3PcbgUOGAb.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\dH3PcbgUOGAb.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\gHZ7j2.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\gHZ7j2.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lcY0A3Dkkd.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lcY0A3Dkkd.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lgRvanS.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\lgRvanS.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\LNU7dP8Tl5X1S.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\LNU7dP8Tl5X1S.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\movgFcvD flj-flb.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\movgFcvD flj-flb.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\mSzOqdr_rNwle.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\mSzOqdr_rNwle.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\OEl7tS8dm.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\OEl7tS8dm.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\qG2M8_B3IddQUZa.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\qG2M8_B3IddQUZa.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\RVWW.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\RVWW.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\wjel9LwJQl.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\wjel9LwJQl.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\z5-LcJ2A.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\z5-LcJ2A.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\zhlh4.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ae-0vRH\zhlh4.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\aU9j9RcD.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\aU9j9RcD.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\CPyx1hKbgABqOovqtE.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\CPyx1hKbgABqOovqtE.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Hb-dF2iBWzvj8.bmp.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Hb-dF2iBWzvj8.bmp True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mfO2mkZ 8 FW XZZPnG.png.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mfO2mkZ 8 FW XZZPnG.png True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\MMx1GzD.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\MMx1GzD.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T AzS629pw.gif.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T AzS629pw.gif True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uG5FX5j.jpg.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uG5FX5j.jpg True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2Zc_P_7aK3xdRVs.mp4.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2Zc_P_7aK3xdRVs.mp4 True 1
Fn
Move C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4Vf5mqxB.flv.sigrun source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4Vf5mqxB.flv True 1
Fn
Read C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi size = 1048576, size_out = 1048576 True 3
Fn
Data
Read C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi size = 1048576, size_out = 24576 True 1
Fn
Data
Read C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim size = 1048576, size_out = 1048576 True 161
Fn
Data
Read C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim size = 1048576, size_out = 393234 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\0ivGWMEL3gX Z.m4a size = 1048576, size_out = 5014 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31CNYX6Z.ods size = 1048576, size_out = 75227 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\7l6jzGfyA.mp4 size = 1048576, size_out = 34232 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js size = 1048576, size_out = 10 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata size = 1048576, size_out = 5399 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl size = 1048576, size_out = 933 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl size = 1048576, size_out = 37703 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\aPZNC47ZTyq.avi size = 1048576, size_out = 77882 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bf-CKV7r4VW.bmp size = 1048576, size_out = 28149 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BopnVdBGfHjDSfQhB.rtf size = 1048576, size_out = 5504 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\bTfiddQsB46E.gif size = 1048576, size_out = 68829 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EFzXo_h7d.m4a size = 1048576, size_out = 66662 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E_8HQoRVCT7_XFlkIs.m4a size = 1048576, size_out = 63519 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HqYOUFZgC.mkv size = 1048576, size_out = 64628 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HRl3FtjkAf24KEt7QuSF.avi size = 1048576, size_out = 8320 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\I3nOGoGlgH6Cro.doc size = 1048576, size_out = 11730 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lQnsQQ5tr-e84T.mp3 size = 1048576, size_out = 12108 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m-xtn.bmp size = 1048576, size_out = 1411 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\m0zkhXB5.pdf size = 1048576, size_out = 33198 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol size = 1048576, size_out = 470 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MetjNF-r.m4a size = 1048576, size_out = 60362 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f size = 1048576, size_out = 45 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f size = 1048576, size_out = 87 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f size = 1048576, size_out = 61 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx size = 1048576, size_out = 1048576 True 3
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx size = 1048576, size_out = 1041579 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat size = 1048576, size_out = 32768 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT size = 1048576, size_out = 390656 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl size = 1048576, size_out = 37762 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK size = 1048576, size_out = 1434 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat size = 1048576, size_out = 52 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK size = 1048576, size_out = 1138 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs size = 1048576, size_out = 2560 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml size = 1048576, size_out = 2466 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST size = 1048576, size_out = 168 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 size = 1048576, size_out = 468 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred size = 1048576, size_out = 24 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c size = 1048576, size_out = 468 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d size = 1048576, size_out = 468 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d size = 1048576, size_out = 468 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred size = 1048576, size_out = 24 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST size = 1048576, size_out = 76 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml size = 1048576, size_out = 168 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm size = 1048576, size_out = 20635 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC size = 1048576, size_out = 2 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 size = 1048576, size_out = 10 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json size = 1048576, size_out = 24 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json size = 1048576, size_out = 3035 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json size = 1048576, size_out = 3035 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db size = 1048576, size_out = 65536 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini size = 1048576, size_out = 206 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite size = 1048576, size_out = 229376 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite size = 1048576, size_out = 524288 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite size = 1048576, size_out = 98304 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini size = 1048576, size_out = 141 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite size = 1048576, size_out = 458752 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite size = 1048576, size_out = 655360 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db size = 1048576, size_out = 16384 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf size = 1048576, size_out = 1281 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log size = 1048576, size_out = 57 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf size = 1048576, size_out = 3827 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite size = 1048576, size_out = 65536 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite size = 1048576, size_out = 1048576 True 10
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat size = 1048576, size_out = 3604 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js size = 1048576, size_out = 4062 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json size = 1048576, size_out = 16771 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db size = 1048576, size_out = 16384 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak size = 1048576, size_out = 982 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js size = 1048576, size_out = 3013 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite size = 1048576, size_out = 327680 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json size = 1048576, size_out = 29 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\webapps.json size = 1048576, size_out = 2 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite size = 1048576, size_out = 98304 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini size = 1048576, size_out = 111 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\N3N8fE.bmp size = 1048576, size_out = 16392 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\peWBcp0.mp4 size = 1048576, size_out = 101974 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\PTGwOn39Bwss7g3.wav size = 1048576, size_out = 33041 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Qg4x8sfnyChm2b1M.mp3 size = 1048576, size_out = 38432 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\QGSi2BhGIwNoJO.jpg size = 1048576, size_out = 60248 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\qkxV9qSWVxNy3pGEPAzt.wav size = 1048576, size_out = 1890 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\s3oGTiZ-9DwaH.swf size = 1048576, size_out = 4415 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tBCIF77PzT.m4a size = 1048576, size_out = 84707 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u6tucOBnq7fXzIFsU.docx size = 1048576, size_out = 28478 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\whHRQ-WgvsCGaiDxuJXh.png size = 1048576, size_out = 6125 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\y4liQWysv0J.wav size = 1048576, size_out = 71136 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\z2Cfga3x9yCa5.flv size = 1048576, size_out = 27208 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact size = 1048576, size_out = 1178 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact size = 1048576, size_out = 68382 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact size = 1048576, size_out = 1171 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact size = 1048576, size_out = 1177 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact size = 1048576, size_out = 1174 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact size = 1048576, size_out = 1172 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2VzSh1uCTwQ_-PsbGDwb.odt size = 1048576, size_out = 57026 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3 ik_1n4fkD.avi size = 1048576, size_out = 98327 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3LfsiXiNSRxONqRcV1V.doc size = 1048576, size_out = 26455 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4vDcKU8N1dR-p.jpg size = 1048576, size_out = 9948 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5DY2ipXrtc2uQYdppD2.jpg size = 1048576, size_out = 9939 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8aSUOpLfAMr3.png size = 1048576, size_out = 69944 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8i Olc-r5.mp3 size = 1048576, size_out = 14251 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eckaybf8s.mp3 size = 1048576, size_out = 97356 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GgNnuTdDEB1nM8MjBB2x.mp4 size = 1048576, size_out = 91267 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GnhYqzuovFmPEZ_Yz.ods size = 1048576, size_out = 76077 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iBw7b-RO.mkv size = 1048576, size_out = 67838 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ik_0E4M9Ys8gJr4LFSEb.flv size = 1048576, size_out = 37722 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\0q-Evsqx66qcBE2j.flv size = 1048576, size_out = 31142 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\gxDR7c.swf size = 1048576, size_out = 14776 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\hwKtM38kmcixDd.gif size = 1048576, size_out = 18457 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\QzIX\0FuKg.swf size = 1048576, size_out = 23391 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\RsZN0v.mp4 size = 1048576, size_out = 22090 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\7l_P\VOED0.jpg size = 1048576, size_out = 23935 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\POKnEj.mp3 size = 1048576, size_out = 10265 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\QQ56L.ots size = 1048576, size_out = 42520 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\8kaWuYGwd\qU2.csv size = 1048576, size_out = 77998 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\9xIpOEaPy_9bV4E2U.wav size = 1048576, size_out = 19122 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\dVDyGgmdKmKrE.wav size = 1048576, size_out = 19781 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\ioKi YD-8qb13.png size = 1048576, size_out = 50374 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\2WseENouE.gif size = 1048576, size_out = 32542 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\4AS58ssTf.mp4 size = 1048576, size_out = 72873 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\PHpdDEaaQZ1EUL5\YyAbKN7dF.m4a size = 1048576, size_out = 85491 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rbnzCwkhxWNtCk-9.ppt size = 1048576, size_out = 34070 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KCtIQ69Bayn\rNrA7R-M.bmp size = 1048576, size_out = 57429 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l9D0vQdafKD_YZfJW0LD.png size = 1048576, size_out = 9711 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LB9FQbI_nq00Ge-Xs.m4a size = 1048576, size_out = 34666 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mD100Mhw_CfHO-.m4a size = 1048576, size_out = 37943 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nnEAea5.gif size = 1048576, size_out = 77822 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\TcMTpQZq A7g0f5FPH76.mp4 size = 1048576, size_out = 59828 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vx4hc7zXgv.bmp size = 1048576, size_out = 13768 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WVwt2uzSRn6HIwO.jpg size = 1048576, size_out = 77557 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Xx4Ymq.xlsx size = 1048576, size_out = 29502 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xy6Sf2VNkeWiCyvfwU.png size = 1048576, size_out = 22482 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yF8RpUOSSYJGzFX-H.docx size = 1048576, size_out = 75395 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjXV8Yw1v3i e6YNDd.flv size = 1048576, size_out = 73692 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_7KeZC85ofi6jNbS.mp4 size = 1048576, size_out = 70007 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3XY6rLKDg0P3b3S4q.ppt size = 1048576, size_out = 41995 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5R5_9JwdSac7VY.docx size = 1048576, size_out = 80393 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7jjtAK.pptx size = 1048576, size_out = 92364 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\83HhIdvE8.pptx size = 1048576, size_out = 56271 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\D 6pHI4Z.docx size = 1048576, size_out = 75891 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ELLslHiszx60nm.odp size = 1048576, size_out = 62048 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\hZ-.csv size = 1048576, size_out = 40327 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jbHS.odt size = 1048576, size_out = 32728 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\h_QF7xq3opvctoM.docx size = 1048576, size_out = 100969 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\IT_r-z10.csv size = 1048576, size_out = 43335 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\jQ5-tU\Pi1biaW8T PR_0h8H.docx size = 1048576, size_out = 4901 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\JYzCa6W6DCboI.ods size = 1048576, size_out = 69660 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\MXVmdutcdetajO7L.ppt size = 1048576, size_out = 52772 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\9HvOn30TmS.pptx size = 1048576, size_out = 43122 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\G499cCqVOazpgDxLk.rtf size = 1048576, size_out = 1906 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\pzB4Y9bzn0\_288Joi6sSDVRm.pptx size = 1048576, size_out = 14491 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\enukf\ReSRz7.xlsx size = 1048576, size_out = 82497 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\f1RYCAMB.xlsx size = 1048576, size_out = 74508 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Fcv os4TANHGrz6.xlsx size = 1048576, size_out = 8762 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FJwdIT jl05vH.doc size = 1048576, size_out = 58882 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JJO_xmHAlEZGz.docx size = 1048576, size_out = 90483 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\dnkq97y gBzYOZWcT.pps size = 1048576, size_out = 58552 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lmi9gC0lNMg4Y\J90dNZg1LIyR6XX.rtf size = 1048576, size_out = 95290 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\nDzIQKFQZgA27s3lIGXy.xlsx size = 1048576, size_out = 66849 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst size = 1048576, size_out = 271360 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\PS80UrvCoB6I9nz4W_.docx size = 1048576, size_out = 94961 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rUAtoBZ-Sz-LA.xlsx size = 1048576, size_out = 10385 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SiocV3eZS9.pdf size = 1048576, size_out = 102248 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\4B-3UdT.pdf size = 1048576, size_out = 78096 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\cR8H4 4.rtf size = 1048576, size_out = 6721 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\IHusvM3HMHs98.docx size = 1048576, size_out = 50943 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\NDyVSPQ5pnrztERoUY.pps size = 1048576, size_out = 70938 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\qJ72Jr9t5Zn.odp size = 1048576, size_out = 74181 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\SVirUWUaMQpqkg.pdf size = 1048576, size_out = 58733 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\BppFftj67UIM3oVRGPBM\tmjcnobskipEzXrL0YGY.pps size = 1048576, size_out = 34478 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\cPR kO55kBO.ppt size = 1048576, size_out = 94989 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\U1YQM-Ze3qxwK4-QJ\WyPq2.pps size = 1048576, size_out = 78247 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UDcQmymh.xlsx size = 1048576, size_out = 90260 True 1
Fn
Write C:\Program Files\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Data
Write C:\Program Files\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Data
Write C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Data
Write C:\Program Files (x86)\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Data
Write C:\Program Files (x86)\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\RESTORE-SIGRUN.txt size = 11846 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\RESTORE-SIGRUN.html size = 27148 True 1
Fn
For performance reasons, the remaining 895 entries are omitted.
The remaining entries can be found in glog.xml.
Registry (20)
»
Operation Key Additional Information Success Count Logfile
Create Key HKEY_CURRENT_USER\SOFTWARE\Valkyrie\data - True 1
Fn
Open Key HKEY_CURRENT_USER\Keyboard Layout\Preload - True 8
Fn
Open Key HKEY_CURRENT_USER\SOFTWARE\Valkyrie\data - False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 1, data = 48 True 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 2, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 3, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 4, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 5, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 6, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 7, data = 48 False 1
Fn
Read Value HKEY_CURRENT_USER\Keyboard Layout\Preload value_name = 8, data = 48 False 1
Fn
Write Value HKEY_CURRENT_USER\SOFTWARE\Valkyrie\data value_name = public, size = 276, type = REG_BINARY True 1
Fn
Data
Write Value HKEY_CURRENT_USER\SOFTWARE\Valkyrie\data value_name = KeyData, size = 1688, type = REG_BINARY True 1
Fn
Data
Module (1059)
»
Operation Module Additional Information Success Count Logfile
Load crypt32 base_address = 0x75a60000 True 1
Fn
Get Handle c:\windows\syswow64\advapi32.dll base_address = 0x760e0000 True 528
Fn
Get Handle crypt32 base_address = 0x0 False 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CryptGenRandom, address_out = 0x760edfc8 True 528
Fn
Get Address c:\windows\syswow64\crypt32.dll function = CryptBinaryToStringW, address_out = 0x75a9a546 True 1
Fn
System (4)
»
Operation Additional Information Success Count Logfile
Get Computer Name result_out = XDUWTFONO True 1
Fn
Sleep duration = -1 (infinite) False 1
Fn
Get Info type = Windows Directory, result_out = C:\Windows True 1
Fn
Get Info type = Hardware Information True 1
Fn
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image