7a06c328...adca | Sequential Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 91/100
Dynamic Analysis Report
Classification: Riskware, Ransomware

7a06c328733d43e19debcd3c045d35eed48538415de5f21c66885a4994eeadca (SHA256)

tzbtqw.exe

Windows Exe (x86-32)

Created at 2019-03-01 21:19:00

...

Notifications (2/4)

Some extracted files may be missing in the report since the total file extraction size limit was reached during the analysis. You can increase the limit in the configuration settings.

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

The operating system was rebooted during the analysis.

Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0xa6c Analysis Target High (Elevated) tzbtqw.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tzbtqw.exe" -
#2 0x7ec Autostart Medium tzbtqw.exe "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe" -

Behavior Information - Sequential View

Process #1: tzbtqw.exe
1159 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\tzbtqw.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tzbtqw.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:01:54, Reason: Analysis Target
Unmonitor End Time: 00:02:22, Reason: Self Terminated
Monitor Duration 00:00:28
OS Process Information
»
Information Value
PID 0xa6c
Parent PID 0x460 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x A70
0x A7C
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
private_0x0000000000020000 0x00020000 0x00020fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
rsaenh.dll 0x00210000 0x0024bfff Memory Mapped File r False False False -
private_0x0000000000210000 0x00210000 0x0024ffff Private Memory rw True False False -
private_0x0000000000300000 0x00300000 0x0037ffff Private Memory rw True False False -
tzbtqw.exe 0x00400000 0x0040efff Memory Mapped File rwx True True False
...
private_0x0000000000410000 0x00410000 0x0051ffff Private Memory rw True False False -
private_0x0000000000410000 0x00410000 0x0050ffff Private Memory rw True False False -
private_0x0000000000510000 0x00510000 0x0051ffff Private Memory rw True False False -
private_0x0000000000520000 0x00520000 0x0052ffff Private Memory rw True False False -
private_0x0000000000570000 0x00570000 0x0066ffff Private Memory rw True False False -
pagefile_0x0000000000670000 0x00670000 0x007f7fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000800000 0x00800000 0x00980fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000990000 0x00990000 0x01d8ffff Pagefile Backed Memory r True False False -
private_0x0000000001d90000 0x01d90000 0x01efffff Private Memory rw True False False -
sortdefault.nls 0x01f00000 0x021cefff Memory Mapped File r False False False -
wow64cpu.dll 0x74f80000 0x74f87fff Memory Mapped File rwx False False False -
wow64win.dll 0x74f90000 0x74febfff Memory Mapped File rwx False False False -
wow64.dll 0x74ff0000 0x7502efff Memory Mapped File rwx False False False -
rsaenh.dll 0x75430000 0x7546afff Memory Mapped File rwx False False False -
cryptsp.dll 0x75470000 0x75485fff Memory Mapped File rwx False False False -
cryptbase.dll 0x75590000 0x7559bfff Memory Mapped File rwx False False False -
sspicli.dll 0x755a0000 0x755fffff Memory Mapped File rwx False False False -
msvcrt.dll 0x75660000 0x7570bfff Memory Mapped File rwx False False False -
lpk.dll 0x75710000 0x75719fff Memory Mapped File rwx False False False -
sechost.dll 0x75a60000 0x75a78fff Memory Mapped File rwx False False False -
gdi32.dll 0x75a80000 0x75b0ffff Memory Mapped File rwx False False False -
rpcrt4.dll 0x75b10000 0x75bfffff Memory Mapped File rwx False False False -
shell32.dll 0x75cc0000 0x76909fff Memory Mapped File rwx False False False -
msctf.dll 0x76b30000 0x76bfbfff Memory Mapped File rwx False False False -
imm32.dll 0x76c00000 0x76c5ffff Memory Mapped File rwx False False False -
advapi32.dll 0x76f90000 0x7702ffff Memory Mapped File rwx False False False -
user32.dll 0x771d0000 0x772cffff Memory Mapped File rwx False False False -
shlwapi.dll 0x77350000 0x773a6fff Memory Mapped File rwx False False False -
kernel32.dll 0x773b0000 0x774bffff Memory Mapped File rwx False False False -
usp10.dll 0x77550000 0x775ecfff Memory Mapped File rwx False False False -
kernelbase.dll 0x775f0000 0x77635fff Memory Mapped File rwx False False False -
private_0x0000000077640000 0x77640000 0x77739fff Private Memory rwx True False False -
private_0x0000000077740000 0x77740000 0x7785efff Private Memory rwx True False False -
ntdll.dll 0x77860000 0x77a08fff Memory Mapped File rwx False False False -
ntdll.dll 0x77a40000 0x77bbffff Memory Mapped File rwx False False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory rw True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
Created Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 140.92 KB MD5: 6406252f225f9e7973a0cceb7833e6a6
SHA1: c50b6f2436c45707a6b0e33f0aab65544550508b
SHA256: ae6204f1f0d760544be66653ee9394e29cc0a3210d769662d9a533ae65e0d30f
SSDeep: 3072:fMfeo407iSGJv+bcjhcD68MfK2ix8yHhnCIngKSGUrZpJdeXX:k2o407IjhyMC2ix8yBn6en 		False
...
C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm.SATANA 1.58 KB MD5: 159adabcb32e7d173844f81cd43dad88
SHA1: 6bfa87e81819f4e052e84531393d46fdd5fa7d4d
SHA256: a6354e956429061fcb6fd18fef378230854806fc750b02e5ea3ed1bda160a92f
SSDeep: 24:ELWKc8YPKVbz7H9GuGpg9E3JtOTnqUEWxTD2qlw9Nc/tVD4qxfR3GKUhn68IRdZa:ELc8YC17H/9monhEWd5iNWB4qO9iq1 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tzbtqw.exe 53.50 KB MD5: c4d3007e0257d80186973632b0d8695d
SHA1: 9e42b167057ba76976747baabfaee1e721000e91
SHA256: 7a06c328733d43e19debcd3c045d35eed48538415de5f21c66885a4994eeadca
SSDeep: 768:J66vuye1kVtGBk6P/v7nWlHznbkVwrEKD9yDwxVSHrowNI2tG6o/t84B5yrJk:J64eytM3alnawrRIwxVSHMweio3IrJ 		False
...
C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 148.92 KB MD5: 83f0aaab3af5ce24107b7e58fa90b14d
SHA1: 991df8b1bfe87bf915c99582c3a698267854ba35
SHA256: 75defe3b86544e3475ab85b35d37a86011e6709c973b8d2f5245b7be43e70436
SSDeep: 3072:+W9GQr09Nzv3D+V5yBqvacS51j4XBdMmcL8V0:PMqYfqCcS51j4XBK60 		False
...
C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 791.72 KB MD5: 0592a379370a2c3da72c9755cae228d1
SHA1: 353d707a7556c6916c14ed48a1c72e5fb0885ec9
SHA256: cc6346c297dce84cc5171250310324689bf90aac44b87c3967a83bcbb3085f9b
SSDeep: 24576:dbSZmbaiq334Hoqpn7AhzLtSd+4XzwESjyBSQ:dqmba34HowElZSd+4DwBdQ 		False
...
C:\Users\Public\Desktop\Mozilla Firefox.lnk 2.06 KB MD5: 3c1ae7da7f30f11a3cf00186f3d7d66d
SHA1: bab55f239581dc02f9cf604e45fb389b7a7b5d13
SHA256: 70e54a4ac65caa145da36fead6a9ae83a1bf21af7ab01b525a05a96fc743fb8d
SSDeep: 48:G5h+UsLRAgRUVsm0MYycewT5CEPo+E+l/6krBiNWB4qO9iq5:GrOAgRH3MlIoV+6RNFqO9iS 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url 1.06 KB MD5: f85a97d98ea0d334596e300b28745792
SHA1: e7bc5bbe63f1906acb387a201dbbaa5d75c95137
SHA256: 419f037eb8a8656ee8ab2ebbfe5bec207bc9c9fc924a81a9d0a975e1a5c61bfd
SSDeep: 24:8/4hQOHGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HqJqRAu:8kQOH1iNWB4qO9iqGu 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN.url 1.06 KB MD5: d73edb78a72d1cd8f13b5321137ee4f2
SHA1: eb381de9348113d67c84797769485062aa373e28
SHA256: 606ce23ced886b5907f0d1095293df4124e284e39ff39f7aff72d03d354d9acb
SSDeep: 24:L87dTE/7iIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H2Zit:L8tQIiNWB4qO9iqWZI 		False
...
C:\Users\Public\Music\Sample Music\desktop.ini 1.50 KB MD5: 7e153adc2c3923e021565711e47f844a
SHA1: 7e3401eaca655075e1f637c3ab062887fa38cf64
SHA256: 7bd47166f15750257d3076b3b03e6353d94f5cc78b6904d85d5fda22dd43bbfa
SSDeep: 24:qOUB6Q+1Xf8a6remjURZOEtOUW+0pL0Wqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hug:FUB6Q8OQ/9TWLpL0liNWB4qO9iqcM 		False
...
C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 140.92 KB MD5: b1e8e603cfbcca96c515428ef9141792
SHA1: e7cc5d400bf7a12e27cb6a51828f1ae52eaf0972
SHA256: c2ba064ae2c9aa521f6171f750f178c8f147c3e6d78a41ff6c6e928f967c4f70
SSDeep: 3072:CRQws68pGJvtXUc7r9hxjwiIXpBCIngNPPBN8JA+zmrC8Z7N:Ys68kUir9TwiIXXKncA0mrC8Z7N 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms 512.92 KB MD5: c190d986df63214b7c07326f8925ffe5
SHA1: 8ed4f852b8bff91f0be43c089476a1933bb9b519
SHA256: 9c0c8f8527a5fbae96ab0b3bd8b271ac100fdf576a819ad48c2b73d7a7db7eb6
SSDeep: 6144:F+V7lapShkOvXfZpPHSuL8ESolR/EEEYNU5NlOjoPD:FU7wQX/PyKlSomPojob 		False
...
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg 758.45 KB MD5: 6406080c45b516a8d2d58ea1eac4b884
SHA1: 9017dc19c37f61ece97a4561d842fe36b9782a28
SHA256: 8e74da48733d9bd0f062453eed0d026cd6f68d3393fb25e6cc0e8375bdc5838f
SSDeep: 12288:dZGwWgNn0OZ1O/rrVbH8x1n9t2qH/YO0AwIY72f1HAUkERytg3S5IPqW9:jGwW60pHSx19t4rB6f1lXRytp3q 		False
...
C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe.SATANA 764.48 KB MD5: 892dd791341c6cae660b07f97fe09c30
SHA1: 4d6c6966c8a1bfbea8af958bf066fa460def8fb2
SHA256: c7bb43f087e42058e30ee488576e018459968300feccd4b8af6847023a2c8f9c
SSDeep: 12288:3Vo4016qQxa7vEFfCbNf5TQ8dWmZ9FxtRuPBTwBfHooX2+3Dh6Ha:3VoX1A+8Ffm3M8dWy9Lt0P1Uoo/Df 		False
...
C:\Users\Default\Contacts\desktop.ini 1.33 KB MD5: e403e78e6508e1076b1f67b883cb9e9c
SHA1: 3cb39aa626a5f4dd53e649042a4211a8995f9a23
SHA256: 10167958e10e47ffc4d53dee6c97ad07e723c8bf357c46551c34c11ef4b90773
SSDeep: 24:EBpSV0tXBLAjUmq2CnWYqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HaVo:08VOlAjkrnWHiNWB4qO9iqco 		False
...
C:\Users\Default\Downloads\desktop.ini 1.20 KB MD5: 5b025d58fcddbc0b4f52245fc52a7389
SHA1: b0b3d11f9a8ecfe54cfd37bc660c6f1fa3a837fc
SHA256: 26d4ddfae9db9505de9643abe2868fb81005acb11f61461585f4a9b3295bb5a3
SSDeep: 24:FVoopBkqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HoQni:FVooHiNWB4qO9iqIyi 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url 1.06 KB MD5: a8d7cafdc8e27b07f26b725c393e248b
SHA1: 66e54499b5b73d1e4756a6ff8c53c25f9054b29d
SHA256: de34a6ada4e2a70e662a8d36061f28c6560ab448c51770d7cd4c3dc4c60a6dc8
SSDeep: 24:JlSBdsyU0JuZmYqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HH:GLxqIiNWB4qO9iqn 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url 1.06 KB MD5: ceeacc4d9ced6923cdc0c795c2730a31
SHA1: 223f6b83359368a83038cf29c544f7e6b16d9a96
SHA256: b3a8bfa0caf711f3ce6b1e906bb732e58640042d64320b2bf510237cac80175d
SSDeep: 24:XlBhlOTlEJZrzqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HnC:N8pEJZAiNWB4qO9iqHC 		False
...
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg 582.27 KB MD5: b9c42e6db4b02b62643f54ab35fd311e
SHA1: cc11ffbe02f840d13cd141e796116854add0454f
SHA256: f6f08fb5b5d38b7d321f525ba0957677d7f358e1a544b7382a96538b2e86574e
SSDeep: 12288:Z6NJoQD5bF9iEjyEn3PCsW3um/WqneWYPoo6L8Pa+GlPLwme:cN5bF9zyEnfnWYd16MtIc 		False
...
C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 140.92 KB MD5: fd398eafa21fed67c832d011a945292c
SHA1: 4dd4107e4e4765136c2fcab41daa58cfb4cac508
SHA256: 7152bbe2fcd487088ad88cf438f26bc265cbb9327b05dad79b9421fa8e9ad4e0
SSDeep: 3072:yqeSPWGJvkgcWGvBnJdiizjLfCIngEQ/RGoeawpFb9yyR3:5nzGxJdiiz3fJQ/8oFSF9yyJ 		False
...
C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 0.99 MB MD5: bdee88896b05c9e03712faff53522059
SHA1: 7e4c4ec595a0ed4c90675a61d8a169e372a03efb
SHA256: 8ed4d17fc585e16f5ff3d7e4ed7cdfa9f039297541142fd23f9b51c5d763d10c
SSDeep: 24576:VuZ4cf4ngZN2mYrbH8biWG6vebmXm7T71sBetEpONyOIn:V8bf4ENHYrDsvGkeiW7/kFwIn 		False
...
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url 1.06 KB MD5: a7e7a8a8c9321a162a771f3ca443a056
SHA1: a32823d8d916ae3d1251a34572e0c913ba8b4f56
SHA256: 7c286537275798925d93d82606412bbefada548f0efa3be88f765446a9d2d14d
SSDeep: 24:ENGMaz81Jgiqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HYLpA:EhaziJgRiNWB4qO9iq4LpA 		False
...
C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA 0.99 MB MD5: ac2e1679fcda410f9bdfa1473247adff
SHA1: 58c5e624739a03c4e340c9f175efd0374cba7bb0
SHA256: dd85647019925f28bcd69d06e148d7ed66723d8e933204e47f073bbd4ea6a4d3
SSDeep: 24576:YzBENL8cHGui4zaNFYzNhBsvFYqt1lGjQ0:YSJH24mIzai3F 		False
...
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url 1.06 KB MD5: 23edbf6eed745c358ea08bc5116f3e14
SHA1: 16aa7f77cbbe66861c031ec4feca2250a9dd181b
SHA256: 2d3253ca7d034ac2099d322a7d975d2b8538a54279ee2e71b36161d8544c2d00
SSDeep: 24:YwmwSCb/9GA6qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H9Sjg:Y/w1bFGwiNWB4qO9iqdSjg 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url 1.06 KB MD5: 24b5625ae9d93b0b33636c25d686152b
SHA1: dc7c91f04db0026b1ebfa94043be154b5b1387ed
SHA256: f9f0ec19d767c1f3587a8690057f4014558f1438668fc58ff049941543ab3447
SSDeep: 24:f6Ei+i594Jwqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HoQ+v:SEi78viNWB4qO9iqIQ+v 		False
...
C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm.SATANA 1.58 KB MD5: 9a449f919a5e787980f861fee186c68b
SHA1: 74937d2df3598868e2da45cc9261d7ec5e563d87
SHA256: 042f309f145843f64c0e7dce6c55f8242f32221c3f5f71f49c896f7c8ce71bef
SSDeep: 24:JEaBxFBNDUw21mEhWcOGS1S9I9TZZgwbS8Fqlw9Nc/tVD4qxfR3GKUhn68IRdZ3E:6YDkhhRS108dZlG8miNWB4qO9iqP 		False
...
C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log.SATANA 1.09 KB MD5: 49dbcdad6a181435670bd94ce8c6e275
SHA1: 401258a37c524d76fe66df8e12766f414a00fe33
SHA256: a6630240df07439efbd17f817041095b4f4490c5f2e54a4418c8505d0618fdfd
SSDeep: 24:Wp4bI3Gcgxqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLK:WlrgyiNWB4qO9iqrK 		False
...
C:\Users\Default\Documents\desktop.ini 1.33 KB MD5: 6582edae8dead80bd56384ccf81f5b5a
SHA1: 0cc21bfdcbfb4fbe11e18836669998876c2c28af
SHA256: e577a1f91958c53f6b581d3753d2d80a8cb610cee5659f4621c5c1d6fa72bdf0
SSDeep: 24:tS4YjFr/heDAAeoe8tlqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HXk:wZtJye8wiNWB4qO9iq3k 		False
...
C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 974.61 KB MD5: a1f918fba95338c48dde229589cbe88e
SHA1: 5405bdfb1ec4365e9d746cc46e8e7a90f806e54c
SHA256: 083747c4698fab7244e79312fc8919272801f2b0c2f394006e13629164bfc40a
SSDeep: 12288://OkXhk6FbE1JjtNJ2+6J6sXw57OeC9Yv4nceIR48XhVcBVd9y5Wp1d7XKDOFKna:/2EC6FbEXjtKGowyyUdes7YOALsUmI8n 		False
...
C:\Users\Public\Music\Sample Music\Kalimba.mp3 8.03 MB MD5: 1b60c8fe2d034be1f875f3052eacfcdc
SHA1: ba1f747882e30cfab4704a9a4f55dd54796ec92a
SHA256: 6cefda3473b85e26d3582f8deed48fcd4a831cd7fce20ccbc71b320f3d434fc0
SSDeep: 196608:+I0beybbxG3R18JvA/6ue4Y24qE46IV2qpOosFHGBT3OnBoJDk0r:+IweMFGBKeNY2HE302qpOHGBfNVr 		False
...
C:\Users\Default\Links\Downloads.lnk 1.80 KB MD5: 9d25a092108146f9ce88bc74e8ab4671
SHA1: 487f3ffb1089611eb74cd2c7ae31f10a8bcc4fce
SHA256: 62e142b34800998aa5afb075f576a92d425921af1b9bd9a84af8377e2bad7dba
SSDeep: 48:zsXof1qCvByQmR3l5vpsDsMJ0+iNWB4qO9iqZKW:Q4fkyAQmlHpYsMJ0NNFqO9ic3 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url 1.06 KB MD5: 5ba4748f5319537fc939b5ae0a7de829
SHA1: ed816b65dc6b844b18f6cc24c7273661d7610ac1
SHA256: 74f48dda4e2a6f151ef1fb17da1a69d6d2ecdd9c4997bc72d5e44414a56ca3ff
SSDeep: 24:yn/dts2iqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLT:CsgiNWB4qO9iqX 		False
...
C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.61 MB MD5: 3bb20168843428e639d9c2008cf2bfba
SHA1: e8643978291633e70d5c54c0bd809b1a323598b7
SHA256: 08a784dbb0b16d60ba4236eed52b4d9aad620b04ace16481c6aae56b9ca4d65e
SSDeep: 98304:Bkzc27Boh2h5Or7bPQiA0biM+8d0uGwGMebhv/hKIulmcDhwWjBkKqTk9vkp:KxBA2hAvPQiv+I8wGLdZKIuUcDhr1kKm 		False
...
C:\Users\Public\Libraries\desktop.ini 1.02 KB MD5: fe7a64142b9ee3ab7f0922995f77a799
SHA1: 6248c1cdbfa5b442b229bee2c34f62aac548de25
SHA256: f4312bc5fc2d8427e590f8bd8da4d13eeed115ee05e80c1f99c27a357a3d7ee1
SSDeep: 24:X63WFmDCs14qasgGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLJZ:K3Wo0ZiNWB4qO9iqVZ 		False
...
C:\Users\Default\Pictures\desktop.ini 1.42 KB MD5: 6913aa8b42eb45cbd2c3cacec4635053
SHA1: cf2333228d6aa1da162d2951e13618d0c630cbc7
SHA256: 777a1a146d1488ba5772a5397900a694790a43618d61149923278bd0ce92a22b
SSDeep: 24:iElLpzF53pOUDektAY9eXhnHgXfFsXVFideVEvqlw9Nc/tVD4qxfR3GKUhn68IRU:DzHBtAYMxnC+X6defiNWB4qO9iqK2 		False
...
C:\Users\Public\Desktop\Adobe Reader X.lnk 2.91 KB MD5: f9072ce1b9b8a2ec8e59fcc17907c85c
SHA1: b9660ec8401b8d2bacca726652c2a75cf52352e7
SHA256: 98c693f392a1f08dd3b7c7c2dbe08d8a4bcf3c25ccfc30b16658dbab0c5dedac
SSDeep: 48:S14BIKHgPiJsbZBPpUR+YKcD7UFu225VHVkgT9ppdeCslU54iNWB4qO9iqp:egtJsNgrK+bLVjT9p70OPNFqO9iC 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe 0.00 KB MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep: 3:: 		False
...
C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 148.92 KB MD5: befd2f43d1749dce9068eedc505b6f8e
SHA1: fc5bb421430a297286064f36b665a9e65d10f0e1
SHA256: 4540f94eda1f1b68741691af0b7afdcb8cc01a534b0b3022b22baedf2cd17b8e
SSDeep: 3072:i5iyNWcOGQr09YzHs3D+VX5Hw6/XRBIffYXN33nY8GibX:i5iy9qDHuS5Hw6/XRBIf03Mk 		False
...
C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe.SATANA 453.09 KB MD5: a22230912a5b686020bcb4d131ff3a1e
SHA1: eb989a24f385d04ddc4f175b465436c2444f2af6
SHA256: a4667b7e50acdfb1cd55231b0718bb040f25f2dc6bff2c68794c1449330ae223
SSDeep: 6144:RLhS/IMOxZ8AiVUvpflp0PDbLe/1wLmGMqn536jmL+ZM/CFQNOfEtkq+AO2+1y8e:bSdAi2p96HLeqLmDq8jrxQN/tkHc3 		False
...
C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.96 MB MD5: a8ae1215015e8588cca9814bca0bfb08
SHA1: a2c67e27e6a6ae1247b1bb0e7da35141f5fd1e0d
SHA256: f7767f874b2844eae12e1116a738604f2cce848eeda83b242969be1aa0f4120c
SSDeep: 98304:BWRQJzh7+R/T8O3JqogVovIMocp452/nmlgJgoQcWM/HB8S1O8b2f4:JZh7azAQvIMoI/uoQs/B8vxf4 		False
...
C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm.SATANA 1.67 KB MD5: 00a9d129c62a2b939255b8ea1ee6fdca
SHA1: 63c6ed4c4a6f3593c304fbc670a39031275aedb0
SHA256: eca28a56a1963a9fe8cae41b3bc0aa78071c572f2a6d7194d50e7bb750effa77
SSDeep: 48:5CWHNyHmQpgV8zcCxtCAzM3Ar0iNWB4qO9iqt9fw:MW4FpgubL4ULNFqO9imfw 		False
...
C:\Users\Default\Desktop\desktop.ini 1.20 KB MD5: e14749dc9d0bf5fccab506dda6743e72
SHA1: 7a5ba4c3fe09d4802169edded22602dbcb238458
SHA256: 27dfc38aae8c71aac9188c00ef325770391e78ec9251cb7db2534aeafe6ead8b
SSDeep: 24:CAwBp+uClZr4VdfiBQ8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hb:CA/ugZradfi2iNWB4qO9iq7 		False
...
C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 140.92 KB MD5: 90269cdc1f764d93e678e85a56119a25
SHA1: 120216ec5ab107b518d2ba5ed46055eacbea8019
SHA256: b615a180b47fa7eadbdeb709d06a40eff2b23ba32e07745094ce645a51b23279
SSDeep: 3072:XA2B9eHwhAYcj/DiSyefCXCIng8zTgV40KFUvKw3ZWI:XgYgiSyefCXxzzTFpw3wI 		False
...
C:\Users\Default\NTUSER.DAT.LOG 1.92 KB MD5: a05ad424a1c8f87a292ba3356bf8c3ac
SHA1: 81c7b5c03f688556700c712b582febc573901a18
SHA256: ebcb0d1d43cdaab0874a7f9945b4a889002fe0c8d710fc8763696fa62dc08b2c
SSDeep: 48:EEeDBOEhxL5kgsxwVYh5hZtdLKU1iNWB4qO9iq4O:E3dVtAx6YHh3dL6NFqO9iDO 		False
...
C:\Users\Public\Downloads\desktop.ini 1.09 KB MD5: 8ce9f7a402489bca83dd335b0924088e
SHA1: 4668d1f2eaae8316a817811736aad6d5dafc8644
SHA256: 6bb7d5b2cb8464cc568a1db8824c18091b8f70e6feb458fa5e6fedea2f9b9630
SSDeep: 24:/HhR/uKemx+K1usMqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HsB:T/tDuciNWB4qO9iqU 		False
...
C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 140.92 KB MD5: e57d07beb2d0b6239003b0009f6cac05
SHA1: 323068caf39cf2868f971eacd6d476cb940635d7
SHA256: e41dd7f60f5041207a882130ebbf8a3e939a3d365dedd8070a53df073f6ec4dd
SSDeep: 3072:GYvmMGJv5rUYbYeczRCiYM7CInglSFiRpEBSMNQ93FI:GtQ2BWRCiY4XIzEBS0Ey 		False
...
C:\Users\desktop.ini 1.09 KB MD5: 0940acb02b0ff198d9b15ee1597ae2a8
SHA1: b85e6b02bf005411bd81da24e0b63a23ecaa15c3
SHA256: 784412d6b81f49f26093372c6ac8ec125c341db4db582abb8673275bb5bc59e3
SSDeep: 24:QHfhQsebLJvsmiGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HJ:QHfhQsAzi1iNWB4qO9iqp 		False
...
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv 9.25 MB MD5: 4e9613760cfc0cb9173ceb32ecb80405
SHA1: b222e1b1fe56f3a12fb4f6f1df608cd7f3b0dcee
SHA256: e2b697c68278b4ad79614b4368e9c5587e2bcab26830f59c0cb65c6a6b054657
SSDeep: 196608:YgCOVJ33O1UyN7iHglZ1JNzsmmQ7tbq6jZCzZTlkcEEnluDbBHsz8LDa6exW22pP:3JO1lN44/NZmQ7djSgIluug/ayJKm 		False
...
C:\Users\Public\Videos\desktop.ini 1.30 KB MD5: 504383ff8924080891913e38121dc185
SHA1: 51d4c32758c38903be9a1f0bf72084573c535b05
SHA256: 0de05f7144229418269da4791d7d9c542ddbce4c422be8d0f5be42c0480bb2ba
SSDeep: 24:3zGYkkAywa0zFIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H07:HBAoWFiNWB4qO9iqk 		False
...
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv 10.00 MB MD5: 479f5813ed7209ba404820e901837f7e
SHA1: 153d572c03cb364c7883d4be16f157e21d0264ce
SHA256: cbaa8f08b470b26a98148cfbb9d3d6f560bcfd9eb3a4d715e5b1814c7363dfe7
SSDeep: 196608:YMNUU6W8iG/m52HRkjtHXo+5/9xM+Z2i0SOIeFlfZ8lPQGvwGj5Yza:l6W8v/mrjf/zMw0SZeFZwPQGj 		False
...
C:\Users\Public\Recorded TV\Sample Media\desktop.ini 1.09 KB MD5: a7dcf20a53d20d94db5198d699b33a79
SHA1: 5ef56fbde39a070b52ff1d3adc75e1cfdfaffe6b
SHA256: 9ba22d197f4ddaa9ae6032342f0a1759f4d527687c9fd1e730cf0ad3d3571c47
SSDeep: 24:duDjuNg0jtPl2Z0gqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HiY:dyjuNgeGO/iNWB4qO9iqL 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms 512.92 KB MD5: 25fc9f65cc6e902a2d2206dfb07578c5
SHA1: e1e07a7d08ad7368113b9af38753eec6c4dae133
SHA256: ab4675db2f1623c145aa1486bddfa8f3b80bdd9236fefa8a959fd9479bda80b5
SSDeep: 6144:P4QluNzizfWq2ToqMr5eaVQ/EDJrAmN0aJtAv5/EQt/7VaBqYoA:AQlKziTW5ToqMdb/VAmN0abAv5TVKkA 		False
...
C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe.SATANA 445.82 KB MD5: be0e4194b08a1b996ae0718fd8267d2f
SHA1: f9c97963cd34236b319133c2a869f7d0754e2cfb
SHA256: 2a9328ae3f21fedbdd4efa27dbb2677ce152d36f2d4195a5b7cbc1688bf90f1f
SSDeep: 12288:irAESG5rYCpiyex6+iqlEtxsaw0zEhpZzxK3:icES0wyex6+iKEt7wkMNs3 		False
...
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg 607.26 KB MD5: d4d24d11bbf927bc2ecdfbc7f3d52c5e
SHA1: bb6c94cfbd60cd49b44e5cca534159f0bfbe8271
SHA256: 056afd3edfbcb25e0f402d269c33cd25aa3ed29f82efad1f51df5e7c4766661e
SSDeep: 12288:jeRTKP2dZiYsO2jtD9rzy47cgDzqu4Mb7ICcCwaCDl3xaJfR:jeW2n6ZDpVciznJb7wRDl3xaJfR 		False
...
C:\Users\Default\Links\desktop.ini 1.50 KB MD5: cbef17f95de0e697049599e38b2cba0d
SHA1: c994587877444a97644f76feab0d72e589817e7b
SHA256: 6519e480d859afc61355cdac5c9428ad89abfa0dbc3505572d0723e47700ee72
SSDeep: 24:/wV2uQQ1ky3heObpz+M382iBwmcp/ch7D6qlw9Nc/tVD4qxfR3GKUhn68IRdZ36n:/lQ1kKkAZT82iemgUhRiNWB4qO9iqbOM 		False
...
C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 1.40 MB MD5: 851daab1d9093c5100ff6858f44ccfcb
SHA1: b5ff5d130d55b81a03e71d286ced79a59f895484
SHA256: deb9f78dd241c049e1a8d798d6fe612153683b74767f492bfb2845a86e2cecab
SSDeep: 24576:3h9QRMBwBjeWAKE19Q2UZGovX2bmgbSzr/DhVVjTnfhDzzXASTL8qUeQ:3h9QqGNeWAKEPQ3bgSzX1jT1zw8L8z9 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp.SATANA 1.34 MB MD5: 818d8c286b034e7c9377ac64c52e3294
SHA1: bc239e73122998141e144199d02680d559613d37
SHA256: 4650e76d3867ced5c521f6a202278dcb0f8c2df1f37fda8a65f450b63e4293e8
SSDeep: 24576:+zLgRvoVWHxVslEP4psT4zexQjX79kU5Xz30qMGdZO2iofLxvKun04a:+oKwwRpsT4zeqSU5D0PGdZndKun0r 		False
...
C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe.SATANA 764.47 KB MD5: 1fe4d3bdce20d3a2b86214fabadc9ff5
SHA1: 103a2d0ad72ddfa98f79f8d38f717163a38e0692
SHA256: cf8da81c0457008ad870717934199fbfa089651ced2aeec82881508d039fa169
SSDeep: 12288:1jibKKqA8BNJFMkOJZMOj7GyuFEoCtXiaHbI7CtqofCThZHA7jaDGe:1jibKQ2L0j7GNFERtC9hG7cGe 		False
...
C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.SATANA 1.56 KB MD5: 495e1a83b9502bc5bcee244c8cc0cc3a
SHA1: 89427e19235d06befe6d77d1284e8d64d7915b2e
SHA256: e80443672120a7e9d30b61d132b6100d68e1acce16d1c61a4dcbc6481d279b10
SSDeep: 24:pPx8cPNB9EFhhDaXWGrzJQT8W62qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HYW:pPKcX9u2mGCoWaiNWB4qO9iqN 		False
...
C:\Users\Public\Pictures\desktop.ini 1.30 KB MD5: 9cca80c3185a214e01d2e17fcb731dad
SHA1: 4eeb83ad71422e7f017d1bb7cf202df3cc1efe56
SHA256: 9b958204ec8e311a4ae5a20b5f5825785671a7198d868c7c5512e74e41a088b9
SSDeep: 24:qXA0fmKF5I1Ni7urX+qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HAMc4:6fmKuNi6bdiNWB4qO9iq/ 		False
...
C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 144.92 KB MD5: 3cd8da3cb71784ffaade445c99b33222
SHA1: 44704ef13bf87cb4696fe8d6605b5c1a07317a50
SHA256: 17a08f0a103a513c91c5c5deda39b610c601f9d862be1cde162d605910440ed1
SSDeep: 3072:LneHwaFHcKXcfiDDatCIngH3oPBZAx2P0uUxTG:IFH0fiDDato6ZAxg6xTG 		False
...
C:\Users\Default\Favorites\desktop.ini 1.33 KB MD5: b589748669fcaa972d5d2bf190ad22d4
SHA1: 121ec424837b4c63029f5fcdf1d3a8f1cfdfcd04
SHA256: f9eaf70699e4dbcd854c8997d7af671d3fc9be2c173f46a050bd0f6f83cac971
SSDeep: 24:ay6ywCdce8dpnt2GBlD268qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H1/lE:nxqe832aiNWB4qO9iqV/2 		False
...
C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 803.36 KB MD5: 27c1ad30b12a9ef6fe4f432bc4d62994
SHA1: 51b25cd779abe01d3af52a8a427276abaa4c8a2d
SHA256: f5e0e5f583cfa52eefc70703d3b3e8e4edd20ac4151e5c85f3e12ec3a15f1d38
SSDeep: 24576:bdlYLGasY/XkWfZKr2Mi+Zwkpthn2S8m2aL+x:bd8GfY/RfoqMi+ZvsSt+ 		False
...
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 4.62 MB MD5: fea33d5017942555751f56b7a75bf875
SHA1: 0356ebc29ab58ddab89c4373cf45780ecad40569
SHA256: 718c8b2d9ef350538a548e57bcd461c94f620c3af3532d0bd59040d4ad9c2a07
SSDeep: 98304:C7ludt5nYzgdtO3hmO9Xyh6zrBItJ5w1Ii7JM4gAN4Vd0bJMwGeytsw0yUT:6o5eOOIIvSJwyAydH99MT 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url 1.06 KB MD5: 7438ace4c91b8e086286a33d430f3f69
SHA1: 770b91f1a7ee28184dcd06c993fdb583cd65d5c2
SHA256: 315dad8cb87d3e100ef46eeb14fe0897eacd2a1a0597c4d00e6350d12492a40a
SSDeep: 24:x5MMkXaApdqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HkdS7:xoXKiNWB4qO9iqEdS7 		False
...
C:\Users\Public\desktop.ini 1.09 KB MD5: e85d23fb3d074bc66dfdf3457719bada
SHA1: 293337e41aa4aa48435f8d495436e0d3cc71b1d6
SHA256: b870afdcb48a9487347263b0a16d7bbf95d1729ee9c67c56e9ceb334a1a90edb
SSDeep: 24:ZIVjUJat18Bka3uqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HuV:WV44kBka9iNWB4qO9iqc 		False
...
C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A 1.00 KB MD5: 7615075fe65165fde667bf15464fae05
SHA1: b6acfdde483fe63e756df8f0da0f63c9d46db4ad
SHA256: 7dcfbc6deb7493c0602c8de2d62ddbc6e8721968105953640d4087193c241e2c
SSDeep: 24:UHUzAgHQLaKt5Hs69qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HT:dlqaKt5HsriNWB4qO9iqz 		False
...
C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 140.92 KB MD5: e8916e361601a02c564cdbb292560a3e
SHA1: 3bfb3a749b2e2a7c106bcf3d3c7b74c81087c0ff
SHA256: 42a01ce7d079bf5ce0900652cf438a409582f2cd9475c90b5d575e97b5b85014
SSDeep: 3072:2MSeHwtStc+hriR7zHCIngg50L16j4I42qhoI:juStdritD/50k4lWI 		False
...
C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.33 MB MD5: 770a63a756830e905cbe789524439b2a
SHA1: fe3cd87ab89ee1c965932e0046b06eb7ff397e1d
SHA256: a260055dadc3ec7c6dfbaaa31cac182841848a88d35e70861f77a9043d0265ed
SSDeep: 98304:TMN4w3blH/umgoy/JzUgC5x9iCphNIpe1FbfsQRc5fjkoTSO23QUb7:AN4ub1/xJgQACpzpXb/2fjkoTRU 		False
...
C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 148.92 KB MD5: 703340d261fd6fab2a7d93a599d205ea
SHA1: d02376fefc2ee5b91aa137e8594952c9007aacac
SHA256: fe4555dbb69a39b7ed5d787d6b81d225c32e5f65328b346b261459c40765d7c3
SSDeep: 3072:ErxR6bFBGQr09ie3A3RdD3D+VG6tm4wPHXB2D8m58V5:qrqF4qVew33bZ6t7wPHxV5 		False
...
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 3.92 MB MD5: a84a52c620649d8f70f988f6d2ee6533
SHA1: afd6cb23cb79de62a82fb55dbf6189303fc20e4d
SHA256: 79b4921dd19a2cf36509c7a5accc32493efd6bddec896503fea0813733063689
SSDeep: 49152:M+GneNmQbc0URp6bolWB2soi4nyPFMaaS/cvw0/NVuUEPkcjnSpMWGlEWIj5agk:M+RIWiZIXPF6S/iwQNVbEXT4rBo 		False
...
C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.71 MB MD5: 425e13c82d630c450a3861ae9472995d
SHA1: 080902ca921390653e00e586428533223b12aa6e
SHA256: 578d6a42621fd2045c30497b15e457809f625f3a64baaad0cfd6b84d77ac2ad2
SSDeep: 98304:abuFRkqsBHV0jMgJ0DkDFmfk26WSj02PDm9OtxILKYG+GEuuptrUy9yTJuQ3bR:ab0RkqsZV4g6Fm82Q0Qa9OtMKYG+hTrc 		False
...
C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml.SATANA 1.05 KB MD5: afbf75d8895b476dc5ff443af696c04b
SHA1: 08da231fc7efa3a54310ebf5c306c7362732fac2
SHA256: 977dedf27354eebddd7b5e0fd24f1754928e6ee8c82def429dda754fe44e54c0
SSDeep: 24:HfVS1lgjPvMwZqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HA26:HfVUIvxKiNWB4qO9iqgF 		False
...
C:\Users\Public\Desktop\Google Chrome.lnk 3.14 KB MD5: 8de664cb2d071811b7c8827f66b5a2df
SHA1: ba74955fbebaf69d3f15e388e31596ff9f4b6264
SHA256: 2055130340c56a3c4f8b51468ab5e9abafe8f7b6eecd4b7c755ebfaab62bbe8e
SSDeep: 96:ujLVATI3uBhLbeExV0fgawWZZKL4FwSxNFqO9iR:uHVA83GhWExVWNwWZrwSA 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url 1.06 KB MD5: c837d20886787e246e86de594d91638f
SHA1: 2bb2a914bed49a7bcd85e28e9d196704317a8fd1
SHA256: 7e864c5afc8a206cdee70803a0cd1a946bf2fc85a751de7ecd7279bb8d4ad2fa
SSDeep: 24:JJB9lRirqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hse:bBVLiNWB4qO9iqv 		False
...
C:\Users\Public\Pictures\Sample Pictures\desktop.ini 2.02 KB MD5: 4c1d2e2fe29b120b6d810dce5e780eb4
SHA1: e74d5adfa87dfba05fe71ec8020e6f7499e888cb
SHA256: e71a4f67f56f06ce704226d616786db29768af6aa05e26d75f44178cedf0f395
SSDeep: 48:6ScD4oF2EjBwHmmqHyOInBASLg781iNWB4qO9iqDgd:4D4Byw8IySM7pNFqO9ixd 		False
...
C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 1.23 MB MD5: 0a5297d4e3867e57e1d9e81708e75fd0
SHA1: 191ec825ad34d364eb337cc3f1b53f514de32556
SHA256: 50b64817ec136766ede1099365e3ca4276fc0f48d7325f02138f1625eab37457
SSDeep: 24576:THKFhBi2k03YQy8hrOtFmuic4y7klC9nE7Ozotm1u0nM3vpfSSNljgL:TB2k0oHI8/ic45C5EKzoAutUutY 		False
...
C:\Users\Default\Videos\desktop.ini 1.42 KB MD5: 3c4b5b5c7d978b6f7c4e2b946313d6a8
SHA1: 1a68428bd747b646b933f1a279491f3cef20f8c4
SHA256: 997f49a923cbf957cc24aa7dcbd9a73aacfd16b06caaee3fddaaf11db7ff90f6
SSDeep: 24:tzrVHB6bL8Krlr6gX8kU6+5j8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HmFTXt:prVHBA3zX8E+NiNWB4qO9iqGFTXt 		False
...
C:\Users\Default\Links\Desktop.lnk 1.39 KB MD5: b2cd39b0871dc639042b0f27fa1039f0
SHA1: b751ad1c6f6126330fab1fe5295bec9ab81408cd
SHA256: 564a3f9b29b88a90e0869d4f18d7eb3ae815c0140110450d235e327848b26f04
SSDeep: 24:tYJMNZFVn78m4DnTlOTryqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hgz:+JMNZzzwn5UiNWB4qO9iqAz 		False
...
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg 760.53 KB MD5: 5d742efe7d633433113d5a75fd847358
SHA1: 983c2963356c862b98ab4502d7ec84f77b0be011
SHA256: 3b9d2b0353e4889c9b7fdd2bc452bdcf73991bcd6b2bdd4480dd645317f2ab25
SSDeep: 12288:K/jK5x3I90wry4qBKL2dDp1MZgHvPjju3B5izZOcriOnuBgbITi+ldGdZ3PRipGi:amdICwHL2dDp1nre44czuB0ei+gripoe 		False
...
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg 763.45 KB MD5: 257c366ca61cc256134aa630989800cc
SHA1: 6f68f02749de11c14ec20fecd4d5b0ec80423b4a
SHA256: cbaa925b4022a28f75ceda73f1e07f3c1faa1030c4da7e2b6303ce481d81f014
SSDeep: 12288:2mn42A9UQZxDSGy5x2ncC/bQqv49uKTm7xsqBZKOVX3l1TBllGEF3:h4h9UUxDSGGxAcCTzv4kUm7xJeo3fzlf 		False
...
C:\Users\Default\AppData\Local\IconCache.db 758.91 KB MD5: dd563f7c39ed83cdbb8ff862c7440567
SHA1: 2b7b588ef32fb498f75c71f0ef0e624c037ac1ca
SHA256: e0353d715ec1c0a90f4cd3b1d9c3735408acb84f9e59354339f2d53a8dc01606
SSDeep: 6144:AlNzBc339olAUWRkbQDRKyufC5mPzFqjbIgEeh3Phwp/0wuRKqJiaGhDrKar:4NzBc2KVkbWMfC58zKaepeqGhDDr 		False
...
C:\BOOTSECT.BAK 8.92 KB MD5: 32bd8b3ee2de4921cd9a6c4c6fb24919
SHA1: 06e69f90bafa2f2b76d69994286ec8c37a9e5200
SHA256: ce266350e0fafe69735fa5ea029d79a2154303c0eb1b6bf32e84d4bcb4e86a4f
SSDeep: 192:ysC6aPREP8fe86u0SeSjOlyPZtr20PT7JWAshcE1h6:ysCdEP8fe86zhSjOlyPvrL9Wlph6 		False
...
C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm.SATANA 1.67 KB MD5: 624a4b8f1d110849569ea68aabdffd8d
SHA1: d92b3f3408a5df8a096ed1c129d979a7e672e183
SHA256: 51775525b3d890ee180cad4520ddaa4611c10e6dfa8c225ec468e76795bc72f4
SSDeep: 24:6EcLVh0tBdrkYyrzebwdO4zf7L9VEgvvqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H1j:tUIb6fe2fNVnvYiNWB4qO9iqVkM 		False
...
C:\Users\Default\NTUSER.DAT.LOG1 185.92 KB MD5: c3e48f148eac22e7d2a86773ad5e7758
SHA1: 65bf50fa9d3ae1b303629c13b42f5c9beac9f200
SHA256: b10f415e7278b100a474cdf2f2ba47dd1b6c06e599e7fd51dd34decb68727fb5
SSDeep: 3072:MNLpzcCaHxB4Iw74zMSJut7pJNDv6s4Y2qplx:MNLOCaHxyF74s7pJlShRiL 		False
...
C:\Users\Public\Videos\Sample Videos\desktop.ini 1.25 KB MD5: c96616b78b095946a006283443617454
SHA1: 5a0d083a98659c60b5296d283257d8a8832ace69
SHA256: 9e8c7638e4abb5d61afc2a4a01de175501adf16263739c8f87f8e44e8ff7158e
SSDeep: 24:wz+Sk8WyyXJcclhwdAovqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H9A:wKSkwWyGsAziNWB4qO9iqK 		False
...
C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA 989.23 KB MD5: ec0437435e8c4235b4900c8961beb47d
SHA1: 737275036abce3a0657e464bd62fe25ea815c06a
SHA256: 9c0fd2d38ea66fa270d772b03e0a0476a8f8c36f86e321b8c5631887bde7bfa3
SSDeep: 24576:O/C4fXR+g2nNeItkhxKCl79TK6/j9fO2/KU6DG6A6BMSg+:/eXF2NeItKxl79R/j9IbnBMi 		False
...
C:\Users\Default\Saved Games\desktop.ini 1.20 KB MD5: 6a7e80181ee2567e679c8f5d0856310e
SHA1: c64d1cfcd95beb88d5ba8a5293c47fa7aa8be40f
SHA256: 190d46b164e7c8eca7ef9dd10298034a272650c47a40c38991f4f70f8cd89f0d
SSDeep: 24:1x5X7h84KZkBvFf7m4W9wva9LBtVdulpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hge:lX7/UQdf49FJZdFiNWB4qO9iqiu 		False
...
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url 1.06 KB MD5: 49c5e3290353ac0e827d59bf046f9963
SHA1: 94549c391f3210aa9874df00aa299c86743b34a7
SHA256: b82b5b1d1481253771fa101e1e8f9e401c1f26f68016c397eabc8372548030fc
SSDeep: 24:MTuZAWAitY/8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HlNC:M3DXDiNWB4qO9iqHC 		False
...
C:\Users\Default\ntuser.ini 0.95 KB MD5: 8d08cfead41e7ce418d34ac3abc970a4
SHA1: f2a66c60841be932af5e6ec8c80c4d6ea8e9a260
SHA256: ec3efd84ea3a91fe401c1e2f13db08aefcd44b813c9b66cc93c1a425e403116d
SSDeep: 24:5qSE2phXp5Eqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H7Qk:AXehXp5DiNWB4qO9iqbR 		False
...
C:\Users\Public\Recorded TV\desktop.ini 1.00 KB MD5: a7ac5a8ff1d2df21cd32f4a511e35219
SHA1: fc640221cd3baf817ebc77994c65892b2131f2ec
SHA256: 55f5989e32d686dc63bfd2d5d2a79b863e7932aece2a4b87b73b4a3423a9d5ce
SSDeep: 24:5QXrxHV0gpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hpej:5Q7xHV0g6iNWB4qO9iqJej 		False
...
C:\Users\Public\Libraries\RecordedTV.library-ms 1.78 KB MD5: 529fcc7f29320de945749a4b5be00545
SHA1: 58bad841277b1cc304c5f297351b7bf96f4ac23c
SHA256: 11c8b8ccb57696eb0be6af574b23259bbd9e76addb13262199f23a8696ad958f
SSDeep: 24:0kK1W7auz0lWRTsydy1jFf4zgyryLRM9urFqlw9Nc/tVD4qxfR3GKUhn68IRdZ3h:071W2uAYqyy1usLRMziNWB4qO9iqS 		False
...
C:\Users\Default\Searches\Everywhere.search-ms 1.17 KB MD5: 87c2d943f5ee2fac81d882a419c1b108
SHA1: 0d44502bcd6421486c22ce002a322bf9ada6f79f
SHA256: 8691231d6976a640e522abe88694be017b180d25d113026dac50371f85cff07a
SSDeep: 24:ld2xzoE5AKQzUg/gqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hk:r2xzD5ASmiNWB4qO9iqE 		False
...
C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.SATANA 1.56 KB MD5: 61f63596e55687b722fbedba21b48260
SHA1: 4501c591c99c71298ab456c1d380eb2d401d82f1
SHA256: 9bd5bc4bec19eb6b38f6c96fec46f29e986d35e505bfa4251e17d3d13e6a2efb
SSDeep: 24:iUODocAigsLHUE1e7WdfR46ALrTGuxG7KO6qlw9Nc/tVD4qxfR3GKUhn68IRdZ3S:bWocAlyUYfGFrTGkGpZiNWB4qO9iq4lO 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp.SATANA 10.00 MB MD5: 9a328aee1fc935ced32829928a9d368a
SHA1: a088a7f9ce3cc2ce9ea616052c0d74be6bd683ec
SHA256: 7010b8d136c195169c02101c768fc8e7c022d7a7c9762a24dc2bf2af03a27c35
SSDeep: 196608:WnyozVU3Ux29/rGUvDXadSLsS8nQsiAESOsYnwZrja9segf:myoBEUx2hJvsItAqpnevIu 		False
...
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg 827.04 KB MD5: 901b60158f3b1244a65913699f3cad60
SHA1: 0170f737c088d4d4b167b0e2465a2de9f4dde941
SHA256: a6f1ff3199e35fb839c0754dece5c0295f6e092b962e5505299d91a9d8a8aa76
SSDeep: 12288:KOEyG5CJf6dfmPlqe/G+3HMJ0ArGwC3Dq0afrITGG9C7yi77p1vEminCzK2jNs:nA5CJFPY+3MJtrGVmfkTPG7jvEt2Js 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp.SATANA 246.92 KB MD5: 215c4ef444eea70b2113ed261cad595c
SHA1: 3d8bd0e1403b8a8ff26549d035b075a47c8e395c
SHA256: a5297299088173b070576f61ee4264f098057202e898bab5e714ab345f387105
SSDeep: 6144:dx+vAGNff5P75SaKa+RMJWy6F/VEt0FtpqIHPE9/hbdkkz:H+vAcBPgaLJ7KqD6u 		False
...
C:\Users\Default\Music\desktop.ini 1.42 KB MD5: 708eb041ebec1c0bb9aa712eb3375cb0
SHA1: b3aef74b0da73de6ae2519ec9e9e384869823c20
SHA256: 9ee1c8bb3b66f348c3dadf2b56d12654fed7dc94c655b16e466c744074c3e4a3
SSDeep: 24:8QtnsRfH03XJvxMRX9VB/RHhuhqOi8Tqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HCU6:BZEquB5Hhuhqt5iNWB4qO9iqif 		False
...
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg 549.05 KB MD5: c44b050c328d1c16aa3048b3ead71cdc
SHA1: 1fedfe4bae84d1fed6baaccd15b8f83d8b28bfcf
SHA256: cc1c3b01b25c2a8a24a56eb94d74442ca7612ca68491e1c3ca75e21bdb6ef892
SSDeep: 12288:pSBRxVnMmNKP8DYn0i4odTmWlD9A7Z65FjcusuTlxO3tBXW/93nNeARw8ueUBmq:ItVnByU2B4oJm29kZ5ex84FnnxUBx 		False
...
C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 148.92 KB MD5: e54fd96fb6ee6980b3f67c38733cb468
SHA1: b363381fc07f6080eacc4e156fa995f03490015c
SHA256: 8a1c857779c6418877e5dd883ecd3230d17967a004dc48d9cef72846412ba69e
SSDeep: 3072:zVzXyRGQr09jMoL53D+Vw1rjurlNIqp8nX:zJdq9oprjFJ 		False
...
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url 1.06 KB MD5: 78e98eaad361200baede7135c33f5b88
SHA1: b1523e613a295dcae25eb8c95b322281e58d59e6
SHA256: c00077a8475fc166b143bff6b3a9d3cab8976069a8d662d46a9c8c251acb1ac9
SSDeep: 24:mjMIDC8V2Smqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HZpOS:2MyVDViNWB4qO9iqjB 		False
...
C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.92 MB MD5: 44e66cf333c03cf5a9e215590a1a9ff1
SHA1: f05bff39ff4190370e7b690ee6515ce05d150f4d
SHA256: 90234072b1f018c3bd17e69a6fe0efd45747860a1e45ad541859f770a4ac66f4
SSDeep: 98304:2t11LcaJw7l6x0gqOddM6L3eJl31N8Xh0vYyRqYTD/BaEG22wOBh:utJwR6x0g5bLa3oUPHD//U 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url 1.06 KB MD5: 8251d521a6ba151934f7f5207e37dbb3
SHA1: a958f9508444aea3e4e8117b41a31250e0c5d00f
SHA256: 69c7d96792200188361f81b7f6ec67f2edf3653a685e3eb132f9e720b02b606e
SSDeep: 24:upxmkYVO5qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HWGX:y+5iNWB4qO9iqZ 		False
...
C:\Users\Public\Music\desktop.ini 1.30 KB MD5: 264e7db2beff5abff9de478282bb87fb
SHA1: 05d11c57d64a8809c20f2651e63d55d43a919a98
SHA256: e4d4bcde784d32fb737217e60aba373847eed9f7196c029b94081fbc705ce3ad
SSDeep: 24:Sob1f+31IIQp9qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H/1X:SobJ+3FNiNWB4qO9iqZ 		False
...
C:\Users\Default\Searches\desktop.ini 1.44 KB MD5: f09354ccd5def2b6b828a2d5edd45bc7
SHA1: 7f57bfad251cab4cf012d9dd3142ba8f904db355
SHA256: da6bef7d0f15d055b3ba389650cbf38277efcbff6e9f3ab13f0c6f07ec95c931
SSDeep: 24:QvDNSL/0piCAAJ88cV/vcC8nGta+Br8VclJYpRB5qlw9Nc/tVD4qxfR3GKUhn68e:QvZiMsCbJu/OGaCAcr2ciNWB4qO9iq0d 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url 1.06 KB MD5: 80276eb7acdb268a74eeaf293469522e
SHA1: 93685996f73b35d315129554c7acf74727f4976d
SHA256: 02ddded14a3cc3b688e93f9320b057efad58b28c71b0537f38fa48a35793dafa
SSDeep: 24:ZKRs2RZ9xEpz+8AIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HIC0vk:ZdkkiXiNWB4qO9iqoCGk 		False
...
C:\Users\Public\Desktop\desktop.ini 1.09 KB MD5: 92746cae338132a8d37e81c27d628ae3
SHA1: 8868cfb6da79d736ab6d4e3e8ced6429ee86b4da
SHA256: de577666a8b46982f29a6fa3f5e74e1280eaeda315ce88977f38b951e5ef7f07
SSDeep: 24:doM/9uUEYd8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hz:doMVuUFdLiNWB4qO9iqT 		False
...
C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe.SATANA 453.05 KB MD5: 8517e82056ec5403f8b73925ca8d6cfa
SHA1: 572ebb056a1d99c3d89e8701f74d5b941b915325
SHA256: 1ec512c4f67bd79a7ee093d6e6a0837c99de673ac7f318ed7d011d8a88e17542
SSDeep: 12288:qZprJumdkALmDjZQjO3wvt5aGhgZfwBdMy:EImeALm6TvzaIAU 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf 64.92 KB MD5: 0d377de7418b1f6f2dd8b8266e78ad05
SHA1: 30cc0c795f2e11c17dd3c97d3d5187ebf21fc486
SHA256: ecbfe94aaef104db5225cee8f11436fccb535cfa2a217cf68f4d3c27b6ba3bc0
SSDeep: 768:OLoyG68uEfYPElQ1SOls55HYJOUhsTidnfWsIVMrMjuB5P:OEyNEfRI2TYJeWksZMju/ 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Money.url 1.06 KB MD5: 9b2c3ebc28dc492d9b8095d7d2bfdeca
SHA1: b551ae4160960179b9633a15f170aa1973b35aea
SHA256: 340acedf2cc1d1d620950eb2f20c00e702ebe16befb01693ebb09607083b14bd
SSDeep: 24:F0fnv6q94qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HWZmvk:ufnv6kniNWB4qO9iq2Sk 		False
...
C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 144.92 KB MD5: 39f90bdc4f75b6be5b3814f4c78c0e9a
SHA1: d3b37c0e2fb1f6eb3549a35818ca28f5c5d0e275
SHA256: 5b4d216f2530caba198b10a57ffa478eefebbffd65c557a805dbd0997f3995de
SSDeep: 3072:xgQSVuyeHwpZWc3+iF6nuCIngFzbAwi48NY/5Jk:iVBQW+i1+P18mk 		False
...
C:\Users\Default\Searches\Indexed Locations.search-ms 1.17 KB MD5: 3db13386ca81237f2568912430733481
SHA1: 08b09cc4e6768ca089ec6399300ecc1a1ee4e061
SHA256: e42acf9895c7cb8863e17e5a21179295a373d960403c3d677d347e7de5beebe6
SSDeep: 24:Z2mdX4Wj9H6rzr9Zafft2qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hjycjt:Zpdj9aXRAntFiNWB4qO9iqDy8 		False
...
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg 859.71 KB MD5: d9937be9eafca2fae99e43b5de0e9d41
SHA1: c5c598a7c2450e23390943e5c587f743c59e3e76
SHA256: d4ce7691d674d3f703f86cad0aca2294419d32ebbaf4e3de68062acd9ab146c6
SSDeep: 24576:iCFV39OW+lPLhLcDaRhhRkBjn716CZMJn4Pk:iC5klPu2sJ71JZy4c 		False
...
C:\Users\Default\NTUSER.DAT 768.92 KB MD5: df78b20b2570a2d3ca98f8c26e329d66
SHA1: 59384b826f1401b921315c9d5870c7113718e64d
SHA256: abe8627c2b5f2d193fb7bf013a286d97964dcf3463c619d7c2f9663321ccc5bd
SSDeep: 6144:QIbGHFtLZPV3OKcH7cOlLeNoRy4FHCHCGJgyWrK+ztU+OUe70EyxRj+TwpYsv6do:kiFB4oRy4FHCH+yOK+Jy0l4E2sv6d7r4 		False
...
C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.SATANA 445.96 KB MD5: 41c9744cd1a2f12488140cfe553325e9
SHA1: 11e6e703e52d59d1dabb07947ce76cb1156963d9
SHA256: 27d1f877db719eefe70e0fef0bba318bfc62e898a198f48f4e54ddc974cfba62
SSDeep: 12288:yzIIq0FLJYCvUdriqlE4UO1b21Pzd6f6A0UXcP:yzI5MfvmriKE4dMk70UMP 		False
...
C:\Users\Default\Favorites\Links\Web Slice Gallery.url 1.16 KB MD5: 515bbc187af0937c7c7fe5478f8ab478
SHA1: 0f116d113a451ffead555dafdea27cd5a3342022
SHA256: 49a2d3ed136782cbfe9a521a3c37d34aafece2300a9172a050090a18a51cf501
SSDeep: 24:6OGBv+KQTpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hq/8n:56+KQuiNWB4qO9iqc8n 		False
...
C:\Users\Default\Favorites\Links\desktop.ini 1.00 KB MD5: 8af84e8646936ecc876aa92ac6e80809
SHA1: bff519b7f06c421c463f45e5874a6c864c8ff534
SHA256: 03935cc4c5b948a5431f8c1e3b00496a315b46dcf2f23b0dbb68631721f53d71
SSDeep: 24:lExDtMyqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hna:lqDtMBiNWB4qO9iqHa 		False
...
C:\Users\Public\Documents\desktop.ini 1.20 KB MD5: 1f9600740a977492e9701485dc9b258d
SHA1: 4fe647ac57af98222937c09fd88c59f078826e13
SHA256: 23333532d2363f60adb26174f4e71eb1ccc33ef5e0a55cbe754c2443046ffb9a
SSDeep: 24:Mc7A9oLZWbE0Xe1YMvh5qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hgjj:LA9oLepewiNWB4qO9iqO 		False
...
C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.53 MB MD5: 9588ca4a48348ba639ca2c2c324ec56a
SHA1: 64310a758d3a5567563225d8f2dcc2db2da20fe7
SHA256: f00d529c38a28f4a3eba2d76580a9a96175bb61f631ed59e9504a74a2538d374
SSDeep: 98304:LPyuDDI/I6I0eL2TOaLceUPMKfz4g3Schw3wVRdUABxyhEby+8EuEvG/P:LPyAD2yEceUP3kTgV/NryhQ4n 		False
...
C:\Users\Default\Contacts\Administrator.contact 67.70 KB MD5: a49c5476519b735e19fb3fc1c6d62a71
SHA1: 219911b3324701b7e45fbc1819804f06c58fa025
SHA256: 715e479d2b8c33a4f74f972006af63433c9d109dbf33f97c21e98d8639d39f4c
SSDeep: 768:Xyukf67sGG8h8DKAx/mu18J3Mw6UMslMD04CBGz9UTAngSilCfoSO8+Jv8jtUkdW:XF7sVH3N123Mw6UZp2U6g50W8wkU57N 		False
...
C:\Users\Default\Links\RecentPlaces.lnk 1.28 KB MD5: c4196e488530d720eb47db712456d2f1
SHA1: 40121abb3d498cad64e120b3581517fab9046493
SHA256: 9799a85475704c0703fa3a079b6eadcdbe978e0ad1f42fe8271db9dc44a8e55f
SSDeep: 24:1h+B05v5cN0NZh4bH16yz6qRqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HCjeP:1Id0rh4bHEmSiNWB4qO9iqV 		False
...
Modified Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 140.92 KB MD5: 6406252f225f9e7973a0cceb7833e6a6
SHA1: c50b6f2436c45707a6b0e33f0aab65544550508b
SHA256: ae6204f1f0d760544be66653ee9394e29cc0a3210d769662d9a533ae65e0d30f
SSDeep: 3072:fMfeo407iSGJv+bcjhcD68MfK2ix8yHhnCIngKSGUrZpJdeXX:k2o407IjhyMC2ix8yBn6en 		False
...
C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm.SATANA 1.58 KB MD5: 159adabcb32e7d173844f81cd43dad88
SHA1: 6bfa87e81819f4e052e84531393d46fdd5fa7d4d
SHA256: a6354e956429061fcb6fd18fef378230854806fc750b02e5ea3ed1bda160a92f
SSDeep: 24:ELWKc8YPKVbz7H9GuGpg9E3JtOTnqUEWxTD2qlw9Nc/tVD4qxfR3GKUhn68IRdZa:ELc8YC17H/9monhEWd5iNWB4qO9iq1 		False
...
C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 148.92 KB MD5: 83f0aaab3af5ce24107b7e58fa90b14d
SHA1: 991df8b1bfe87bf915c99582c3a698267854ba35
SHA256: 75defe3b86544e3475ab85b35d37a86011e6709c973b8d2f5245b7be43e70436
SSDeep: 3072:+W9GQr09Nzv3D+V5yBqvacS51j4XBdMmcL8V0:PMqYfqCcS51j4XBK60 		False
...
C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 791.72 KB MD5: 0592a379370a2c3da72c9755cae228d1
SHA1: 353d707a7556c6916c14ed48a1c72e5fb0885ec9
SHA256: cc6346c297dce84cc5171250310324689bf90aac44b87c3967a83bcbb3085f9b
SSDeep: 24576:dbSZmbaiq334Hoqpn7AhzLtSd+4XzwESjyBSQ:dqmba34HowElZSd+4DwBdQ 		False
...
C:\Users\Public\Desktop\Mozilla Firefox.lnk 2.06 KB MD5: 3c1ae7da7f30f11a3cf00186f3d7d66d
SHA1: bab55f239581dc02f9cf604e45fb389b7a7b5d13
SHA256: 70e54a4ac65caa145da36fead6a9ae83a1bf21af7ab01b525a05a96fc743fb8d
SSDeep: 48:G5h+UsLRAgRUVsm0MYycewT5CEPo+E+l/6krBiNWB4qO9iq5:GrOAgRH3MlIoV+6RNFqO9iS 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url 1.06 KB MD5: f85a97d98ea0d334596e300b28745792
SHA1: e7bc5bbe63f1906acb387a201dbbaa5d75c95137
SHA256: 419f037eb8a8656ee8ab2ebbfe5bec207bc9c9fc924a81a9d0a975e1a5c61bfd
SSDeep: 24:8/4hQOHGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HqJqRAu:8kQOH1iNWB4qO9iqGu 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN.url 1.06 KB MD5: d73edb78a72d1cd8f13b5321137ee4f2
SHA1: eb381de9348113d67c84797769485062aa373e28
SHA256: 606ce23ced886b5907f0d1095293df4124e284e39ff39f7aff72d03d354d9acb
SSDeep: 24:L87dTE/7iIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H2Zit:L8tQIiNWB4qO9iqWZI 		False
...
C:\Users\Public\Music\Sample Music\desktop.ini 1.50 KB MD5: 7e153adc2c3923e021565711e47f844a
SHA1: 7e3401eaca655075e1f637c3ab062887fa38cf64
SHA256: 7bd47166f15750257d3076b3b03e6353d94f5cc78b6904d85d5fda22dd43bbfa
SSDeep: 24:qOUB6Q+1Xf8a6remjURZOEtOUW+0pL0Wqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hug:FUB6Q8OQ/9TWLpL0liNWB4qO9iqcM 		False
...
C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 140.92 KB MD5: b1e8e603cfbcca96c515428ef9141792
SHA1: e7cc5d400bf7a12e27cb6a51828f1ae52eaf0972
SHA256: c2ba064ae2c9aa521f6171f750f178c8f147c3e6d78a41ff6c6e928f967c4f70
SSDeep: 3072:CRQws68pGJvtXUc7r9hxjwiIXpBCIngNPPBN8JA+zmrC8Z7N:Ys68kUir9TwiIXXKncA0mrC8Z7N 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms 512.92 KB MD5: c190d986df63214b7c07326f8925ffe5
SHA1: 8ed4f852b8bff91f0be43c089476a1933bb9b519
SHA256: 9c0c8f8527a5fbae96ab0b3bd8b271ac100fdf576a819ad48c2b73d7a7db7eb6
SSDeep: 6144:F+V7lapShkOvXfZpPHSuL8ESolR/EEEYNU5NlOjoPD:FU7wQX/PyKlSomPojob 		False
...
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg 758.45 KB MD5: 6406080c45b516a8d2d58ea1eac4b884
SHA1: 9017dc19c37f61ece97a4561d842fe36b9782a28
SHA256: 8e74da48733d9bd0f062453eed0d026cd6f68d3393fb25e6cc0e8375bdc5838f
SSDeep: 12288:dZGwWgNn0OZ1O/rrVbH8x1n9t2qH/YO0AwIY72f1HAUkERytg3S5IPqW9:jGwW60pHSx19t4rB6f1lXRytp3q 		False
...
C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe.SATANA 764.48 KB MD5: 892dd791341c6cae660b07f97fe09c30
SHA1: 4d6c6966c8a1bfbea8af958bf066fa460def8fb2
SHA256: c7bb43f087e42058e30ee488576e018459968300feccd4b8af6847023a2c8f9c
SSDeep: 12288:3Vo4016qQxa7vEFfCbNf5TQ8dWmZ9FxtRuPBTwBfHooX2+3Dh6Ha:3VoX1A+8Ffm3M8dWy9Lt0P1Uoo/Df 		False
...
C:\Users\Default\Contacts\desktop.ini 1.33 KB MD5: e403e78e6508e1076b1f67b883cb9e9c
SHA1: 3cb39aa626a5f4dd53e649042a4211a8995f9a23
SHA256: 10167958e10e47ffc4d53dee6c97ad07e723c8bf357c46551c34c11ef4b90773
SSDeep: 24:EBpSV0tXBLAjUmq2CnWYqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HaVo:08VOlAjkrnWHiNWB4qO9iqco 		False
...
C:\Users\Default\Downloads\desktop.ini 1.20 KB MD5: 5b025d58fcddbc0b4f52245fc52a7389
SHA1: b0b3d11f9a8ecfe54cfd37bc660c6f1fa3a837fc
SHA256: 26d4ddfae9db9505de9643abe2868fb81005acb11f61461585f4a9b3295bb5a3
SSDeep: 24:FVoopBkqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HoQni:FVooHiNWB4qO9iqIyi 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url 1.06 KB MD5: a8d7cafdc8e27b07f26b725c393e248b
SHA1: 66e54499b5b73d1e4756a6ff8c53c25f9054b29d
SHA256: de34a6ada4e2a70e662a8d36061f28c6560ab448c51770d7cd4c3dc4c60a6dc8
SSDeep: 24:JlSBdsyU0JuZmYqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HH:GLxqIiNWB4qO9iqn 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url 1.06 KB MD5: ceeacc4d9ced6923cdc0c795c2730a31
SHA1: 223f6b83359368a83038cf29c544f7e6b16d9a96
SHA256: b3a8bfa0caf711f3ce6b1e906bb732e58640042d64320b2bf510237cac80175d
SSDeep: 24:XlBhlOTlEJZrzqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HnC:N8pEJZAiNWB4qO9iqHC 		False
...
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg 582.27 KB MD5: b9c42e6db4b02b62643f54ab35fd311e
SHA1: cc11ffbe02f840d13cd141e796116854add0454f
SHA256: f6f08fb5b5d38b7d321f525ba0957677d7f358e1a544b7382a96538b2e86574e
SSDeep: 12288:Z6NJoQD5bF9iEjyEn3PCsW3um/WqneWYPoo6L8Pa+GlPLwme:cN5bF9zyEnfnWYd16MtIc 		False
...
C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 140.92 KB MD5: fd398eafa21fed67c832d011a945292c
SHA1: 4dd4107e4e4765136c2fcab41daa58cfb4cac508
SHA256: 7152bbe2fcd487088ad88cf438f26bc265cbb9327b05dad79b9421fa8e9ad4e0
SSDeep: 3072:yqeSPWGJvkgcWGvBnJdiizjLfCIngEQ/RGoeawpFb9yyR3:5nzGxJdiiz3fJQ/8oFSF9yyJ 		False
...
C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 0.99 MB MD5: bdee88896b05c9e03712faff53522059
SHA1: 7e4c4ec595a0ed4c90675a61d8a169e372a03efb
SHA256: 8ed4d17fc585e16f5ff3d7e4ed7cdfa9f039297541142fd23f9b51c5d763d10c
SSDeep: 24576:VuZ4cf4ngZN2mYrbH8biWG6vebmXm7T71sBetEpONyOIn:V8bf4ENHYrDsvGkeiW7/kFwIn 		False
...
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url 1.06 KB MD5: a7e7a8a8c9321a162a771f3ca443a056
SHA1: a32823d8d916ae3d1251a34572e0c913ba8b4f56
SHA256: 7c286537275798925d93d82606412bbefada548f0efa3be88f765446a9d2d14d
SSDeep: 24:ENGMaz81Jgiqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HYLpA:EhaziJgRiNWB4qO9iq4LpA 		False
...
C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA 0.99 MB MD5: ac2e1679fcda410f9bdfa1473247adff
SHA1: 58c5e624739a03c4e340c9f175efd0374cba7bb0
SHA256: dd85647019925f28bcd69d06e148d7ed66723d8e933204e47f073bbd4ea6a4d3
SSDeep: 24576:YzBENL8cHGui4zaNFYzNhBsvFYqt1lGjQ0:YSJH24mIzai3F 		False
...
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url 1.06 KB MD5: 23edbf6eed745c358ea08bc5116f3e14
SHA1: 16aa7f77cbbe66861c031ec4feca2250a9dd181b
SHA256: 2d3253ca7d034ac2099d322a7d975d2b8538a54279ee2e71b36161d8544c2d00
SSDeep: 24:YwmwSCb/9GA6qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H9Sjg:Y/w1bFGwiNWB4qO9iqdSjg 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url 1.06 KB MD5: 24b5625ae9d93b0b33636c25d686152b
SHA1: dc7c91f04db0026b1ebfa94043be154b5b1387ed
SHA256: f9f0ec19d767c1f3587a8690057f4014558f1438668fc58ff049941543ab3447
SSDeep: 24:f6Ei+i594Jwqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HoQ+v:SEi78viNWB4qO9iqIQ+v 		False
...
C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm.SATANA 1.58 KB MD5: 9a449f919a5e787980f861fee186c68b
SHA1: 74937d2df3598868e2da45cc9261d7ec5e563d87
SHA256: 042f309f145843f64c0e7dce6c55f8242f32221c3f5f71f49c896f7c8ce71bef
SSDeep: 24:JEaBxFBNDUw21mEhWcOGS1S9I9TZZgwbS8Fqlw9Nc/tVD4qxfR3GKUhn68IRdZ3E:6YDkhhRS108dZlG8miNWB4qO9iqP 		False
...
C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log.SATANA 1.09 KB MD5: 49dbcdad6a181435670bd94ce8c6e275
SHA1: 401258a37c524d76fe66df8e12766f414a00fe33
SHA256: a6630240df07439efbd17f817041095b4f4490c5f2e54a4418c8505d0618fdfd
SSDeep: 24:Wp4bI3Gcgxqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLK:WlrgyiNWB4qO9iqrK 		False
...
C:\Users\Default\Documents\desktop.ini 1.33 KB MD5: 6582edae8dead80bd56384ccf81f5b5a
SHA1: 0cc21bfdcbfb4fbe11e18836669998876c2c28af
SHA256: e577a1f91958c53f6b581d3753d2d80a8cb610cee5659f4621c5c1d6fa72bdf0
SSDeep: 24:tS4YjFr/heDAAeoe8tlqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HXk:wZtJye8wiNWB4qO9iq3k 		False
...
C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 974.61 KB MD5: a1f918fba95338c48dde229589cbe88e
SHA1: 5405bdfb1ec4365e9d746cc46e8e7a90f806e54c
SHA256: 083747c4698fab7244e79312fc8919272801f2b0c2f394006e13629164bfc40a
SSDeep: 12288://OkXhk6FbE1JjtNJ2+6J6sXw57OeC9Yv4nceIR48XhVcBVd9y5Wp1d7XKDOFKna:/2EC6FbEXjtKGowyyUdes7YOALsUmI8n 		False
...
C:\Users\Public\Music\Sample Music\Kalimba.mp3 8.03 MB MD5: 1b60c8fe2d034be1f875f3052eacfcdc
SHA1: ba1f747882e30cfab4704a9a4f55dd54796ec92a
SHA256: 6cefda3473b85e26d3582f8deed48fcd4a831cd7fce20ccbc71b320f3d434fc0
SSDeep: 196608:+I0beybbxG3R18JvA/6ue4Y24qE46IV2qpOosFHGBT3OnBoJDk0r:+IweMFGBKeNY2HE302qpOHGBfNVr 		False
...
C:\Users\Default\Links\Downloads.lnk 1.80 KB MD5: 9d25a092108146f9ce88bc74e8ab4671
SHA1: 487f3ffb1089611eb74cd2c7ae31f10a8bcc4fce
SHA256: 62e142b34800998aa5afb075f576a92d425921af1b9bd9a84af8377e2bad7dba
SSDeep: 48:zsXof1qCvByQmR3l5vpsDsMJ0+iNWB4qO9iqZKW:Q4fkyAQmlHpYsMJ0NNFqO9ic3 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url 1.06 KB MD5: 5ba4748f5319537fc939b5ae0a7de829
SHA1: ed816b65dc6b844b18f6cc24c7273661d7610ac1
SHA256: 74f48dda4e2a6f151ef1fb17da1a69d6d2ecdd9c4997bc72d5e44414a56ca3ff
SSDeep: 24:yn/dts2iqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLT:CsgiNWB4qO9iqX 		False
...
C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.61 MB MD5: 3bb20168843428e639d9c2008cf2bfba
SHA1: e8643978291633e70d5c54c0bd809b1a323598b7
SHA256: 08a784dbb0b16d60ba4236eed52b4d9aad620b04ace16481c6aae56b9ca4d65e
SSDeep: 98304:Bkzc27Boh2h5Or7bPQiA0biM+8d0uGwGMebhv/hKIulmcDhwWjBkKqTk9vkp:KxBA2hAvPQiv+I8wGLdZKIuUcDhr1kKm 		False
...
C:\Users\Public\Libraries\desktop.ini 1.02 KB MD5: fe7a64142b9ee3ab7f0922995f77a799
SHA1: 6248c1cdbfa5b442b229bee2c34f62aac548de25
SHA256: f4312bc5fc2d8427e590f8bd8da4d13eeed115ee05e80c1f99c27a357a3d7ee1
SSDeep: 24:X63WFmDCs14qasgGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HLJZ:K3Wo0ZiNWB4qO9iqVZ 		False
...
C:\Users\Default\Pictures\desktop.ini 1.42 KB MD5: 6913aa8b42eb45cbd2c3cacec4635053
SHA1: cf2333228d6aa1da162d2951e13618d0c630cbc7
SHA256: 777a1a146d1488ba5772a5397900a694790a43618d61149923278bd0ce92a22b
SSDeep: 24:iElLpzF53pOUDektAY9eXhnHgXfFsXVFideVEvqlw9Nc/tVD4qxfR3GKUhn68IRU:DzHBtAYMxnC+X6defiNWB4qO9iqK2 		False
...
C:\Users\Public\Desktop\Adobe Reader X.lnk 2.91 KB MD5: f9072ce1b9b8a2ec8e59fcc17907c85c
SHA1: b9660ec8401b8d2bacca726652c2a75cf52352e7
SHA256: 98c693f392a1f08dd3b7c7c2dbe08d8a4bcf3c25ccfc30b16658dbab0c5dedac
SSDeep: 48:S14BIKHgPiJsbZBPpUR+YKcD7UFu225VHVkgT9ppdeCslU54iNWB4qO9iqp:egtJsNgrK+bLVjT9p70OPNFqO9iC 		False
...
C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 148.92 KB MD5: befd2f43d1749dce9068eedc505b6f8e
SHA1: fc5bb421430a297286064f36b665a9e65d10f0e1
SHA256: 4540f94eda1f1b68741691af0b7afdcb8cc01a534b0b3022b22baedf2cd17b8e
SSDeep: 3072:i5iyNWcOGQr09YzHs3D+VX5Hw6/XRBIffYXN33nY8GibX:i5iy9qDHuS5Hw6/XRBIf03Mk 		False
...
C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe.SATANA 453.09 KB MD5: a22230912a5b686020bcb4d131ff3a1e
SHA1: eb989a24f385d04ddc4f175b465436c2444f2af6
SHA256: a4667b7e50acdfb1cd55231b0718bb040f25f2dc6bff2c68794c1449330ae223
SSDeep: 6144:RLhS/IMOxZ8AiVUvpflp0PDbLe/1wLmGMqn536jmL+ZM/CFQNOfEtkq+AO2+1y8e:bSdAi2p96HLeqLmDq8jrxQN/tkHc3 		False
...
C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.96 MB MD5: a8ae1215015e8588cca9814bca0bfb08
SHA1: a2c67e27e6a6ae1247b1bb0e7da35141f5fd1e0d
SHA256: f7767f874b2844eae12e1116a738604f2cce848eeda83b242969be1aa0f4120c
SSDeep: 98304:BWRQJzh7+R/T8O3JqogVovIMocp452/nmlgJgoQcWM/HB8S1O8b2f4:JZh7azAQvIMoI/uoQs/B8vxf4 		False
...
C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm.SATANA 1.67 KB MD5: 00a9d129c62a2b939255b8ea1ee6fdca
SHA1: 63c6ed4c4a6f3593c304fbc670a39031275aedb0
SHA256: eca28a56a1963a9fe8cae41b3bc0aa78071c572f2a6d7194d50e7bb750effa77
SSDeep: 48:5CWHNyHmQpgV8zcCxtCAzM3Ar0iNWB4qO9iqt9fw:MW4FpgubL4ULNFqO9imfw 		False
...
C:\Users\Default\Desktop\desktop.ini 1.20 KB MD5: e14749dc9d0bf5fccab506dda6743e72
SHA1: 7a5ba4c3fe09d4802169edded22602dbcb238458
SHA256: 27dfc38aae8c71aac9188c00ef325770391e78ec9251cb7db2534aeafe6ead8b
SSDeep: 24:CAwBp+uClZr4VdfiBQ8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hb:CA/ugZradfi2iNWB4qO9iq7 		False
...
C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 140.92 KB MD5: 90269cdc1f764d93e678e85a56119a25
SHA1: 120216ec5ab107b518d2ba5ed46055eacbea8019
SHA256: b615a180b47fa7eadbdeb709d06a40eff2b23ba32e07745094ce645a51b23279
SSDeep: 3072:XA2B9eHwhAYcj/DiSyefCXCIng8zTgV40KFUvKw3ZWI:XgYgiSyefCXxzzTFpw3wI 		False
...
C:\Users\Default\NTUSER.DAT.LOG 1.92 KB MD5: a05ad424a1c8f87a292ba3356bf8c3ac
SHA1: 81c7b5c03f688556700c712b582febc573901a18
SHA256: ebcb0d1d43cdaab0874a7f9945b4a889002fe0c8d710fc8763696fa62dc08b2c
SSDeep: 48:EEeDBOEhxL5kgsxwVYh5hZtdLKU1iNWB4qO9iq4O:E3dVtAx6YHh3dL6NFqO9iDO 		False
...
C:\Users\Public\Downloads\desktop.ini 1.09 KB MD5: 8ce9f7a402489bca83dd335b0924088e
SHA1: 4668d1f2eaae8316a817811736aad6d5dafc8644
SHA256: 6bb7d5b2cb8464cc568a1db8824c18091b8f70e6feb458fa5e6fedea2f9b9630
SSDeep: 24:/HhR/uKemx+K1usMqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HsB:T/tDuciNWB4qO9iqU 		False
...
C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 140.92 KB MD5: e57d07beb2d0b6239003b0009f6cac05
SHA1: 323068caf39cf2868f971eacd6d476cb940635d7
SHA256: e41dd7f60f5041207a882130ebbf8a3e939a3d365dedd8070a53df073f6ec4dd
SSDeep: 3072:GYvmMGJv5rUYbYeczRCiYM7CInglSFiRpEBSMNQ93FI:GtQ2BWRCiY4XIzEBS0Ey 		False
...
C:\Users\desktop.ini 1.09 KB MD5: 0940acb02b0ff198d9b15ee1597ae2a8
SHA1: b85e6b02bf005411bd81da24e0b63a23ecaa15c3
SHA256: 784412d6b81f49f26093372c6ac8ec125c341db4db582abb8673275bb5bc59e3
SSDeep: 24:QHfhQsebLJvsmiGqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HJ:QHfhQsAzi1iNWB4qO9iqp 		False
...
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv 9.25 MB MD5: 4e9613760cfc0cb9173ceb32ecb80405
SHA1: b222e1b1fe56f3a12fb4f6f1df608cd7f3b0dcee
SHA256: e2b697c68278b4ad79614b4368e9c5587e2bcab26830f59c0cb65c6a6b054657
SSDeep: 196608:YgCOVJ33O1UyN7iHglZ1JNzsmmQ7tbq6jZCzZTlkcEEnluDbBHsz8LDa6exW22pP:3JO1lN44/NZmQ7djSgIluug/ayJKm 		False
...
C:\Users\Public\Videos\desktop.ini 1.30 KB MD5: 504383ff8924080891913e38121dc185
SHA1: 51d4c32758c38903be9a1f0bf72084573c535b05
SHA256: 0de05f7144229418269da4791d7d9c542ddbce4c422be8d0f5be42c0480bb2ba
SSDeep: 24:3zGYkkAywa0zFIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H07:HBAoWFiNWB4qO9iqk 		False
...
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv 10.00 MB MD5: 479f5813ed7209ba404820e901837f7e
SHA1: 153d572c03cb364c7883d4be16f157e21d0264ce
SHA256: cbaa8f08b470b26a98148cfbb9d3d6f560bcfd9eb3a4d715e5b1814c7363dfe7
SSDeep: 196608:YMNUU6W8iG/m52HRkjtHXo+5/9xM+Z2i0SOIeFlfZ8lPQGvwGj5Yza:l6W8v/mrjf/zMw0SZeFZwPQGj 		False
...
C:\Users\Public\Recorded TV\Sample Media\desktop.ini 1.09 KB MD5: a7dcf20a53d20d94db5198d699b33a79
SHA1: 5ef56fbde39a070b52ff1d3adc75e1cfdfaffe6b
SHA256: 9ba22d197f4ddaa9ae6032342f0a1759f4d527687c9fd1e730cf0ad3d3571c47
SSDeep: 24:duDjuNg0jtPl2Z0gqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HiY:dyjuNgeGO/iNWB4qO9iqL 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms 512.92 KB MD5: 25fc9f65cc6e902a2d2206dfb07578c5
SHA1: e1e07a7d08ad7368113b9af38753eec6c4dae133
SHA256: ab4675db2f1623c145aa1486bddfa8f3b80bdd9236fefa8a959fd9479bda80b5
SSDeep: 6144:P4QluNzizfWq2ToqMr5eaVQ/EDJrAmN0aJtAv5/EQt/7VaBqYoA:AQlKziTW5ToqMdb/VAmN0abAv5TVKkA 		False
...
C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe.SATANA 445.82 KB MD5: be0e4194b08a1b996ae0718fd8267d2f
SHA1: f9c97963cd34236b319133c2a869f7d0754e2cfb
SHA256: 2a9328ae3f21fedbdd4efa27dbb2677ce152d36f2d4195a5b7cbc1688bf90f1f
SSDeep: 12288:irAESG5rYCpiyex6+iqlEtxsaw0zEhpZzxK3:icES0wyex6+iKEt7wkMNs3 		False
...
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg 607.26 KB MD5: d4d24d11bbf927bc2ecdfbc7f3d52c5e
SHA1: bb6c94cfbd60cd49b44e5cca534159f0bfbe8271
SHA256: 056afd3edfbcb25e0f402d269c33cd25aa3ed29f82efad1f51df5e7c4766661e
SSDeep: 12288:jeRTKP2dZiYsO2jtD9rzy47cgDzqu4Mb7ICcCwaCDl3xaJfR:jeW2n6ZDpVciznJb7wRDl3xaJfR 		False
...
C:\Users\Default\Links\desktop.ini 1.50 KB MD5: cbef17f95de0e697049599e38b2cba0d
SHA1: c994587877444a97644f76feab0d72e589817e7b
SHA256: 6519e480d859afc61355cdac5c9428ad89abfa0dbc3505572d0723e47700ee72
SSDeep: 24:/wV2uQQ1ky3heObpz+M382iBwmcp/ch7D6qlw9Nc/tVD4qxfR3GKUhn68IRdZ36n:/lQ1kKkAZT82iemgUhRiNWB4qO9iqbOM 		False
...
C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA 1.40 MB MD5: 851daab1d9093c5100ff6858f44ccfcb
SHA1: b5ff5d130d55b81a03e71d286ced79a59f895484
SHA256: deb9f78dd241c049e1a8d798d6fe612153683b74767f492bfb2845a86e2cecab
SSDeep: 24576:3h9QRMBwBjeWAKE19Q2UZGovX2bmgbSzr/DhVVjTnfhDzzXASTL8qUeQ:3h9QqGNeWAKEPQ3bgSzX1jT1zw8L8z9 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp.SATANA 1.34 MB MD5: 818d8c286b034e7c9377ac64c52e3294
SHA1: bc239e73122998141e144199d02680d559613d37
SHA256: 4650e76d3867ced5c521f6a202278dcb0f8c2df1f37fda8a65f450b63e4293e8
SSDeep: 24576:+zLgRvoVWHxVslEP4psT4zexQjX79kU5Xz30qMGdZO2iofLxvKun04a:+oKwwRpsT4zeqSU5D0PGdZndKun0r 		False
...
C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe.SATANA 764.47 KB MD5: 1fe4d3bdce20d3a2b86214fabadc9ff5
SHA1: 103a2d0ad72ddfa98f79f8d38f717163a38e0692
SHA256: cf8da81c0457008ad870717934199fbfa089651ced2aeec82881508d039fa169
SSDeep: 12288:1jibKKqA8BNJFMkOJZMOj7GyuFEoCtXiaHbI7CtqofCThZHA7jaDGe:1jibKQ2L0j7GNFERtC9hG7cGe 		False
...
C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.SATANA 1.56 KB MD5: 495e1a83b9502bc5bcee244c8cc0cc3a
SHA1: 89427e19235d06befe6d77d1284e8d64d7915b2e
SHA256: e80443672120a7e9d30b61d132b6100d68e1acce16d1c61a4dcbc6481d279b10
SSDeep: 24:pPx8cPNB9EFhhDaXWGrzJQT8W62qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HYW:pPKcX9u2mGCoWaiNWB4qO9iqN 		False
...
C:\Users\Public\Pictures\desktop.ini 1.30 KB MD5: 9cca80c3185a214e01d2e17fcb731dad
SHA1: 4eeb83ad71422e7f017d1bb7cf202df3cc1efe56
SHA256: 9b958204ec8e311a4ae5a20b5f5825785671a7198d868c7c5512e74e41a088b9
SSDeep: 24:qXA0fmKF5I1Ni7urX+qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HAMc4:6fmKuNi6bdiNWB4qO9iq/ 		False
...
C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 144.92 KB MD5: 3cd8da3cb71784ffaade445c99b33222
SHA1: 44704ef13bf87cb4696fe8d6605b5c1a07317a50
SHA256: 17a08f0a103a513c91c5c5deda39b610c601f9d862be1cde162d605910440ed1
SSDeep: 3072:LneHwaFHcKXcfiDDatCIngH3oPBZAx2P0uUxTG:IFH0fiDDato6ZAxg6xTG 		False
...
C:\Users\Default\Favorites\desktop.ini 1.33 KB MD5: b589748669fcaa972d5d2bf190ad22d4
SHA1: 121ec424837b4c63029f5fcdf1d3a8f1cfdfcd04
SHA256: f9eaf70699e4dbcd854c8997d7af671d3fc9be2c173f46a050bd0f6f83cac971
SSDeep: 24:ay6ywCdce8dpnt2GBlD268qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H1/lE:nxqe832aiNWB4qO9iqV/2 		False
...
C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 803.36 KB MD5: 27c1ad30b12a9ef6fe4f432bc4d62994
SHA1: 51b25cd779abe01d3af52a8a427276abaa4c8a2d
SHA256: f5e0e5f583cfa52eefc70703d3b3e8e4edd20ac4151e5c85f3e12ec3a15f1d38
SSDeep: 24576:bdlYLGasY/XkWfZKr2Mi+Zwkpthn2S8m2aL+x:bd8GfY/RfoqMi+ZvsSt+ 		False
...
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 4.62 MB MD5: fea33d5017942555751f56b7a75bf875
SHA1: 0356ebc29ab58ddab89c4373cf45780ecad40569
SHA256: 718c8b2d9ef350538a548e57bcd461c94f620c3af3532d0bd59040d4ad9c2a07
SSDeep: 98304:C7ludt5nYzgdtO3hmO9Xyh6zrBItJ5w1Ii7JM4gAN4Vd0bJMwGeytsw0yUT:6o5eOOIIvSJwyAydH99MT 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url 1.06 KB MD5: 7438ace4c91b8e086286a33d430f3f69
SHA1: 770b91f1a7ee28184dcd06c993fdb583cd65d5c2
SHA256: 315dad8cb87d3e100ef46eeb14fe0897eacd2a1a0597c4d00e6350d12492a40a
SSDeep: 24:x5MMkXaApdqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HkdS7:xoXKiNWB4qO9iqEdS7 		False
...
C:\Users\Public\desktop.ini 1.09 KB MD5: e85d23fb3d074bc66dfdf3457719bada
SHA1: 293337e41aa4aa48435f8d495436e0d3cc71b1d6
SHA256: b870afdcb48a9487347263b0a16d7bbf95d1729ee9c67c56e9ceb334a1a90edb
SSDeep: 24:ZIVjUJat18Bka3uqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HuV:WV44kBka9iNWB4qO9iqc 		False
...
C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA 140.92 KB MD5: e8916e361601a02c564cdbb292560a3e
SHA1: 3bfb3a749b2e2a7c106bcf3d3c7b74c81087c0ff
SHA256: 42a01ce7d079bf5ce0900652cf438a409582f2cd9475c90b5d575e97b5b85014
SSDeep: 3072:2MSeHwtStc+hriR7zHCIngg50L16j4I42qhoI:juStdritD/50k4lWI 		False
...
C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.33 MB MD5: 770a63a756830e905cbe789524439b2a
SHA1: fe3cd87ab89ee1c965932e0046b06eb7ff397e1d
SHA256: a260055dadc3ec7c6dfbaaa31cac182841848a88d35e70861f77a9043d0265ed
SSDeep: 98304:TMN4w3blH/umgoy/JzUgC5x9iCphNIpe1FbfsQRc5fjkoTSO23QUb7:AN4ub1/xJgQACpzpXb/2fjkoTRU 		False
...
C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA 148.92 KB MD5: 703340d261fd6fab2a7d93a599d205ea
SHA1: d02376fefc2ee5b91aa137e8594952c9007aacac
SHA256: fe4555dbb69a39b7ed5d787d6b81d225c32e5f65328b346b261459c40765d7c3
SSDeep: 3072:ErxR6bFBGQr09ie3A3RdD3D+VG6tm4wPHXB2D8m58V5:qrqF4qVew33bZ6t7wPHxV5 		False
...
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 3.92 MB MD5: a84a52c620649d8f70f988f6d2ee6533
SHA1: afd6cb23cb79de62a82fb55dbf6189303fc20e4d
SHA256: 79b4921dd19a2cf36509c7a5accc32493efd6bddec896503fea0813733063689
SSDeep: 49152:M+GneNmQbc0URp6bolWB2soi4nyPFMaaS/cvw0/NVuUEPkcjnSpMWGlEWIj5agk:M+RIWiZIXPF6S/iwQNVbEXT4rBo 		False
...
C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.71 MB MD5: 425e13c82d630c450a3861ae9472995d
SHA1: 080902ca921390653e00e586428533223b12aa6e
SHA256: 578d6a42621fd2045c30497b15e457809f625f3a64baaad0cfd6b84d77ac2ad2
SSDeep: 98304:abuFRkqsBHV0jMgJ0DkDFmfk26WSj02PDm9OtxILKYG+GEuuptrUy9yTJuQ3bR:ab0RkqsZV4g6Fm82Q0Qa9OtMKYG+hTrc 		False
...
C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml.SATANA 1.05 KB MD5: afbf75d8895b476dc5ff443af696c04b
SHA1: 08da231fc7efa3a54310ebf5c306c7362732fac2
SHA256: 977dedf27354eebddd7b5e0fd24f1754928e6ee8c82def429dda754fe44e54c0
SSDeep: 24:HfVS1lgjPvMwZqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HA26:HfVUIvxKiNWB4qO9iqgF 		False
...
C:\Users\Public\Desktop\Google Chrome.lnk 3.14 KB MD5: 8de664cb2d071811b7c8827f66b5a2df
SHA1: ba74955fbebaf69d3f15e388e31596ff9f4b6264
SHA256: 2055130340c56a3c4f8b51468ab5e9abafe8f7b6eecd4b7c755ebfaab62bbe8e
SSDeep: 96:ujLVATI3uBhLbeExV0fgawWZZKL4FwSxNFqO9iR:uHVA83GhWExVWNwWZrwSA 		False
...
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url 1.06 KB MD5: c837d20886787e246e86de594d91638f
SHA1: 2bb2a914bed49a7bcd85e28e9d196704317a8fd1
SHA256: 7e864c5afc8a206cdee70803a0cd1a946bf2fc85a751de7ecd7279bb8d4ad2fa
SSDeep: 24:JJB9lRirqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hse:bBVLiNWB4qO9iqv 		False
...
C:\Users\Public\Pictures\Sample Pictures\desktop.ini 2.02 KB MD5: 4c1d2e2fe29b120b6d810dce5e780eb4
SHA1: e74d5adfa87dfba05fe71ec8020e6f7499e888cb
SHA256: e71a4f67f56f06ce704226d616786db29768af6aa05e26d75f44178cedf0f395
SSDeep: 48:6ScD4oF2EjBwHmmqHyOInBASLg781iNWB4qO9iqDgd:4D4Byw8IySM7pNFqO9ixd 		False
...
C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA 1.23 MB MD5: 0a5297d4e3867e57e1d9e81708e75fd0
SHA1: 191ec825ad34d364eb337cc3f1b53f514de32556
SHA256: 50b64817ec136766ede1099365e3ca4276fc0f48d7325f02138f1625eab37457
SSDeep: 24576:THKFhBi2k03YQy8hrOtFmuic4y7klC9nE7Ozotm1u0nM3vpfSSNljgL:TB2k0oHI8/ic45C5EKzoAutUutY 		False
...
C:\Users\Default\Videos\desktop.ini 1.42 KB MD5: 3c4b5b5c7d978b6f7c4e2b946313d6a8
SHA1: 1a68428bd747b646b933f1a279491f3cef20f8c4
SHA256: 997f49a923cbf957cc24aa7dcbd9a73aacfd16b06caaee3fddaaf11db7ff90f6
SSDeep: 24:tzrVHB6bL8Krlr6gX8kU6+5j8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HmFTXt:prVHBA3zX8E+NiNWB4qO9iqGFTXt 		False
...
C:\Users\Default\Links\Desktop.lnk 1.39 KB MD5: b2cd39b0871dc639042b0f27fa1039f0
SHA1: b751ad1c6f6126330fab1fe5295bec9ab81408cd
SHA256: 564a3f9b29b88a90e0869d4f18d7eb3ae815c0140110450d235e327848b26f04
SSDeep: 24:tYJMNZFVn78m4DnTlOTryqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hgz:+JMNZzzwn5UiNWB4qO9iqAz 		False
...
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg 760.53 KB MD5: 5d742efe7d633433113d5a75fd847358
SHA1: 983c2963356c862b98ab4502d7ec84f77b0be011
SHA256: 3b9d2b0353e4889c9b7fdd2bc452bdcf73991bcd6b2bdd4480dd645317f2ab25
SSDeep: 12288:K/jK5x3I90wry4qBKL2dDp1MZgHvPjju3B5izZOcriOnuBgbITi+ldGdZ3PRipGi:amdICwHL2dDp1nre44czuB0ei+gripoe 		False
...
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg 763.45 KB MD5: 257c366ca61cc256134aa630989800cc
SHA1: 6f68f02749de11c14ec20fecd4d5b0ec80423b4a
SHA256: cbaa925b4022a28f75ceda73f1e07f3c1faa1030c4da7e2b6303ce481d81f014
SSDeep: 12288:2mn42A9UQZxDSGy5x2ncC/bQqv49uKTm7xsqBZKOVX3l1TBllGEF3:h4h9UUxDSGGxAcCTzv4kUm7xJeo3fzlf 		False
...
C:\Users\Default\AppData\Local\IconCache.db 758.91 KB MD5: dd563f7c39ed83cdbb8ff862c7440567
SHA1: 2b7b588ef32fb498f75c71f0ef0e624c037ac1ca
SHA256: e0353d715ec1c0a90f4cd3b1d9c3735408acb84f9e59354339f2d53a8dc01606
SSDeep: 6144:AlNzBc339olAUWRkbQDRKyufC5mPzFqjbIgEeh3Phwp/0wuRKqJiaGhDrKar:4NzBc2KVkbWMfC58zKaepeqGhDDr 		False
...
C:\BOOTSECT.BAK 8.92 KB MD5: 32bd8b3ee2de4921cd9a6c4c6fb24919
SHA1: 06e69f90bafa2f2b76d69994286ec8c37a9e5200
SHA256: ce266350e0fafe69735fa5ea029d79a2154303c0eb1b6bf32e84d4bcb4e86a4f
SSDeep: 192:ysC6aPREP8fe86u0SeSjOlyPZtr20PT7JWAshcE1h6:ysCdEP8fe86zhSjOlyPvrL9Wlph6 		False
...
C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm.SATANA 1.67 KB MD5: 624a4b8f1d110849569ea68aabdffd8d
SHA1: d92b3f3408a5df8a096ed1c129d979a7e672e183
SHA256: 51775525b3d890ee180cad4520ddaa4611c10e6dfa8c225ec468e76795bc72f4
SSDeep: 24:6EcLVh0tBdrkYyrzebwdO4zf7L9VEgvvqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H1j:tUIb6fe2fNVnvYiNWB4qO9iqVkM 		False
...
C:\Users\Default\NTUSER.DAT.LOG1 185.92 KB MD5: c3e48f148eac22e7d2a86773ad5e7758
SHA1: 65bf50fa9d3ae1b303629c13b42f5c9beac9f200
SHA256: b10f415e7278b100a474cdf2f2ba47dd1b6c06e599e7fd51dd34decb68727fb5
SSDeep: 3072:MNLpzcCaHxB4Iw74zMSJut7pJNDv6s4Y2qplx:MNLOCaHxyF74s7pJlShRiL 		False
...
C:\Users\Public\Videos\Sample Videos\desktop.ini 1.25 KB MD5: c96616b78b095946a006283443617454
SHA1: 5a0d083a98659c60b5296d283257d8a8832ace69
SHA256: 9e8c7638e4abb5d61afc2a4a01de175501adf16263739c8f87f8e44e8ff7158e
SSDeep: 24:wz+Sk8WyyXJcclhwdAovqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H9A:wKSkwWyGsAziNWB4qO9iqK 		False
...
C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA 989.23 KB MD5: ec0437435e8c4235b4900c8961beb47d
SHA1: 737275036abce3a0657e464bd62fe25ea815c06a
SHA256: 9c0fd2d38ea66fa270d772b03e0a0476a8f8c36f86e321b8c5631887bde7bfa3
SSDeep: 24576:O/C4fXR+g2nNeItkhxKCl79TK6/j9fO2/KU6DG6A6BMSg+:/eXF2NeItKxl79R/j9IbnBMi 		False
...
C:\Users\Default\Saved Games\desktop.ini 1.20 KB MD5: 6a7e80181ee2567e679c8f5d0856310e
SHA1: c64d1cfcd95beb88d5ba8a5293c47fa7aa8be40f
SHA256: 190d46b164e7c8eca7ef9dd10298034a272650c47a40c38991f4f70f8cd89f0d
SSDeep: 24:1x5X7h84KZkBvFf7m4W9wva9LBtVdulpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hge:lX7/UQdf49FJZdFiNWB4qO9iqiu 		False
...
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url 1.06 KB MD5: 49c5e3290353ac0e827d59bf046f9963
SHA1: 94549c391f3210aa9874df00aa299c86743b34a7
SHA256: b82b5b1d1481253771fa101e1e8f9e401c1f26f68016c397eabc8372548030fc
SSDeep: 24:MTuZAWAitY/8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HlNC:M3DXDiNWB4qO9iqHC 		False
...
C:\Users\Default\ntuser.ini 0.95 KB MD5: 8d08cfead41e7ce418d34ac3abc970a4
SHA1: f2a66c60841be932af5e6ec8c80c4d6ea8e9a260
SHA256: ec3efd84ea3a91fe401c1e2f13db08aefcd44b813c9b66cc93c1a425e403116d
SSDeep: 24:5qSE2phXp5Eqlw9Nc/tVD4qxfR3GKUhn68IRdZ36H7Qk:AXehXp5DiNWB4qO9iqbR 		False
...
C:\Users\Public\Recorded TV\desktop.ini 1.00 KB MD5: a7ac5a8ff1d2df21cd32f4a511e35219
SHA1: fc640221cd3baf817ebc77994c65892b2131f2ec
SHA256: 55f5989e32d686dc63bfd2d5d2a79b863e7932aece2a4b87b73b4a3423a9d5ce
SSDeep: 24:5QXrxHV0gpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hpej:5Q7xHV0g6iNWB4qO9iqJej 		False
...
C:\Users\Public\Libraries\RecordedTV.library-ms 1.78 KB MD5: 529fcc7f29320de945749a4b5be00545
SHA1: 58bad841277b1cc304c5f297351b7bf96f4ac23c
SHA256: 11c8b8ccb57696eb0be6af574b23259bbd9e76addb13262199f23a8696ad958f
SSDeep: 24:0kK1W7auz0lWRTsydy1jFf4zgyryLRM9urFqlw9Nc/tVD4qxfR3GKUhn68IRdZ3h:071W2uAYqyy1usLRMziNWB4qO9iqS 		False
...
C:\Users\Default\Searches\Everywhere.search-ms 1.17 KB MD5: 87c2d943f5ee2fac81d882a419c1b108
SHA1: 0d44502bcd6421486c22ce002a322bf9ada6f79f
SHA256: 8691231d6976a640e522abe88694be017b180d25d113026dac50371f85cff07a
SSDeep: 24:ld2xzoE5AKQzUg/gqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hk:r2xzD5ASmiNWB4qO9iqE 		False
...
C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.SATANA 1.56 KB MD5: 61f63596e55687b722fbedba21b48260
SHA1: 4501c591c99c71298ab456c1d380eb2d401d82f1
SHA256: 9bd5bc4bec19eb6b38f6c96fec46f29e986d35e505bfa4251e17d3d13e6a2efb
SSDeep: 24:iUODocAigsLHUE1e7WdfR46ALrTGuxG7KO6qlw9Nc/tVD4qxfR3GKUhn68IRdZ3S:bWocAlyUYfGFrTGkGpZiNWB4qO9iq4lO 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp.SATANA 10.00 MB MD5: 9a328aee1fc935ced32829928a9d368a
SHA1: a088a7f9ce3cc2ce9ea616052c0d74be6bd683ec
SHA256: 7010b8d136c195169c02101c768fc8e7c022d7a7c9762a24dc2bf2af03a27c35
SSDeep: 196608:WnyozVU3Ux29/rGUvDXadSLsS8nQsiAESOsYnwZrja9segf:myoBEUx2hJvsItAqpnevIu 		False
...
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg 827.04 KB MD5: 901b60158f3b1244a65913699f3cad60
SHA1: 0170f737c088d4d4b167b0e2465a2de9f4dde941
SHA256: a6f1ff3199e35fb839c0754dece5c0295f6e092b962e5505299d91a9d8a8aa76
SSDeep: 12288:KOEyG5CJf6dfmPlqe/G+3HMJ0ArGwC3Dq0afrITGG9C7yi77p1vEminCzK2jNs:nA5CJFPY+3MJtrGVmfkTPG7jvEt2Js 		False
...
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp.SATANA 246.92 KB MD5: 215c4ef444eea70b2113ed261cad595c
SHA1: 3d8bd0e1403b8a8ff26549d035b075a47c8e395c
SHA256: a5297299088173b070576f61ee4264f098057202e898bab5e714ab345f387105
SSDeep: 6144:dx+vAGNff5P75SaKa+RMJWy6F/VEt0FtpqIHPE9/hbdkkz:H+vAcBPgaLJ7KqD6u 		False
...
C:\Users\Default\Music\desktop.ini 1.42 KB MD5: 708eb041ebec1c0bb9aa712eb3375cb0
SHA1: b3aef74b0da73de6ae2519ec9e9e384869823c20
SHA256: 9ee1c8bb3b66f348c3dadf2b56d12654fed7dc94c655b16e466c744074c3e4a3
SSDeep: 24:8QtnsRfH03XJvxMRX9VB/RHhuhqOi8Tqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HCU6:BZEquB5Hhuhqt5iNWB4qO9iqif 		False
...
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg 549.05 KB MD5: c44b050c328d1c16aa3048b3ead71cdc
SHA1: 1fedfe4bae84d1fed6baaccd15b8f83d8b28bfcf
SHA256: cc1c3b01b25c2a8a24a56eb94d74442ca7612ca68491e1c3ca75e21bdb6ef892
SSDeep: 12288:pSBRxVnMmNKP8DYn0i4odTmWlD9A7Z65FjcusuTlxO3tBXW/93nNeARw8ueUBmq:ItVnByU2B4oJm29kZ5ex84FnnxUBx 		False
...
C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA 148.92 KB MD5: e54fd96fb6ee6980b3f67c38733cb468
SHA1: b363381fc07f6080eacc4e156fa995f03490015c
SHA256: 8a1c857779c6418877e5dd883ecd3230d17967a004dc48d9cef72846412ba69e
SSDeep: 3072:zVzXyRGQr09jMoL53D+Vw1rjurlNIqp8nX:zJdq9oprjFJ 		False
...
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url 1.06 KB MD5: 78e98eaad361200baede7135c33f5b88
SHA1: b1523e613a295dcae25eb8c95b322281e58d59e6
SHA256: c00077a8475fc166b143bff6b3a9d3cab8976069a8d662d46a9c8c251acb1ac9
SSDeep: 24:mjMIDC8V2Smqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HZpOS:2MyVDViNWB4qO9iqjB 		False
...
C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA 4.92 MB MD5: 44e66cf333c03cf5a9e215590a1a9ff1
SHA1: f05bff39ff4190370e7b690ee6515ce05d150f4d
SHA256: 90234072b1f018c3bd17e69a6fe0efd45747860a1e45ad541859f770a4ac66f4
SSDeep: 98304:2t11LcaJw7l6x0gqOddM6L3eJl31N8Xh0vYyRqYTD/BaEG22wOBh:utJwR6x0g5bLa3oUPHD//U 		False
...
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url 1.06 KB MD5: 8251d521a6ba151934f7f5207e37dbb3
SHA1: a958f9508444aea3e4e8117b41a31250e0c5d00f
SHA256: 69c7d96792200188361f81b7f6ec67f2edf3653a685e3eb132f9e720b02b606e
SSDeep: 24:upxmkYVO5qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HWGX:y+5iNWB4qO9iqZ 		False
...
C:\Users\Public\Music\desktop.ini 1.30 KB MD5: 264e7db2beff5abff9de478282bb87fb
SHA1: 05d11c57d64a8809c20f2651e63d55d43a919a98
SHA256: e4d4bcde784d32fb737217e60aba373847eed9f7196c029b94081fbc705ce3ad
SSDeep: 24:Sob1f+31IIQp9qlw9Nc/tVD4qxfR3GKUhn68IRdZ36H/1X:SobJ+3FNiNWB4qO9iqZ 		False
...
C:\Users\Default\Searches\desktop.ini 1.44 KB MD5: f09354ccd5def2b6b828a2d5edd45bc7
SHA1: 7f57bfad251cab4cf012d9dd3142ba8f904db355
SHA256: da6bef7d0f15d055b3ba389650cbf38277efcbff6e9f3ab13f0c6f07ec95c931
SSDeep: 24:QvDNSL/0piCAAJ88cV/vcC8nGta+Br8VclJYpRB5qlw9Nc/tVD4qxfR3GKUhn68e:QvZiMsCbJu/OGaCAcr2ciNWB4qO9iq0d 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url 1.06 KB MD5: 80276eb7acdb268a74eeaf293469522e
SHA1: 93685996f73b35d315129554c7acf74727f4976d
SHA256: 02ddded14a3cc3b688e93f9320b057efad58b28c71b0537f38fa48a35793dafa
SSDeep: 24:ZKRs2RZ9xEpz+8AIqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HIC0vk:ZdkkiXiNWB4qO9iqoCGk 		False
...
C:\Users\Public\Desktop\desktop.ini 1.09 KB MD5: 92746cae338132a8d37e81c27d628ae3
SHA1: 8868cfb6da79d736ab6d4e3e8ced6429ee86b4da
SHA256: de577666a8b46982f29a6fa3f5e74e1280eaeda315ce88977f38b951e5ef7f07
SSDeep: 24:doM/9uUEYd8qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hz:doMVuUFdLiNWB4qO9iqT 		False
...
C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe.SATANA 453.05 KB MD5: 8517e82056ec5403f8b73925ca8d6cfa
SHA1: 572ebb056a1d99c3d89e8701f74d5b941b915325
SHA256: 1ec512c4f67bd79a7ee093d6e6a0837c99de673ac7f318ed7d011d8a88e17542
SSDeep: 12288:qZprJumdkALmDjZQjO3wvt5aGhgZfwBdMy:EImeALm6TvzaIAU 		False
...
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf 64.92 KB MD5: 0d377de7418b1f6f2dd8b8266e78ad05
SHA1: 30cc0c795f2e11c17dd3c97d3d5187ebf21fc486
SHA256: ecbfe94aaef104db5225cee8f11436fccb535cfa2a217cf68f4d3c27b6ba3bc0
SSDeep: 768:OLoyG68uEfYPElQ1SOls55HYJOUhsTidnfWsIVMrMjuB5P:OEyNEfRI2TYJeWksZMju/ 		False
...
C:\Users\Default\Favorites\MSN Websites\MSN Money.url 1.06 KB MD5: 9b2c3ebc28dc492d9b8095d7d2bfdeca
SHA1: b551ae4160960179b9633a15f170aa1973b35aea
SHA256: 340acedf2cc1d1d620950eb2f20c00e702ebe16befb01693ebb09607083b14bd
SSDeep: 24:F0fnv6q94qlw9Nc/tVD4qxfR3GKUhn68IRdZ36HWZmvk:ufnv6kniNWB4qO9iq2Sk 		False
...
C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA 144.92 KB MD5: 39f90bdc4f75b6be5b3814f4c78c0e9a
SHA1: d3b37c0e2fb1f6eb3549a35818ca28f5c5d0e275
SHA256: 5b4d216f2530caba198b10a57ffa478eefebbffd65c557a805dbd0997f3995de
SSDeep: 3072:xgQSVuyeHwpZWc3+iF6nuCIngFzbAwi48NY/5Jk:iVBQW+i1+P18mk 		False
...
C:\Users\Default\Searches\Indexed Locations.search-ms 1.17 KB MD5: 3db13386ca81237f2568912430733481
SHA1: 08b09cc4e6768ca089ec6399300ecc1a1ee4e061
SHA256: e42acf9895c7cb8863e17e5a21179295a373d960403c3d677d347e7de5beebe6
SSDeep: 24:Z2mdX4Wj9H6rzr9Zafft2qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hjycjt:Zpdj9aXRAntFiNWB4qO9iqDy8 		False
...
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg 859.71 KB MD5: d9937be9eafca2fae99e43b5de0e9d41
SHA1: c5c598a7c2450e23390943e5c587f743c59e3e76
SHA256: d4ce7691d674d3f703f86cad0aca2294419d32ebbaf4e3de68062acd9ab146c6
SSDeep: 24576:iCFV39OW+lPLhLcDaRhhRkBjn716CZMJn4Pk:iC5klPu2sJ71JZy4c 		False
...
C:\Users\Default\NTUSER.DAT 768.92 KB MD5: df78b20b2570a2d3ca98f8c26e329d66
SHA1: 59384b826f1401b921315c9d5870c7113718e64d
SHA256: abe8627c2b5f2d193fb7bf013a286d97964dcf3463c619d7c2f9663321ccc5bd
SSDeep: 6144:QIbGHFtLZPV3OKcH7cOlLeNoRy4FHCHCGJgyWrK+ztU+OUe70EyxRj+TwpYsv6do:kiFB4oRy4FHCH+yOK+Jy0l4E2sv6d7r4 		False
...
C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.SATANA 445.96 KB MD5: 41c9744cd1a2f12488140cfe553325e9
SHA1: 11e6e703e52d59d1dabb07947ce76cb1156963d9
SHA256: 27d1f877db719eefe70e0fef0bba318bfc62e898a198f48f4e54ddc974cfba62
SSDeep: 12288:yzIIq0FLJYCvUdriqlE4UO1b21Pzd6f6A0UXcP:yzI5MfvmriKE4dMk70UMP 		False
...
C:\Users\Default\Favorites\Links\Web Slice Gallery.url 1.16 KB MD5: 515bbc187af0937c7c7fe5478f8ab478
SHA1: 0f116d113a451ffead555dafdea27cd5a3342022
SHA256: 49a2d3ed136782cbfe9a521a3c37d34aafece2300a9172a050090a18a51cf501
SSDeep: 24:6OGBv+KQTpqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hq/8n:56+KQuiNWB4qO9iqc8n 		False
...
C:\Users\Default\Favorites\Links\desktop.ini 1.00 KB MD5: 8af84e8646936ecc876aa92ac6e80809
SHA1: bff519b7f06c421c463f45e5874a6c864c8ff534
SHA256: 03935cc4c5b948a5431f8c1e3b00496a315b46dcf2f23b0dbb68631721f53d71
SSDeep: 24:lExDtMyqlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hna:lqDtMBiNWB4qO9iqHa 		False
...
C:\Users\Public\Documents\desktop.ini 1.20 KB MD5: 1f9600740a977492e9701485dc9b258d
SHA1: 4fe647ac57af98222937c09fd88c59f078826e13
SHA256: 23333532d2363f60adb26174f4e71eb1ccc33ef5e0a55cbe754c2443046ffb9a
SSDeep: 24:Mc7A9oLZWbE0Xe1YMvh5qlw9Nc/tVD4qxfR3GKUhn68IRdZ36Hgjj:LA9oLepewiNWB4qO9iqO 		False
...
C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA 5.53 MB MD5: 9588ca4a48348ba639ca2c2c324ec56a
SHA1: 64310a758d3a5567563225d8f2dcc2db2da20fe7
SHA256: f00d529c38a28f4a3eba2d76580a9a96175bb61f631ed59e9504a74a2538d374
SSDeep: 98304:LPyuDDI/I6I0eL2TOaLceUPMKfz4g3Schw3wVRdUABxyhEby+8EuEvG/P:LPyAD2yEceUP3kTgV/NryhQ4n 		False
...
C:\Users\Default\Contacts\Administrator.contact 67.70 KB MD5: a49c5476519b735e19fb3fc1c6d62a71
SHA1: 219911b3324701b7e45fbc1819804f06c58fa025
SHA256: 715e479d2b8c33a4f74f972006af63433c9d109dbf33f97c21e98d8639d39f4c
SSDeep: 768:Xyukf67sGG8h8DKAx/mu18J3Mw6UMslMD04CBGz9UTAngSilCfoSO8+Jv8jtUkdW:XF7sVH3N123Mw6UZp2U6g50W8wkU57N 		False
...
C:\Users\Default\Links\RecentPlaces.lnk 1.28 KB MD5: c4196e488530d720eb47db712456d2f1
SHA1: 40121abb3d498cad64e120b3581517fab9046493
SHA256: 9799a85475704c0703fa3a079b6eadcdbe978e0ad1f42fe8271db9dc44a8e55f
SSDeep: 24:1h+B05v5cN0NZh4bH16yz6qRqlw9Nc/tVD4qxfR3GKUhn68IRdZ36HCjeP:1Id0rh4bHEmSiNWB4qO9iqV 		False
...
Threads
Thread 0xa70
13 0
»
Category Operation Information Success Count Logfile
Module Get Filename process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\tzbtqw.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tzbtqw.exe, size = 2048 True 1
Fn
Environment Get Environment String name = LOCALAPPDATA, result_out = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe, type = file_attributes False 1
Fn
File Copy source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tzbtqw.exe, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, value_name = BrowserUpdateCheck, data = 69 False 1
Fn
Registry Create Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce True 1
Fn
Registry Write Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, value_name = BrowserUpdateCheck, data = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe, size = 108, type = REG_SZ True 1
Fn
Environment Get Environment String name = public, result_out = C:\Users\Public True 1
Fn
File Create filename = C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Write filename = C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A, size = 258 True 1
Fn
Data
System Sleep duration = -1 (infinite) False 1
Fn
Thread 0xa7c
955 0
»
Category Operation Information Success Count Logfile
File Create filename = C:\bootmgr, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\BOOTSECT.BAK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\BOOTSECT.BAK, type = size, size_out = 8192 True 1
Fn
File Write filename = C:\BOOTSECT.BAK, size = 896 True 1
Fn
Data
File Read filename = C:\BOOTSECT.BAK, size = 8192, size_out = 8192 True 1
Fn
Data
File Write filename = C:\BOOTSECT.BAK, size = 8192 True 1
Fn
Data
File Write filename = C:\BOOTSECT.BAK, size = 48 True 1
Fn
Data
File Move source_filename = C:\BOOTSECT.BAK, destination_filename = C:\BOOTSECT.BAK.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Write filename = C:\how_to_back_files.html, size = 16 True 133
Fn
Data
File Write filename = C:\how_to_back_files.html, size = 768 True 1
Fn
Data
File Write filename = C:\how_to_back_files.html, size = 16 True 116
Fn
Data
File Create filename = C:\hiberfil.sys, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\pagefile.sys, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\desktop.ini, type = size, size_out = 174 True 1
Fn
File Read filename = C:\Users\desktop.ini, size = 176, size_out = 176 True 1
Fn
Data
File Write filename = C:\Users\desktop.ini, size = 176 True 1
Fn
Data
File Write filename = C:\Users\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\desktop.ini, destination_filename = C:\Users\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\desktop.ini, type = size, size_out = 174 True 1
Fn
File Read filename = C:\Users\Public\desktop.ini, size = 176, size_out = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\desktop.ini, size = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\desktop.ini, destination_filename = C:\Users\Public\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Videos\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Videos\desktop.ini, type = size, size_out = 380 True 1
Fn
File Read filename = C:\Users\Public\Videos\desktop.ini, size = 384, size_out = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Videos\desktop.ini, size = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Videos\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Videos\desktop.ini, destination_filename = C:\Users\Public\Videos\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Videos\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Videos\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, type = size, size_out = 326 True 1
Fn
File Read filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, size = 336, size_out = 336 True 1
Fn
Data
File Write filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, size = 336 True 1
Fn
Data
File Write filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Videos\Sample Videos\desktop.ini, destination_filename = C:\Users\Public\Videos\Sample Videos\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Videos\Sample Videos\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Videos\Sample Videos\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, type = size, size_out = 26246026 True 1
Fn
File Read filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, size = 2621440 True 1
Fn
File Read filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, size = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv, destination_filename = C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Videos\Sample Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Recorded TV\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\desktop.ini, type = size, size_out = 80 True 1
Fn
File Read filename = C:\Users\Public\Recorded TV\desktop.ini, size = 80, size_out = 80 True 1
Fn
Data
File Write filename = C:\Users\Public\Recorded TV\desktop.ini, size = 80 True 1
Fn
Data
File Write filename = C:\Users\Public\Recorded TV\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Recorded TV\desktop.ini, destination_filename = C:\Users\Public\Recorded TV\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Recorded TV\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, type = size, size_out = 171 True 1
Fn
File Read filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, size = 176, size_out = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, size = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini, destination_filename = C:\Users\Public\Recorded TV\Sample Media\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\Sample Media\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Recorded TV\Sample Media\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, type = size, size_out = 9699328 True 1
Fn
File Read filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, size = 2621440 True 1
Fn
File Read filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, size = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv, destination_filename = C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Recorded TV\Sample Media\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\desktop.ini, type = size, size_out = 380 True 1
Fn
File Read filename = C:\Users\Public\Pictures\desktop.ini, size = 384, size_out = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\desktop.ini, size = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\desktop.ini, destination_filename = C:\Users\Public\Pictures\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Pictures\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, type = size, size_out = 879394 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, size = 879394, size_out = 879394 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, size = 879394 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, type = size, size_out = 845941 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, size = 845941, size_out = 845941 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, size = 845941 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, type = size, size_out = 1120 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, size = 1120, size_out = 1120 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, size = 1120 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini, destination_filename = C:\Users\Public\Pictures\Sample Pictures\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, type = size, size_out = 595284 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, size = 595296, size_out = 595296 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, size = 595296 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, type = size, size_out = 775702 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, size = 775712, size_out = 775712 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, size = 775712 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, type = size, size_out = 780831 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, size = 780831, size_out = 780831 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, size = 780831 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, type = size, size_out = 561276 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, size = 561280, size_out = 561280 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, size = 561280 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, type = size, size_out = 777835 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, size = 777840, size_out = 777840 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, size = 777840 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, type = size, size_out = 620888 True 1
Fn
File Read filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, size = 620888, size_out = 620888 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, size = 620888 True 1
Fn
Data
File Write filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg, destination_filename = C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Pictures\Sample Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Music\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Music\desktop.ini, type = size, size_out = 380 True 1
Fn
File Read filename = C:\Users\Public\Music\desktop.ini, size = 384, size_out = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Music\desktop.ini, size = 384 True 1
Fn
Data
File Write filename = C:\Users\Public\Music\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Music\desktop.ini, destination_filename = C:\Users\Public\Music\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Music\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Music\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Music\Sample Music\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\desktop.ini, type = size, size_out = 586 True 1
Fn
File Read filename = C:\Users\Public\Music\Sample Music\desktop.ini, size = 592, size_out = 592 True 1
Fn
Data
File Write filename = C:\Users\Public\Music\Sample Music\desktop.ini, size = 592 True 1
Fn
Data
File Write filename = C:\Users\Public\Music\Sample Music\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Music\Sample Music\desktop.ini, destination_filename = C:\Users\Public\Music\Sample Music\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Music\Sample Music\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, type = size, size_out = 8414449 True 1
Fn
File Read filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, size = 2621440 True 1
Fn
File Read filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, size = 2621440 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3, destination_filename = C:\Users\Public\Music\Sample Music\Kalimba.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, type = size, size_out = 4113874 True 1
Fn
File Read filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, size = 4113888, size_out = 4113888 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, size = 4113888 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3, destination_filename = C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, type = size, size_out = 4842585 True 1
Fn
File Read filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, size = 4842585, size_out = 4842585 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, size = 4842585 True 1
Fn
File Write filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3, destination_filename = C:\Users\Public\Music\Sample Music\Sleep Away.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Music\Sample Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Libraries\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Libraries\desktop.ini, type = size, size_out = 88 True 1
Fn
File Read filename = C:\Users\Public\Libraries\desktop.ini, size = 96, size_out = 96 True 1
Fn
Data
File Write filename = C:\Users\Public\Libraries\desktop.ini, size = 96 True 1
Fn
Data
File Write filename = C:\Users\Public\Libraries\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Libraries\desktop.ini, destination_filename = C:\Users\Public\Libraries\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Libraries\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Libraries\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Libraries\RecordedTV.library-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Libraries\RecordedTV.library-ms, type = size, size_out = 876 True 1
Fn
File Read filename = C:\Users\Public\Libraries\RecordedTV.library-ms, size = 880, size_out = 880 True 1
Fn
Data
File Write filename = C:\Users\Public\Libraries\RecordedTV.library-ms, size = 880 True 1
Fn
Data
File Write filename = C:\Users\Public\Libraries\RecordedTV.library-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Libraries\RecordedTV.library-ms, destination_filename = C:\Users\Public\Libraries\RecordedTV.library-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Libraries\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Downloads\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Downloads\desktop.ini, type = size, size_out = 174 True 1
Fn
File Read filename = C:\Users\Public\Downloads\desktop.ini, size = 176, size_out = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Downloads\desktop.ini, size = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Downloads\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Downloads\desktop.ini, destination_filename = C:\Users\Public\Downloads\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Downloads\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Downloads\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Documents\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Documents\desktop.ini, type = size, size_out = 278 True 1
Fn
File Read filename = C:\Users\Public\Documents\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\Public\Documents\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\Public\Documents\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Documents\desktop.ini, destination_filename = C:\Users\Public\Documents\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Documents\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Documents\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, type = size, size_out = 2025 True 1
Fn
File Read filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, size = 2032, size_out = 2032 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, size = 2032 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Desktop\Adobe Reader X.lnk, destination_filename = C:\Users\Public\Desktop\Adobe Reader X.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Public\Desktop\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Public\Desktop\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\desktop.ini, type = size, size_out = 174 True 1
Fn
File Read filename = C:\Users\Public\Desktop\desktop.ini, size = 176, size_out = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\desktop.ini, size = 176 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Desktop\desktop.ini, destination_filename = C:\Users\Public\Desktop\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Desktop\Google Chrome.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\Google Chrome.lnk, type = size, size_out = 2257 True 1
Fn
File Read filename = C:\Users\Public\Desktop\Google Chrome.lnk, size = 2272, size_out = 2272 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Google Chrome.lnk, size = 2272 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Google Chrome.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Desktop\Google Chrome.lnk, destination_filename = C:\Users\Public\Desktop\Google Chrome.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, type = size, size_out = 1157 True 1
Fn
File Read filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, size = 1168, size_out = 1168 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, size = 1168 True 1
Fn
Data
File Write filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk, destination_filename = C:\Users\Public\Desktop\Mozilla Firefox.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Public\Desktop\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT, type = size, size_out = 786432 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT, size = 786432, size_out = 786432 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT, size = 786432 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT, destination_filename = C:\Users\Default\NTUSER.DAT.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT.LOG, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT.LOG, type = size, size_out = 1024 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT.LOG, size = 1024, size_out = 1024 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT.LOG, size = 1024 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT.LOG, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT.LOG, destination_filename = C:\Users\Default\NTUSER.DAT.LOG.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT.LOG1, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT.LOG1, type = size, size_out = 189440 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT.LOG1, size = 189440, size_out = 189440 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT.LOG1, size = 189440 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT.LOG1, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT.LOG1, destination_filename = C:\Users\Default\NTUSER.DAT.LOG1.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT.LOG2, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT.LOG2, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, type = size, size_out = 65536 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, size = 65536, size_out = 65536 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, size = 65536 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, destination_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, type = size, size_out = 524288 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, size = 524288, size_out = 524288 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, size = 524288 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, destination_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, type = size, size_out = 524288 True 1
Fn
File Read filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, size = 524288, size_out = 524288 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, size = 524288 True 1
Fn
Data
File Write filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, destination_filename = C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\ntuser.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\ntuser.ini, type = size, size_out = 20 True 1
Fn
File Read filename = C:\Users\Default\ntuser.ini, size = 32, size_out = 32 True 1
Fn
Data
File Write filename = C:\Users\Default\ntuser.ini, size = 32 True 1
Fn
Data
File Write filename = C:\Users\Default\ntuser.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\ntuser.ini, destination_filename = C:\Users\Default\ntuser.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Videos\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Videos\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\Default\Videos\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Videos\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Videos\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Videos\desktop.ini, destination_filename = C:\Users\Default\Videos\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Videos\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Videos\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Searches\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Searches\desktop.ini, type = size, size_out = 524 True 1
Fn
File Read filename = C:\Users\Default\Searches\desktop.ini, size = 528, size_out = 528 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\desktop.ini, size = 528 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Searches\desktop.ini, destination_filename = C:\Users\Default\Searches\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Searches\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Searches\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Searches\Everywhere.search-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Searches\Everywhere.search-ms, type = size, size_out = 248 True 1
Fn
File Read filename = C:\Users\Default\Searches\Everywhere.search-ms, size = 256, size_out = 256 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\Everywhere.search-ms, size = 256 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\Everywhere.search-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Searches\Everywhere.search-ms, destination_filename = C:\Users\Default\Searches\Everywhere.search-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Searches\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Searches\Indexed Locations.search-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Searches\Indexed Locations.search-ms, type = size, size_out = 248 True 1
Fn
File Read filename = C:\Users\Default\Searches\Indexed Locations.search-ms, size = 256, size_out = 256 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\Indexed Locations.search-ms, size = 256 True 1
Fn
Data
File Write filename = C:\Users\Default\Searches\Indexed Locations.search-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Searches\Indexed Locations.search-ms, destination_filename = C:\Users\Default\Searches\Indexed Locations.search-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Searches\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Saved Games\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Saved Games\desktop.ini, type = size, size_out = 282 True 1
Fn
File Read filename = C:\Users\Default\Saved Games\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Saved Games\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Saved Games\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Saved Games\desktop.ini, destination_filename = C:\Users\Default\Saved Games\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Saved Games\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Saved Games\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Pictures\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Pictures\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\Default\Pictures\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Pictures\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Pictures\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Pictures\desktop.ini, destination_filename = C:\Users\Default\Pictures\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Pictures\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Pictures\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Music\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Music\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\Default\Music\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Music\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\Default\Music\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Music\desktop.ini, destination_filename = C:\Users\Default\Music\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Music\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Music\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Links\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Links\desktop.ini, type = size, size_out = 580 True 1
Fn
File Read filename = C:\Users\Default\Links\desktop.ini, size = 592, size_out = 592 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\desktop.ini, size = 592 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Links\desktop.ini, destination_filename = C:\Users\Default\Links\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Links\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Links\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Links\Desktop.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Links\Desktop.lnk, type = size, size_out = 467 True 1
Fn
File Read filename = C:\Users\Default\Links\Desktop.lnk, size = 480, size_out = 480 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\Desktop.lnk, size = 480 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\Desktop.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Links\Desktop.lnk, destination_filename = C:\Users\Default\Links\Desktop.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Links\Downloads.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Links\Downloads.lnk, type = size, size_out = 894 True 1
Fn
File Read filename = C:\Users\Default\Links\Downloads.lnk, size = 896, size_out = 896 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\Downloads.lnk, size = 896 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\Downloads.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Links\Downloads.lnk, destination_filename = C:\Users\Default\Links\Downloads.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Links\RecentPlaces.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Links\RecentPlaces.lnk, type = size, size_out = 363 True 1
Fn
File Read filename = C:\Users\Default\Links\RecentPlaces.lnk, size = 368, size_out = 368 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\RecentPlaces.lnk, size = 368 True 1
Fn
Data
File Write filename = C:\Users\Default\Links\RecentPlaces.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Links\RecentPlaces.lnk, destination_filename = C:\Users\Default\Links\RecentPlaces.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\desktop.ini, type = size, size_out = 402 True 1
Fn
File Read filename = C:\Users\Default\Favorites\desktop.ini, size = 416, size_out = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\desktop.ini, size = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\desktop.ini, destination_filename = C:\Users\Default\Favorites\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Favorites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url, destination_filename = C:\Users\Default\Favorites\Windows Live\Get Windows Live.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Favorites\Windows Live\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url, destination_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url, destination_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url, destination_filename = C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSN Autos.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSN Money.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSN Sports.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSN.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSN.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url, destination_filename = C:\Users\Default\Favorites\MSN Websites\MSNBC News.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url, destination_filename = C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url, destination_filename = C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url, destination_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url, destination_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, type = size, size_out = 134 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url, destination_filename = C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Favorites\Links\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Links\desktop.ini, type = size, size_out = 80 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Links\desktop.ini, size = 80, size_out = 80 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Links\desktop.ini, size = 80 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Links\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Links\desktop.ini, destination_filename = C:\Users\Default\Favorites\Links\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Links\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Favorites\Links\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, type = size, size_out = 226 True 1
Fn
File Read filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, size = 240, size_out = 240 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, size = 240 True 1
Fn
Data
File Write filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url, destination_filename = C:\Users\Default\Favorites\Links\Web Slice Gallery.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Favorites\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\Downloads\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Downloads\desktop.ini, type = size, size_out = 282 True 1
Fn
File Read filename = C:\Users\Default\Downloads\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Downloads\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Downloads\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Downloads\desktop.ini, destination_filename = C:\Users\Default\Downloads\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Downloads\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Downloads\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Documents\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Documents\desktop.ini, type = size, size_out = 402 True 1
Fn
File Read filename = C:\Users\Default\Documents\desktop.ini, size = 416, size_out = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Documents\desktop.ini, size = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Documents\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Documents\desktop.ini, destination_filename = C:\Users\Default\Documents\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Documents\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Documents\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Desktop\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Desktop\desktop.ini, type = size, size_out = 282 True 1
Fn
File Read filename = C:\Users\Default\Desktop\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Desktop\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\Default\Desktop\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Desktop\desktop.ini, destination_filename = C:\Users\Default\Desktop\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Desktop\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Desktop\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Contacts\Administrator.contact, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Contacts\Administrator.contact, type = size, size_out = 68382 True 1
Fn
File Read filename = C:\Users\Default\Contacts\Administrator.contact, size = 68384, size_out = 68384 True 1
Fn
Data
File Write filename = C:\Users\Default\Contacts\Administrator.contact, size = 68384 True 1
Fn
Data
File Write filename = C:\Users\Default\Contacts\Administrator.contact, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Contacts\Administrator.contact, destination_filename = C:\Users\Default\Contacts\Administrator.contact.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Contacts\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\Contacts\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\Contacts\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\Contacts\desktop.ini, type = size, size_out = 412 True 1
Fn
File Read filename = C:\Users\Default\Contacts\desktop.ini, size = 416, size_out = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Contacts\desktop.ini, size = 416 True 1
Fn
Data
File Write filename = C:\Users\Default\Contacts\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\Contacts\desktop.ini, destination_filename = C:\Users\Default\Contacts\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\Contacts\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\Default\AppData\Local\IconCache.db, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\AppData\Local\IconCache.db, type = size, size_out = 776176 True 1
Fn
File Read filename = C:\Users\Default\AppData\Local\IconCache.db, size = 776176, size_out = 776176 True 1
Fn
Data
File Write filename = C:\Users\Default\AppData\Local\IconCache.db, size = 776176 True 1
Fn
Data
File Write filename = C:\Users\Default\AppData\Local\IconCache.db, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\Default\AppData\Local\IconCache.db, destination_filename = C:\Users\Default\AppData\Local\IconCache.db.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\Default\AppData\Local\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\Default\AppData\Local\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\Default\AppData\Local\Temp\FXSAPIDebugLogFile.txt, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\Default\AppData\Local\Temp\FXSAPIDebugLogFile.txt, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, type = size, size_out = 119 True 1
Fn
File Read filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, size = 128, size_out = 128 True 1
Fn
Data
File Write filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, size = 128 True 1
Fn
Data
File Write filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml, destination_filename = C:\Users\All Users\Sun\Java\Java Update\jaureglist.xml.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Sun\Java\Java Update\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Sun\Java\Java Update\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, type = size, size_out = 4932896 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, size = 4932896, size_out = 4932896 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, size = 4932896 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 143360, size_out = 143360 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 143360 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, type = size, size_out = 766 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, size = 768, size_out = 768 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, size = 768 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, type = size, size_out = 781872 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, size = 781872, size_out = 781872 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, size = 781872 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe, destination_filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\VC_redist.x86.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, type = size, size_out = 666 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, size = 672, size_out = 672 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, size = 672 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, type = size, size_out = 462976 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, size = 462976, size_out = 462976 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, size = 462976 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe, destination_filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\vcredist_x86.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, type = size, size_out = 766 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, size = 768, size_out = 768 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, size = 768 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, type = size, size_out = 781880 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, size = 781880, size_out = 781880 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, size = 781880 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe, destination_filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\VC_redist.x64.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, type = size, size_out = 5881317 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 143360, size_out = 143360 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 143360 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, type = size, size_out = 809765 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 809776, size_out = 809776 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 809776 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, type = size, size_out = 151552 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 151552, size_out = 151552 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 151552 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, type = size, size_out = 654 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, size = 656, size_out = 656 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, size = 656 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, type = size, size_out = 455576 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, size = 455576, size_out = 455576 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, size = 455576 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe, destination_filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, type = size, size_out = 821681 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, size = 821696, size_out = 821696 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, size = 821696 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, type = size, size_out = 151552 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 151552, size_out = 151552 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 151552 True 1
Fn
Data
File Write filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, type = size, size_out = 5153816 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, size = 5153816, size_out = 5153816 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, size = 5153816 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, type = size, size_out = 151552 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 151552, size_out = 151552 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 151552 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, type = size, size_out = 1034506 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 1034512, size_out = 1034512 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 1034512 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 143360, size_out = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, type = size, size_out = 5588256 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 143360, size_out = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, type = size, size_out = 1462871 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 1462880, size_out = 1462880 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 1462880 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, type = size, size_out = 147456 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 147456, size_out = 147456 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 147456 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\packages\vcRuntimeMinimum_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, type = size, size_out = 5204382 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, size = 5204382, size_out = 5204382 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, size = 5204382 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 143360, size_out = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\packages\vcRuntimeAdditional_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, type = size, size_out = 1292987 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, size = 1292987, size_out = 1292987 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, size = 1292987 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, type = size, size_out = 147456 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 147456, size_out = 147456 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 147456 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, type = size, size_out = 666 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, size = 672, size_out = 672 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, size = 672 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, type = size, size_out = 463016 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, size = 463024, size_out = 463024 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, size = 463024 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe, destination_filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\vcredist_x64.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, type = size, size_out = 5800228 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, type = size, size_out = 151552 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 151552, size_out = 151552 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 151552 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi, destination_filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, type = size, size_out = 654 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, size = 656, size_out = 656 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, size = 656 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm, destination_filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, type = size, size_out = 455720 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, size = 455720, size_out = 455720 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, size = 455720 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe, destination_filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, type = size, size_out = 997054 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, size = 997054, size_out = 997054 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, size = 997054 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab, destination_filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\cab1.cab.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, type = size, size_out = 143360 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 143360, size_out = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 143360 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi, destination_filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, type = size, size_out = 1034556 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 1034560, size_out = 1034560 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 1034560 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, destination_filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, type = size, size_out = 1012025 True 1
Fn
File Read filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 1012025, size_out = 1012025 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 1012025 True 1
Fn
File Write filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu, destination_filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, type = size, size_out = 164 True 1
Fn
File Read filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, size = 176, size_out = 176 True 1
Fn
File Write filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, size = 176 True 1
Fn
File Write filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log, destination_filename = C:\Users\All Users\Mozilla\logs\maintenanceservice-install.log.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Mozilla\logs\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Mozilla\logs\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, type = size, size_out = 251904 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, size = 251904, size_out = 251904 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, size = 251904 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp, destination_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, type = size, size_out = 17707008 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, size = 2621440 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, size = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, size = 48 True 1
Fn
File Move source_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp, destination_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, type = size, size_out = 17420288 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 2621440 False 1
Fn
Process #2: tzbtqw.exe
5921 0
»
Information Value
ID #2
File Name c:\users\5p5nrgjn0js halpmcxz\appdata\local\tzbtqw.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:26, Reason: Autostart
Unmonitor End Time: 00:05:21, Reason: Terminated by Timeout
Monitor Duration 00:01:55
OS Process Information
»
Information Value
PID 0x7ec
Parent PID 0x514 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 7F0
0x 488
0x 7A4
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
private_0x0000000000020000 0x00020000 0x00020fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
private_0x0000000000210000 0x00210000 0x0021ffff Private Memory rw True False False -
private_0x0000000000220000 0x00220000 0x0025ffff Private Memory rw True False False -
private_0x0000000000260000 0x00260000 0x002dffff Private Memory rw True False False -
private_0x00000000002e0000 0x002e0000 0x003dffff Private Memory rw True False False -
tzbtqw.exe 0x00400000 0x0040efff Memory Mapped File rwx True True False
...
rsaenh.dll 0x00410000 0x0044bfff Memory Mapped File r False False False -
private_0x00000000004d0000 0x004d0000 0x005cffff Private Memory rw True False False -
private_0x0000000000730000 0x00730000 0x0073ffff Private Memory rw True False False -
pagefile_0x0000000000740000 0x00740000 0x008c7fff Pagefile Backed Memory r True False False -
pagefile_0x00000000008d0000 0x008d0000 0x00a50fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000a60000 0x00a60000 0x01e5ffff Pagefile Backed Memory r True False False -
private_0x0000000001e60000 0x01e60000 0x01ffffff Private Memory rw True False False -
sortdefault.nls 0x02000000 0x022cefff Memory Mapped File r False False False -
wow64win.dll 0x74160000 0x741bbfff Memory Mapped File rwx False False False -
wow64.dll 0x741c0000 0x741fefff Memory Mapped File rwx False False False -
wow64cpu.dll 0x74210000 0x74217fff Memory Mapped File rwx False False False -
rsaenh.dll 0x756f0000 0x7572afff Memory Mapped File rwx False False False -
cryptsp.dll 0x75730000 0x75745fff Memory Mapped File rwx False False False -
cryptbase.dll 0x75760000 0x7576bfff Memory Mapped File rwx False False False -
sspicli.dll 0x75770000 0x757cffff Memory Mapped File rwx False False False -
kernel32.dll 0x75ad0000 0x75bdffff Memory Mapped File rwx False False False -
shlwapi.dll 0x75c20000 0x75c76fff Memory Mapped File rwx False False False -
imm32.dll 0x75c80000 0x75cdffff Memory Mapped File rwx False False False -
kernelbase.dll 0x75ce0000 0x75d25fff Memory Mapped File rwx False False False -
usp10.dll 0x75de0000 0x75e7cfff Memory Mapped File rwx False False False -
user32.dll 0x75ee0000 0x75fdffff Memory Mapped File rwx False False False -
msvcrt.dll 0x76140000 0x761ebfff Memory Mapped File rwx False False False -
rpcrt4.dll 0x76280000 0x7636ffff Memory Mapped File rwx False False False -
gdi32.dll 0x76370000 0x763fffff Memory Mapped File rwx False False False -
sechost.dll 0x76490000 0x764a8fff Memory Mapped File rwx False False False -
advapi32.dll 0x76610000 0x766affff Memory Mapped File rwx False False False -
lpk.dll 0x76940000 0x76949fff Memory Mapped File rwx False False False -
msctf.dll 0x76af0000 0x76bbbfff Memory Mapped File rwx False False False -
shell32.dll 0x76bc0000 0x77809fff Memory Mapped File rwx False False False -
private_0x0000000077810000 0x77810000 0x77909fff Private Memory rwx True False False -
private_0x0000000077910000 0x77910000 0x77a2efff Private Memory rwx True False False -
ntdll.dll 0x77a30000 0x77bd8fff Memory Mapped File rwx False False False -
ntdll.dll 0x77c10000 0x77d8ffff Memory Mapped File rwx False False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory rw True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
Created Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp.SATANA 1.34 MB MD5: 818d8c286b034e7c9377ac64c52e3294
SHA1: bc239e73122998141e144199d02680d559613d37
SHA256: 4650e76d3867ced5c521f6a202278dcb0f8c2df1f37fda8a65f450b63e4293e8
SSDeep: 24576:+zLgRvoVWHxVslEP4psT4zexQjX79kU5Xz30qMGdZO2iofLxvKun04a:+oKwwRpsT4zeqSU5D0PGdZndKun0r 		False
...
Modified Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp.SATANA 1.34 MB MD5: 818d8c286b034e7c9377ac64c52e3294
SHA1: bc239e73122998141e144199d02680d559613d37
SHA256: 4650e76d3867ced5c521f6a202278dcb0f8c2df1f37fda8a65f450b63e4293e8
SSDeep: 24576:+zLgRvoVWHxVslEP4psT4zexQjX79kU5Xz30qMGdZO2iofLxvKun04a:+oKwwRpsT4zeqSU5D0PGdZndKun0r 		False
...
Threads
Thread 0x7f0
12 0
»
Category Operation Information Success Count Logfile
Module Get Filename process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\local\tzbtqw.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe, size = 2048 True 1
Fn
Environment Get Environment String name = LOCALAPPDATA, result_out = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, value_name = BrowserUpdateCheck, data = 77 False 1
Fn
Registry Create Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce True 1
Fn
Registry Write Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, value_name = BrowserUpdateCheck, data = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\tzbtqw.exe, size = 108, type = REG_SZ True 1
Fn
Environment Get Environment String name = public, result_out = C:\Users\Public True 1
Fn
File Create filename = C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Read filename = C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A, size = 256, size_out = 256 True 1
Fn
Data
File Read filename = C:\Users\Public\0A643CC0B2786E0182A9C297C25EDEEB6DD44BB0E8EAA993679B4A37C364560A, size = 768, size_out = 768 True 1
Fn
Data
System Sleep duration = -1 (infinite) False 1
Fn
Thread 0x488
5909 0
»
Category Operation Information Success Count Logfile
File Create filename = C:\bootmgr, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\hiberfil.sys, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\pagefile.sys, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\Default\NTUSER.DAT.LOG2, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\Default\AppData\Local\Temp\FXSAPIDebugLogFile.txt, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, type = size, size_out = 17421184 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 2621440 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 2621440, size_out = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 2621440 True 1
Fn
File Write filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp, destination_filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\ARM\Reader_10.0.0\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, type = size, size_out = 479 True 1
Fn
File Read filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, size = 480, size_out = 480 True 1
Fn
Data
File Write filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, size = 480 True 1
Fn
Data
File Write filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata, destination_filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\All Users\Adobe\Acrobat\10.0\Replicate\Security\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG2, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, type = size, size_out = 20 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, size = 32, size_out = 32 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, size = 32 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, type = size, size_out = 4456 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, size = 4464, size_out = 4464 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, size = 4464 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3f8qPxY62zr_ixAChU.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, type = size, size_out = 72535 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, size = 72544, size_out = 72544 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, size = 72544 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3_9djyPQiNPNMAmz-4pB.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, type = size, size_out = 78497 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, size = 78497, size_out = 78497 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, size = 78497 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\7szlwC6osTf.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, type = size, size_out = 96357 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, size = 96357, size_out = 96357 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, size = 96357 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\alof7Q1oxt5xD5_.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, type = size, size_out = 50504 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, size = 50512, size_out = 50512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, size = 50512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\blBOhpW73h.flv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, type = size, size_out = 61046 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, size = 61046, size_out = 61046 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, size = 61046 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cw7o.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, type = size, size_out = 85624 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, size = 85632, size_out = 85632 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, size = 85632 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\G4YSBFPkjNoo6.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, type = size, size_out = 59631 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, size = 59631, size_out = 59631 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, size = 59631 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gKebx90L.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, type = size, size_out = 73881 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, size = 73881, size_out = 73881 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, size = 73881 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mtirofVCI.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, type = size, size_out = 84016 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, size = 84016, size_out = 84016 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, size = 84016 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\MYNLYz7VMI- P5wb.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, type = size, size_out = 14281 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, size = 14281, size_out = 14281 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, size = 14281 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Tn1sxGjuYKDml.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, type = size, size_out = 60023 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, size = 60023, size_out = 60023 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, size = 60023 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tOH8 1I3Bk xtZIae2C.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, type = size, size_out = 38430 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, size = 38432, size_out = 38432 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, size = 38432 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Uz2pi.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, type = size, size_out = 60601 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, size = 60601, size_out = 60601 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, size = 60601 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\7GP5Ohm8 LEBC0e3.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, type = size, size_out = 18186 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, size = 18192, size_out = 18192 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, size = 18192 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\C1rJkr.flv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, type = size, size_out = 60202 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, size = 60202, size_out = 60202 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, size = 60202 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\dosFEjBKj.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, type = size, size_out = 11114 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, size = 11114, size_out = 11114 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, size = 11114 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\gkB15.flv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, type = size, size_out = 80228 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, size = 80228, size_out = 80228 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, size = 80228 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\Il13H.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, type = size, size_out = 50141 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, size = 50144, size_out = 50144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, size = 50144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\KrirI9Bl.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, type = size, size_out = 61501 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, size = 61501, size_out = 61501 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, size = 61501 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\LaFJpIovpC m67da.flv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, type = size, size_out = 65217 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, size = 65217, size_out = 65217 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, size = 65217 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\N_dR9.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, type = size, size_out = 54381 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, size = 54384, size_out = 54384 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, size = 54384 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\o0uOKqA.mkv.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, type = size, size_out = 50544 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, size = 50544, size_out = 50544 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, size = 50544 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\PDHHI2WhpIQeChO.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, type = size, size_out = 24749 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, size = 24749, size_out = 24749 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, size = 24749 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\R0BZt4uO.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, type = size, size_out = 21590 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, size = 21600, size_out = 21600 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, size = 21600 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\r5lnD3C7LzTV7WI3.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, type = size, size_out = 46597 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, size = 46597, size_out = 46597 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, size = 46597 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\RXnfHTPx 3x.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, type = size, size_out = 1834 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, size = 1840, size_out = 1840 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, size = 1840 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\SMdgH-4UALZPcjzCSq.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, type = size, size_out = 67949 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, size = 67952, size_out = 67952 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, size = 67952 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\vrh5N_YQCAQxErdz.swf.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, type = size, size_out = 1448 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, size = 1456, size_out = 1456 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, size = 1456 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\VxZkUhNhY.avi.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, type = size, size_out = 97787 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, size = 97787, size_out = 97787 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, size = 97787 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\wnqfu.mp4.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-VN-bngQ2xX43UW\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, type = size, size_out = 524 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, size = 528, size_out = 528 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, size = 528 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, type = size, size_out = 248 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, size = 256, size_out = 256 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, size = 256 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, type = size, size_out = 248 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, size = 256, size_out = 256 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, size = 256 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Searches\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, type = size, size_out = 282 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, type = size, size_out = 45499 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, size = 45499, size_out = 45499 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, size = 45499 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\5u2363_S8hVX.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, type = size, size_out = 13853 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, size = 13853, size_out = 13853 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, size = 13853 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\60FSff2Oe.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, type = size, size_out = 94504 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, size = 94504, size_out = 94504 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, size = 94504 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\7hkgRe_1NlKOPG3.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, type = size, size_out = 54571 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, size = 54576, size_out = 54576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, size = 54576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\8ZfXL.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, type = size, size_out = 61782 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, size = 61782, size_out = 61782 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, size = 61782 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9KBFn.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, type = size, size_out = 60608 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, size = 60608, size_out = 60608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, size = 60608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\AAPbHXfe2U6.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, type = size, size_out = 35028 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, size = 35040, size_out = 35040 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, size = 35040 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\B5y032K-_fz6oa.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, type = size, size_out = 44596 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, size = 44596, size_out = 44596 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, size = 44596 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\C3ci.bmp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, type = size, size_out = 10318 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, size = 10318, size_out = 10318 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, size = 10318 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cv0jr vcIgdY.bmp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, type = size, size_out = 90797 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, size = 90797, size_out = 90797 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, size = 90797 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\E-wjBQO.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, type = size, size_out = 66648 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, size = 66656, size_out = 66656 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, size = 66656 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ePEptGFtI50kwe98LUZ.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, type = size, size_out = 84338 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, size = 84352, size_out = 84352 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, size = 84352 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eWyaCuITVOCf.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, type = size, size_out = 95141 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, size = 95141, size_out = 95141 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, size = 95141 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\F3s9g3pPRuGf W.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, type = size, size_out = 47815 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, size = 47815, size_out = 47815 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, size = 47815 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FY3fox7d sR.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, type = size, size_out = 12381 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, size = 12381, size_out = 12381 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, size = 12381 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\gvHZAANw7myITgFS.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, type = size, size_out = 68338 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, size = 68352, size_out = 68352 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, size = 68352 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HEEmcwAgHKg_8IVMj.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, type = size, size_out = 1823 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, size = 1824, size_out = 1824 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, size = 1824 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HPF8U7zCPENBCw.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, type = size, size_out = 3416 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, size = 3424, size_out = 3424 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, size = 3424 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HyhEvlUQEO5n.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, type = size, size_out = 92571 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, size = 92571, size_out = 92571 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, size = 92571 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JJz9 xJYSwlWLhm.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, type = size, size_out = 10289 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, size = 10289, size_out = 10289 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, size = 10289 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KgsgJt4D44X.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, type = size, size_out = 55840 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, size = 55840, size_out = 55840 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, size = 55840 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Kyv3H2Mj.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, type = size, size_out = 67299 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, size = 67312, size_out = 67312 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, size = 67312 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qa8fpI2QOVIHc2oV.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, type = size, size_out = 62683 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, size = 62683, size_out = 62683 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, size = 62683 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Qfy.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, type = size, size_out = 39321 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, size = 39328, size_out = 39328 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, size = 39328 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\QL0pEn sfcqI.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, type = size, size_out = 52664 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, size = 52672, size_out = 52672 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, size = 52672 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rPmMCVJ38wqeApSfFFk.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, type = size, size_out = 86456 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, size = 86464, size_out = 86464 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, size = 86464 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\t86GlPG1T-TpbyEc.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, type = size, size_out = 44137 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, size = 44137, size_out = 44137 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, size = 44137 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TqT2e5Wev.png.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, type = size, size_out = 5403 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, size = 5408, size_out = 5408 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, size = 5408 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\v3gYWZkmV.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, type = size, size_out = 33620 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, size = 33632, size_out = 33632 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, size = 33632 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\vO3sBsxR9x.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, type = size, size_out = 24353 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, size = 24368, size_out = 24368 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, size = 24368 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\wt0PiTAw2B7RDILwa0aq.jpg.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, type = size, size_out = 52608 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, size = 52608, size_out = 52608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, size = 52608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\X2NC-1y8L6c3BFhj.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, type = size, size_out = 83410 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, size = 83424, size_out = 83424 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, size = 83424 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XEvWNwgTjK.bmp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, type = size, size_out = 100599 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, size = 100608, size_out = 100608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, size = 100608 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzcEVcU.bmp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, type = size, size_out = 62145 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, size = 62145, size_out = 62145 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, size = 62145 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yYfK-gugNzJlWkBmWXR.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, type = size, size_out = 58024 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, size = 58024, size_out = 58024 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, size = 58024 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZT8FEePmS.gif.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, type = size, size_out = 39754 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, size = 39760, size_out = 39760 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, size = 39760 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\zvmUn4Ppu_MU.bmp.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, type = size, size_out = 3511 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, size = 3520, size_out = 3520 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, size = 3520 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\4wW_0vtUUOvAo.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, type = size, size_out = 99022 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, size = 99024, size_out = 99024 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, size = 99024 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\aMzEetDq.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, type = size, size_out = 504 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, size = 512, size_out = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, size = 512 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, type = size, size_out = 28510 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, size = 28510, size_out = 28510 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, size = 28510 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\hrvbKNmTnF6Jl-ggch6X.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, type = size, size_out = 42002 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, size = 42002, size_out = 42002 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, size = 42002 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\isHLh.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, type = size, size_out = 53727 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, size = 53728, size_out = 53728 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, size = 53728 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\kV0h6Z.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, type = size, size_out = 25676 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, size = 25676, size_out = 25676 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, size = 25676 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\Rb -.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, type = size, size_out = 87242 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, size = 87248, size_out = 87248 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, size = 87248 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\t8eIiwuJloOmAsq.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, type = size, size_out = 43095 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, size = 43095, size_out = 43095 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, size = 43095 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\tJMvD-K7rxCK doxUuK6.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, type = size, size_out = 1495 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, size = 1504, size_out = 1504 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, size = 1504 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\-I59e.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, type = size, size_out = 5388 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, size = 5392, size_out = 5392 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, size = 5392 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\4xXpu0i4_.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, type = size, size_out = 33637 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, size = 33648, size_out = 33648 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, size = 33648 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6MZvTrqj9GzGt9c.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, type = size, size_out = 59249 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, size = 59249, size_out = 59249 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, size = 59249 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\6QNn.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, type = size, size_out = 5256 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, size = 5264, size_out = 5264 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, size = 5264 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\n4fXC5.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, type = size, size_out = 29108 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, size = 29108, size_out = 29108 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, size = 29108 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\SpA muy5cVyHMDBcccE.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, type = size, size_out = 70629 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, size = 70640, size_out = 70640 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, size = 70640 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\VSdkEOk.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, type = size, size_out = 30318 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, size = 30318, size_out = 30318 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, size = 30318 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\2p3hjeizDXpva5h4.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, type = size, size_out = 96171 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, size = 96171, size_out = 96171 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, size = 96171 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\7d0EqtAy-qyN.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, type = size, size_out = 68942 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, size = 68944, size_out = 68944 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, size = 68944 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\DrM1Pz0AF.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, type = size, size_out = 28973 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, size = 28973, size_out = 28973 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, size = 28973 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\EjzHqOv.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, type = size, size_out = 49912 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, size = 49920, size_out = 49920 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, size = 49920 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\f27CXg9XtSS.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, type = size, size_out = 36050 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, size = 36064, size_out = 36064 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, size = 36064 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\hHoiKGam4Mocpgq9Zb.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, type = size, size_out = 97763 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, size = 97763, size_out = 97763 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, size = 97763 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Lsg H2uXu_PWa2SO6.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, type = size, size_out = 74650 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, size = 74650, size_out = 74650 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, size = 74650 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\qjzNein5TBq_8-aM.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, type = size, size_out = 61089 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, size = 61089, size_out = 61089 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, size = 61089 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\RL2cA08ZznQ.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, type = size, size_out = 97670 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, size = 97670, size_out = 97670 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, size = 97670 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\sxcg1 OZ8p7b-RHLR.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, type = size, size_out = 100040 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, size = 100048, size_out = 100048 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, size = 100048 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\Zc35DfpG 4dW qDzlP.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, type = size, size_out = 52794 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, size = 52800, size_out = 52800 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, size = 52800 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\-0Px3IA_NyN6.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, type = size, size_out = 94666 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, size = 94666, size_out = 94666 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, size = 94666 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\3Eg6QGr.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, type = size, size_out = 91983 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, size = 91983, size_out = 91983 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, size = 91983 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\4VHda.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, type = size, size_out = 2131 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, size = 2144, size_out = 2144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, size = 2144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\574fr08lRBx AKF1ZH.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, type = size, size_out = 22861 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, size = 22864, size_out = 22864 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, size = 22864 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\dzI2zYVV.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, type = size, size_out = 82707 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, size = 82720, size_out = 82720 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, size = 82720 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\i7ZtvcZAhQzh.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, type = size, size_out = 82122 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, size = 82128, size_out = 82128 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, size = 82128 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\iJV1Fme ESxezCJ.mp3.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, type = size, size_out = 32283 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, size = 32283, size_out = 32283 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, size = 32283 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\kBom.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, type = size, size_out = 10680 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, size = 10680, size_out = 10680 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, size = 10680 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\WXttx.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, type = size, size_out = 55319 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, size = 55328, size_out = 55328 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, size = 55328 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\YMzOfR9kFcgW.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, type = size, size_out = 80117 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, size = 80117, size_out = 80117 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, size = 80117 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zhXGn13.wav.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, type = size, size_out = 42586 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, size = 42586, size_out = 42586 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, size = 42586 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\zX6emcvTe-OFZTRC.m4a.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Music\XYZFTQ LA0AK54Mr7yT\y8mgGNx\InurLOxpPsE\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, type = size, size_out = 580 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, size = 592, size_out = 592 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, size = 592 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, type = size, size_out = 486 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, size = 496, size_out = 496 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, size = 496 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Desktop.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, type = size, size_out = 929 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, size = 944, size_out = 944 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, size = 944 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\Downloads.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, type = size, size_out = 363 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, size = 368, size_out = 368 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, size = 368 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\RecentPlaces.lnk.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, type = size, size_out = 402 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, size = 416, size_out = 416 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, size = 416 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, type = size, size_out = 133 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, type = size, size_out = 134 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, size = 144, size_out = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, size = 144 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, type = size, size_out = 80 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, size = 80, size_out = 80 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, size = 80 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, type = size, size_out = 236 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, size = 240, size_out = 240 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, size = 240 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, type = size, size_out = 226 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, size = 240, size_out = 240 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, size = 240 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\how_to_back_files.html, type = file_attributes True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, type = size, size_out = 282 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, size = 288, size_out = 288 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, size = 288 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, size = 48 True 1
Fn
Data
File Move source_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini, destination_filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\desktop.ini.SATANA, flags = MOVEFILE_REPLACE_EXISTING True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\how_to_back_files.html, type = file_attributes False 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\how_to_back_files.html, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-CanczFo7o.rtf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_WRITE_THROUGH True 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-CanczFo7o.rtf, type = size, size_out = 57447 True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-CanczFo7o.rtf, size = 57447, size_out = 57447 True 1
Fn
Data
For performance reasons, the remaining 4902 entries are omitted.
The remaining entries can be found in glog.xml.
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image