dodgeR.exe
Windows Exe (x86-32)
Created at 2019-06-01T23:39:00
Remarks
(0x200000c): The maximum memory dump size was exceeded. Some dumps may be missing in the report.
Monitored Processes
Behavior Information - Grouped by Category
Process #1: dodger.exe
3057
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\5p5nrgjn0js halpmcxz\desktop\dodger.exe |
| Command Line | "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dodgeR.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:35, Reason: Analysis Target |
| Unmonitor | End Time: 00:04:45, Reason: Terminated by Timeout |
| Monitor Duration | 00:04:09 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xa40 |
| Parent PID | 0x45c (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
A44
0x
A50
0x
A54
0x
A58
0x
A64
0x
A9C
0x
AD0
0x
AD4
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A218B0, 0x71AE7C30 |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A1E1D0, 0x71AEC87C |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A1B320 |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A1C5F8, 0x71A1B320 |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A1C660 |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71AE5700, 0x71A235BC |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747C705C |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747B1960 |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747B1B50, 0x747CA9E4 |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747C9090 |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747C069C |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x747C35F0 |
|
|
|
| system.drawing.ni.dll | 0x74780000 | 0x7490CFFF | Content Changed | - | 32-bit | 0x7488A580, 0x747C4000 |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71A247DC |
|
|
|
| system.ni.dll | 0x718E0000 | 0x7228CFFF | Content Changed | - | 32-bit | 0x71AED02C |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3.dodger | 60.14 KB |
MD5:
4075e66cca42a1a57d7fc396e3e3ac39
SHA1: 66dff768a3bbb0bd7951e402c9cd6c16f8367612 SHA256: 3019cbfae5c50092eb59bfa9edaf2d4ddfe087c4d2b655138e4538f7ffc34c64 SSDeep: 1536:8po4/iiB1+EJxNT636pEv4YzOMIvRdP2T6fasLYXJWl:8pviiB1+OT6KpJqOL0TKkZU |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3.dodger | 62.80 KB |
MD5:
346d35cc269c053e2d714bfb296652c5
SHA1: 4e76fdabc68cda4e335d3fdcd75c1c7287e418c4 SHA256: 4ee98fe8eeca232bc6d8ba222d31beb0084e2a05f001b89b3ddd8b9eb7bf166a SSDeep: 1536:767Pxzjl18YbJPKs1ciVE1aRkjjs2VjUDqjnZ:G7Pxnnx1PEios2VjUIZ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3.dodger | 25.19 KB |
MD5:
53ac8fc4500dc13ca2beb14fc2aca0ff
SHA1: 88a99d3caec9be4cecd23087f097db205b39d67e SHA256: 1b73765fdfaf8b9a4caecbd266e05ec7a662af754b22051f602d6764932ec631 SSDeep: 384:9Oi4BJPkG2RoPiwinAY/9JNqxxS2NC4I4Ivoc5mB9r7Oao7oxb7McH2pDdHacW8:uwRomAY/jNoxs3wrecb7MM2pYm |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav.dodger | 45.50 KB |
MD5:
2e7973efc3a77b0acee3be2e10e69540
SHA1: 0cdb0c0f7cc6876566a8d07f4a71f878f8603fd7 SHA256: ec9456e04dc87e0b822003e5181055831eab1a8a902ed66852b58777d64c2aca SSDeep: 768:G7Fm6pYE4MgA8iUpKMAl+EKKZ+vavVmheR8aAgdmlsWvVhxZUOre5FQtfQhmLyc+:SFPpkA+YtxZ+w31ghDUIe5+xQcLyR |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv.dodger | 43.70 KB |
MD5:
749f9d72c87c951e75f43ed57234c4d7
SHA1: ce84db1b1ee16b30029d1d2f1e04b86b7b559a65 SHA256: 0f2109b0195956d6d45daf3cd48c3c77ecca784cd2eb78b166aaa5e7949b5c8d SSDeep: 768:FQP4hx1uELZt0fM8AEIdMINFxAwc28E+3hjrNMXZ1kWprHxUB:F84vLAfM8AEIyjB276juJSWtRI |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv.dodger | 19.73 KB |
MD5:
9d771d91ddb30a6f7d77b955d03de6f3
SHA1: 5e86924cb1f9b6d04e1090283a911e12838e5343 SHA256: b2380bb62e604542dbebfba4f888bc34463c11ad17dd597259da239438446f25 SSDeep: 384:kkrFRBEMr/fCkgXj+muI66xDHeSBcrooUymbiBLuH/RuU6lmd14em9ahukB:3B/fCc7ItDHefMoPKgU6lmd14nNk |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi.dodger | 58.44 KB |
MD5:
e449b8afec91b542882fd2685c12edbd
SHA1: ca288b0501ae1ceef6c8fdfeb2d324051a2d7461 SHA256: 000b906377022bd7b45aa17b1ba22a2ee0f504a0a29d17267628f52be365ff88 SSDeep: 1536:ZPbgzqhOSCs8NIWWwiFKQgJdM4J7bbyvz8zm:tgzq8/nNIWWN7gJmSyvzJ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4.dodger | 26.08 KB |
MD5:
fd584a3414dd382e2014679878addbf3
SHA1: e14049115b643b207eb20a111bcfa90ae8b8274c SHA256: 62ef33285e120018e0d7ebb9b78fba3568f1c520b02eb318817452e279da03e4 SSDeep: 768:vtzTt+EZhRVKt845Vhky6o0jJy7/Yf5r8:9J+ErS55jky6ooG |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif.dodger | 18.38 KB |
MD5:
58281f8fb7a5428620b1255194d83c4b
SHA1: 33bbfc2fd62142d1dff7c773a498069a67f1f0cd SHA256: 3d8c90ec56917798f6d6cbee40c577c97e364ca43ae60ebbcd7fe7949d30e05b SSDeep: 384:vRz0+cuOY6FraEyYWkLzMQI7QCiVtyqHYwfITl6BMjJCKmkCYtYOBnRc:ZzQr2YVLI173iVtyqW56KtfCgrBnRc |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png.dodger | 33.92 KB |
MD5:
1ae1a47f66639b9319c90dca8d8b726d
SHA1: 09d8aa9c7737ab33d224a60fbc9d4955bde684ce SHA256: 5e93d9ff070a41549cae7fe631a511297e21656466dc61ae57d70dde08b9f670 SSDeep: 768:MO3IcFKxlNd5bxRZCldmpOWU9T083MZjsKaY:tbiNdHa0jUt5MZjGY |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png.dodger | 97.56 KB |
MD5:
498c69763ccc5418fb7fd8291f078e59
SHA1: 9ff5dbd6a14fd611cdb472ef24b5cd3b1bf32ed8 SHA256: 0664467251ebeb7a89ef2debdc7376e4e60e3574426ce9672a2d322851e6134e SSDeep: 1536:Bz2xSZ91K/UG4hJkCkG6WuRq2RveRW7ehxjgzQBaqtuxn+ZiwyZW/PqpPkRB:ip4s86bqU4WkxEMltuJaiwyZW/Pqp8r |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg.dodger | 89.81 KB |
MD5:
4c9b7162544dbe51e9dd4900cbcc2d2d
SHA1: 406d50f096840e8933fb96b85de6d3cec9b418ac SHA256: 73e558406691ce9539200dc039a58286c3171708e9d05501b1cc7b5bdc02f661 SSDeep: 1536:UrsC8gPq9ZGQwKsgSZG09YIcMe4Pvpkk4DlBTVN+DJn+FBbuorHC5k/LKrGYi0J:WsgqaG0YIcV4n2NBTqln+FBbuo7s6RYj |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav.dodger | 36.94 KB |
MD5:
c6fcc1300231d3c8cf20a02ec4641990
SHA1: 2af74a968fe97f6d6ddd618ac51b27d3e4105401 SHA256: 9c2ebff55d8d2ef13a1887451b6b6c40b4517ea64a9c22eff453a2d71fdf8af6 SSDeep: 768:R2n9Afm+ypM9pcWALm0Y64QjGVDz5Z2zYuJnkCc:09AO+ypQ50Y64NTbCc |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3.dodger | 28.00 KB |
MD5:
916b5d2ac1807d59dc9cb30b64344575
SHA1: 413a6560165bcec88ce7e8c2887ead81bdecc229 SHA256: fc0d078ebd147d01fe0c2fc40d0b98d9c4569b00812ed8d3fd5a720fe8fc8db2 SSDeep: 768:cdDiqXfjWGhebFft3OF7lny9I6v/oPRyh:cdZjWGeVt3OF7lnyN/YRk |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a.dodger | 62.41 KB |
MD5:
4c28362b47aaba9ae35aafd882e36406
SHA1: 5792dd8db8abd28177dd496e0ec8189b8b560d6d SHA256: 8fc59222b1e91b76a73f367a455f73d0302410df16936f0eb9e57e6336d8a546 SSDeep: 1536:D2/SvKjsn5eUh7F8C6+6uNNTfxZUYPUT6Spg7/vM1BUgayD/:aKvUQL7F8epZBO+7/U12gx/ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3.dodger | 40.05 KB |
MD5:
842e525f13dd6577bdabaf2088b0cd93
SHA1: 294953193cfeb0b3f3c59b38470d6aaa323dc722 SHA256: 6390c0bbb3d5829fb7e46e32b3e7398b39c0abb2d7ce600324a5cb3ffcf22226 SSDeep: 768:m5ib8ou4XCAGhOiY5UrLhebRfto3scW14QNBwyJjeL9Sxjg0rMvE0V:mmJCAGhO41sRftCW19BwSyojg0rg |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3.dodger | 60.44 KB |
MD5:
f5bb38bd3c07ab7993592037612c6623
SHA1: cdaa0a78811cf64660b6f6c306cd915ce80cff1e SHA256: f85a3e59a7cc8a17fc75ae9f3420f6f849c34f6e08b87b9fa3bb6f8930b9fcfb SSDeep: 1536:ZC5zws0ohRGQZVCQjjpCZv59AyZGOxWcZr3WQGUJHNjkX:IUQzp0jLWcp3BGaI |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav.dodger | 52.55 KB |
MD5:
fd9f3dfda77f585f27a89da58d03f80d
SHA1: 54f6794a2fc6e70202908f3d521870c1dc0e0157 SHA256: c4f845ed755d85ccd5ee2d0a8be9aaba771906c4e904ebc9adf3800406ee7159 SSDeep: 1536:yY1wo3zo4H1P2b/agvFcvN6JJysjEeRMFiB+:y4wo3z/H1P2bT9K7cErk+ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | 45.73 KB |
MD5:
bad1feda1ae3189c30635a01e7eb9654
SHA1: 4111b28a6db7de5698781d4b427480a66b58b48b SHA256: 3c092360874ed5c4e9a777b7f0a23a58d20bd51ef310f84a201eeed23e3c082f SSDeep: 768:igPo59Vu4WUJ0HZ/rj+wpIJIMD1VjylBM6uxTLSMCRUSfwpHh9RdJXWDD:hP49U4lEZ+wqOi1Vjy86wT3qpyB3gD |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | 20.94 KB |
MD5:
570fc9aaa9d134ea948aaf73daa6b46d
SHA1: 83e10824523547fe93dcaac0093ed8d12618d3fb SHA256: 01401f4d0a29910bd72a898dc39c1d9926af59470cb6d7f1fd8704eb04e09dab SSDeep: 384:jOcX6AY7zOJUDTVhf7zBLMy1o/QS3TYK28z09PuvWjf+P+fDRwc8SqvMJfPPISmO:Bq1eUvJAYo4STR6fvrOcIMVISn |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a.dodger | 1.22 KB |
MD5:
c6ee7078ffdfc7ebf87b42c0aa2cbba7
SHA1: 9a93d9e9453db4341390e2a4b114375fbe7a62d5 SHA256: 89c0e4cb279e8a74687b2a4538d1428ecdbd3f892e380bc767e711a12f2374a5 SSDeep: 24:FU1LratXUZ48Icbgn/ASar7VgoqeUxWidOcVabKUfy14cOf8l58OAO:S1fanzaVPuOcBOsofi5qO |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.dodger | 544 bytes |
MD5:
e71b7e9084341b11537727fdfb3ed0e6
SHA1: 015268169386d3478dc6f95ef3959045cef97dcb SHA256: 4b852cfe8d3216f020aeccd5dc15f1069387f113b6bb566d19d80dd6e36ac6af SSDeep: 12:bfsBf/qJBSnImvuXmKrR3Dsifu3wruASHA:bfskbSnI8uXtrRwiqwruAMA |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a.dodger | 2.73 KB |
MD5:
fb60f8b590a2a3972269992089b2f4b7
SHA1: 5752ab0b5f5b67138bc44ce007a8b38b9ffe0beb SHA256: eef50ea4469a7293775dfcd5ea2443ddf04ca9dcdbaa6d785b3fcbeeb33332cf SSDeep: 48:sXqHvHdqH3gSPil5TlWEe3hioRS2Js/NDzL4YJfddAhyNERNbnvBHb:wqVWw1rlW9hikSQsFLfERl5 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav.dodger | 38.53 KB |
MD5:
8550aadb1a2338eb149c06cd9abe2bf3
SHA1: 95f9a09f7577930d9409e275ec5e220173363973 SHA256: 614996d77d61411df15b2c2ea7d0119f707eef899b23eb9d904faaa291125ab4 SSDeep: 768:HSW8CV3u/eBmn81NWkUjkkPqkbbYEQRQTWtR/1syY8f:HS7uKZn81NVUIkzb9WD/iyYi |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3.dodger | 42.97 KB |
MD5:
53b2a276872f07272a06c2380c678689
SHA1: e74af6761a354229902e5a0483d489709d0394b8 SHA256: 8088474a1aeb2e30d1ae8643441c7d8aacb17956e3bd37c1844ecc582451aafc SSDeep: 768:h1ZOMOPmNE/X1mc5DfuR19CD4PmwY56feRWVeT1UxF8mWpKQbA+JWFFjx:h3OPmNCX1mc5K19CLwY5+eaE1Uf7WpDM |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3.dodger | 46.75 KB |
MD5:
e473308c3a36ab6188a11b7c49bdf369
SHA1: df8240caac0c0c09b0afa2e54a2c6d2a5216279e SHA256: a720e76d016880a30302e45c1966f8165a8df8459d480fdfff0539ce0efb5851 SSDeep: 768:o72cHLeiRun5OC7zaVwWnCySzQzi7+Gfw5+judhIC1DYsG5IWmJkeAc6qno7T2Wt:oAiRc5OwzWDWQzI+GLwIC1D8u5keHu2c |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a.dodger | 66.89 KB |
MD5:
590509495d5e89672e78371559550db3
SHA1: 5e92ba249e50e490240339fa25e48a107d280f0c SHA256: 799007998b166dae09c5e2e737c3299a547cd3ede7dc91dd960f8a0ac52406bd SSDeep: 1536:Msmstnl3fDOMYooryHOUvDmycS4bkDck5cAC+4DZjFTZ1sR0:MsxKM3THn6yF4kP4DZFXs6 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3.dodger | 77.66 KB |
MD5:
63307918ec5ca7f5618819940d7bc870
SHA1: 38892b7f503506cdc0269324710ef5c6015a2cb6 SHA256: 4eab429fdac40811738bd9f76e159b7087497eea61e9a70c71276fcde027b523 SSDeep: 1536:2qBV1L4lGXNalD236H852pOM/CV2zIU/ScQc5UCemiLk9cX/e/W5nOlIUQO:DVKGNa+gS2tI9cQcnuLecX2uMlIUQO |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a.dodger | 52.62 KB |
MD5:
9e1c10ae23eccf1290810cd2704d62f9
SHA1: 32de92568d7a64671866910e9fa143a3b1a63bb8 SHA256: e727fc1fb9dfb621fdf6fe9d76a2ee222a0f3ac97ab9701dff70c987e8515da8 SSDeep: 1536:paWC/k0eYT2TbyfE5+UeEVAPS9Oryvysx:paWC/k0eYTNfQaa9Oryvym |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv.dodger | 28.98 KB |
MD5:
0e994997ce3d43bb527e22ccf19ff279
SHA1: 33e26febecc6dddea82a286074fe762bdb0f976f SHA256: 42a3f5883a885f15db6becf9427d12de8b02cf19c2beaa90432a228438138dd8 SSDeep: 768:/voskOtGWE5xWVOvBUc8CHergRlRlOKbLM7i:/vWuGJkOvuc2kRvlRLM7i |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf.dodger | 16.91 KB |
MD5:
14d859363a7766826ceb34ab0be11fdb
SHA1: 7d7c9033fbabae815eb67f01d6c59432d34232e6 SHA256: e82b752fdafb174cff9de4ce00a21335f14c7c760c5af3fbbbbefb9e005f7178 SSDeep: 384:m6M5Jzc5kJ7fcWYF1SpIURNW4/GMDTqUY2ZgDqdJbAmzGg0dZ:m6M5xSkWWY0IUW4/GwqUY2ZgWXX70Z |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv.dodger | 41.03 KB |
MD5:
7029c0cc87e56a0b02d94c61332dbffc
SHA1: 99f4a12e0d9f85852dadfd0fb62dadb22dcbf293 SHA256: 8a5b834531419d9e2c21c38fca204299d29dacd31ba64af9f9c97a084cd1e7da SSDeep: 768:Pgn8VbmjdZtDHCbFNDOk87hjTwuOwFOLRlcE5fPc3jielSgrUsGx9zl:onWQpuHBQhjTwyFOLQCfwjNYsONl |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi.dodger | 53.05 KB |
MD5:
2d4da2620aa74c7221edb93df2f33278
SHA1: da01090bf48369b390b8982b0544617b8fc567e9 SHA256: 0c188e93187e83c30849cd630ce1b29eea17beedccb2ca509ca11b1cc5984599 SSDeep: 1536:bievU0OAWbwMGaxb7+G80qUJz0rYyMkA0/as6Rf:biR0WbwMnoUpeYyFB/asof |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv.dodger | 44.33 KB |
MD5:
c18e1be2c64c59243c9c1a1630773f33
SHA1: c2a7f0fb6e3747869e652c9420721f83371e9633 SHA256: 6bdc035b6fc439a9a3863625f0040f3b3167a79e5e4fbcf04f2f31a0be93559c SSDeep: 768:MzOlZUmZtUGHvWt6TSkhLJuRaKn7f2a3Vo6Rg1z2vCTpP7MHS94PEQSWtf:MaUGHvWbeLJA7r2aC6Rg1zReH7sQS6 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.dodger | 544 bytes |
MD5:
2150918011504e8ee371141a6f25618c
SHA1: bd80276021ef884bdde40a3b60b1205ef9d0016f SHA256: ee7829b4cb54b581cc140b2d7e82827c03c0e8f703a662b4583cbf6e013186a1 SSDeep: 12:4XelSfEnXuTtLLg28MVkYditQLKNFN2KbYR+sVdUNTPyvf:4KSMeh/g3MOYdp+KH |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4.dodger | 41.88 KB |
MD5:
d68758cf97f0ce417d02a47c6680422d
SHA1: 3d0f5a5e78e396f0989d2faef365aaabfe5cab8c SHA256: a3028534a9aa5cb101a6265aa1c2f9569f9ca13a479db827789cf8b0b849272b SSDeep: 768:Uq4dNmPGasZMD+EK4mdWG78535Jz7J8QmwNm0eZ75jvFaj4p0VBGxqgN:Uq4GPGvZMKEK4mAZb2wNm0itbFw4kGxV |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf.dodger | 14.56 KB |
MD5:
e31e396bec5d52bff79549e452e8c0e0
SHA1: 3aebdd242d9eaa468a611916c02bc8960e8ca50c SHA256: c79150b7ee7ace606be4df2a9a20f7a992415a6e62359f4da09ae58a9573c4d6 SSDeep: 384:mhPoC5d4XmbeLkfD/OAt4k4vhR64QgdoVO00:6FvOmK47/oVac00 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf.dodger | 56.27 KB |
MD5:
451bdbc3ee80ea7f36d836f82b3105aa
SHA1: dac80408ff0a246252edcf68fd0d56265edb8fd5 SHA256: 8fa0d7ba49a8cbeb6ea1605e31826043bd1b03e5bd31c0f9243da6842166d177 SSDeep: 1536:6XTsvt3A4UxO2DOl5s7rqLqa8VNg+n2S4zl:6jsF5lFGF2bzl |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv.dodger | 12.69 KB |
MD5:
50967c8664f46bf3831e2b70bda84c68
SHA1: 07f89d5d70d0cb76f22364350fac0484d4ce5f47 SHA256: bdecd2831f8d1fbfb145eccfa53de64e75b0eac825bb98ae337e53c040443215 SSDeep: 192:1MIvToO9MWPay8ksp45koRSJ9IwR8w0X0OLIbSTEgHa9F0k2LTFqxfzR1RIaRhV:7ToSCxcrSnIMMV0bSTEN8kIwfmYV |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf.dodger | 86.08 KB |
MD5:
cbd15c3a3183b2960b329025d0291c4d
SHA1: fecfbceea1633d743692e674190b9249157cbaa0 SHA256: fbb1a5bbd895a84d4be1f9670790023e21b6171216938ebc785bfce89a952a78 SSDeep: 1536:MTORPDez4dgtJuE3nrM668/DVMmNE5d9+TM0ot/sQHzrgT:ZQ4ytH3rM666eSGH0oSQHngT |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi.dodger | 91.69 KB |
MD5:
3af8570c9b7028fdf6344f14add3a3cb
SHA1: cd562e66cc4e7fead90a7a80456b5eea3f7b10d5 SHA256: 2eb0c59f45e305c994465850609b774d673d37348e8d20915bfb1e062e3f7b08 SSDeep: 1536:zpSTFh5qbso76PknoP9YXXRiprGfo2fBdILKMuwSbS4A/o7WwS:zqFSbso7s0IZUfBdILvuwAHA/+nS |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv.dodger | 40.64 KB |
MD5:
5f0f9eddba00dcf1f14cbb2fb8c37ff8
SHA1: fceda0de8316850831bdcb854ec7946e20f45ab3 SHA256: 67b551409021ecbe80bd86a3c7a45fc6c00799e857f3ea3f109f142e94fb2c25 SSDeep: 768:77yZE8zq0N8vjTl9frsKumRSjkwvNBCfTeivpqd6dJ3DvESk:77USb8mRSjT4rL4diDESk |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf.dodger | 14.56 KB |
MD5:
bb3bccc812450a71502b3b77a0df630d
SHA1: 222157c2fa3ca7578ff0ecdbe193b72dcc3b6942 SHA256: d486850f4e9293b881a139c3d5fd2d113507aef15dec365097827a1bcacaddfd SSDeep: 384:nfLT1LYu84yo0Zl7dmeT2Y2dHzG3zzkaHkjOiuYPpxGOj60m:nuv4y1ZlNn2RG3zzkNnP7H60m |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv.dodger | 26.97 KB |
MD5:
317f972890219f8fc3988d8a3f16124e
SHA1: a5368636830b613666d5d8866259b49ec96f79ff SHA256: 73966016660ad7d03566aaa5d67db8123e3aa355c74cbba7f00947187000f765 SSDeep: 768:8QD61ljZulDMB5DH75DLaiHGOKfUksrSOJLtqxFOXo54AD:7e1fuOB5DH7B8OKTqL5hA |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv.dodger | 80.66 KB |
MD5:
0a2f6532fcf356bd52a2a71dc82f120a
SHA1: 792a191d4c96d58c33e54a1047dd5231a5bb7721 SHA256: 356c15a7040dae6d26c5667a7d9849b9632628ac5579f89defef50932a46ee40 SSDeep: 1536:urOReMbEs8a48i8d/X8+G3/XjTkzX0aHjEU6UtQLDWk+dcw:jReMbZR3IPTTkz1HYUtyw |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4.dodger | 62.59 KB |
MD5:
6f5ec8b6dfb8a91ffe4ab64c224fe23f
SHA1: 494c6c786726af546007824f6d0b018020e913ab SHA256: e701f70285c37ed04791652d259579b334b005b3cba0421242f640ff793c014f SSDeep: 1536:rhxYBWF+SS32QqcHVFoA+RhtQh4kJKTprvWlGx09Bw3KKN7Wrs:d0J32yH4hhCh8Tt4XKNKw |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4.dodger | 45.12 KB |
MD5:
220f0b9c12c018a68fc027b9a79e785d
SHA1: 08a44a03aa3901cbdb01e189e5d619c3e2689bd5 SHA256: 463a367e835c64a3601913d080b29eaa188ec51d91203b3c0934fef7cd9f4897 SSDeep: 768:q+I1faxUsqvYtht21WIlYPYv3KnL1wIccqYd45LTtO9mtzXHoKyd9OlSqshsR:8fU4Y/IlYPYvoeeqT5fImtzHobzOUyR |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv.dodger | 45.19 KB |
MD5:
ce3957de490267caeba96a2a49809a17
SHA1: dc08b0f99207b600cbfe4a4892771de8f74dc457 SHA256: 6d977fed5d75093b1ff1dcc22cebe9b1eff5e8d954cacd8fe8abb9a6dab458c3 SSDeep: 768:GiPo+Qbf98J2Up7Tdehv0GLgq1QqnqI1vvgNKa7Pg7mRH9U9KL69s1Kz79ASDNp:GiAv5vUpHd+801QR8gNKa2Pq8s1I79A+ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi.dodger | 66.25 KB |
MD5:
1c7633e54db010afa2717aab30ea490d
SHA1: 1071085276cec5e90394ed634f85e534ee7b9fc7 SHA256: bc366e3cb558373ef20b45dbe9733efd96ebdbb861208fdb7532912e28a0bd3c SSDeep: 1536:zH9HZ60jN+KvyzEkpB8/XTGy0Nn9oqohUsYKROQD:zT/jAmV0mXTG/WHZxb |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv.dodger | 44.95 KB |
MD5:
9e8242375a4d9950a45d2aa3719e3759
SHA1: 5e4d4438c1ddbd3e75f4a3e54b265a8f83a95007 SHA256: d1b00e3d358997a2af1b7711b63dda720c877b78ffe0119e49a08e7a2e57a301 SSDeep: 768:jlKawwCf7sh6NYFyiyOdxuv94Y/EWIyg8la8Am7wxzClkGlEEerTVGvvWyoljy:jA1NYhRWeY/rg+Am7RdOEI8vjok |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv.dodger | 33.81 KB |
MD5:
c0826276a725f99b1cfd7f8b1f7432b1
SHA1: 892e6c7bf08f471914479e18813b5ea121c6b2a7 SHA256: 77a5046122576059c132442e686c99196aef2f20723cb41a104310e4825dc3c7 SSDeep: 768:O85KRO8jUAeSrFoDTcI6AAadIzYy/L+u6HEdQcY:O85qGaywMy/L+tTcY |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi.dodger | 59.94 KB |
MD5:
106757f6712a712968c7b6744b95cd2d
SHA1: b5a990d46e3d45c5ba2251859ac9f307b8c10963 SHA256: f2fc3c637d90f6520d3ad0633117442b461e2d9937d54bb4a206c4540b50cdef SSDeep: 768:78wQUHug3lK5fmUGHFJuZbA521UX6q580h6BF/NfL6Y6meklMNhp0qCHzYTy9L91:A9oVKgtBWU9O0GF/NTf6EGz0qJeUZ0 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi.dodger | 88.17 KB |
MD5:
fd76061010881ecd6df8f8f982940b4a
SHA1: fd6855fa219ff89bc36c2a5c52f7915e983a8d91 SHA256: 5658e514f404ebc0afe9d0e83355f3ca686bc0d76316ca945bbb5bd3931710bd SSDeep: 1536:ofJB/K1Bm7zRTaujvLG3bkg8hWe/FY718Juhfea5Tg:o4IaqjrZm18J0fd0 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4.dodger | 20.47 KB |
MD5:
bc4179e21d1e6c2f49f6ad86d8eb54e8
SHA1: 16133b7af7af91711ebb74c330dbd0f8238a577a SHA256: 4a0566ab08d247fad432c37868792da5a5074f7d53aab324c8ff94338b550c27 SSDeep: 384:qlU7ptiu/B8ytec2ClDiNKXAX6Lf/l78yYmqEs7MVy48KLrT5kh58Wdt67d:G29B8MecvmcXAOf/loHd4RLrT5kh58aG |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp.dodger | 9.67 KB |
MD5:
9474e6b211ce611f107b7d81f5802e01
SHA1: eae075c4688bdd16214891b669f66e950df72eca SHA256: 5a9b7e943eb59bc4fd9d370c4d4f8d418b38313bbf45cf92ea6e4f7e8397c984 SSDeep: 192:dznQdEyVfLuD8qrJOMFg16fIwfjK0CDkDhTnq/AWvsde+Den/i:dTQamTqrUk8SI98jWvaD/ |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp.dodger | 67.66 KB |
MD5:
151aec2cf55ee3c8e16b00bbaa9fdde5
SHA1: 7ce8de6ea6c1e96b3c3ef85f6be6aa3a61d2f28c SHA256: 7c9214e11bd51750291a3e8bfb25e5ca674ee273359b3d30e746ad83ec4e4bdf SSDeep: 1536:ewm8rnFk0viTRmh4lf3cRLjMI4WZC8h+O9yjG2QotST4I0N:v5jO5rf3w11ZphiS4I0N |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.dodger | 544 bytes |
MD5:
3b26790f3a67533105bd85555b34912c
SHA1: 5684e3b577b0d9628eac1315611cd880b786cbd9 SHA256: f7beb2dc9b8a02f249f91998aa8aea7c3a97f6c83eec349c69c351a16a17d084 SSDeep: 12:vCEghmr381MA3v6BNNf6Fx2tXyWEaMiaEiZPARhpuCS3wvfcH84TWxg2UD:vmhmr3UMAfOfo2tiqMl42R3vBWxgn |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp.dodger | 1.94 KB |
MD5:
bd472554a366752b890dd0a9d864a5d9
SHA1: a2feeaa8d38dda1493f9f2e5e85d3508e4e835f9 SHA256: 5a5ad39ba1ab94ee85e8e4c3d5391da1feeb78ada8d05ad3dd95b8474ca640c4 SSDeep: 48:iUCW3+yX41V6brfnuCSf4FOjOqyyeeJ4JxUdyMd4SW6MaKdvL:iUX+NyrmkEjOyuTMdZtMaKZL |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png.dodger | 39.95 KB |
MD5:
f7fe0430672e1e6786e9a2c7a4726561
SHA1: d6186367f6b7023136c8b0be9610e1fbfe0dd26a SHA256: 4ea77c3b58a006140f55752d706db8da7a9623266d62bb4a076c7379550fbc72 SSDeep: 768:fGqIsNNRJ+jfhT+MJwBqidfFnB1zb9Bw0WcrEMqZJ0vBL2HUQhdsb:f60RqZJC3BDBwf+vByHUKub |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp.dodger | 8.95 KB |
MD5:
b7b8177f13c16ce5ce73297a21b26351
SHA1: c63dd51b6cb1ffca43cbbfdd19091da531e8900d SHA256: 59a7aae2174618bf2a9cf6110ec301a8bde11c69d9e4ffd9836c76ce30103357 SSDeep: 192:rwJlgK2mCmqkQdu6CdlrC7SPBY4WEft63LuiZJLHcCR/2AG:8DgEZqPGdUb4WO6qiZB8CReAG |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png.dodger | 77.11 KB |
MD5:
6f2519d2394ea5e4b0758247615575ff
SHA1: c794d35796bb0bc1e93c5b915ece1345b4b52fe5 SHA256: 39c03cd2ed7f535b19af7e76c43a523cc9d08d7a79789ef5ac1963a1cb4891ec SSDeep: 1536:V89C2QOHkbP77/yKVSvAPltLwkxmiUsXtSykdl7MyET0LpoIII6:VAA7eoS4NykYi1wTIpIII6 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg.dodger | 45.84 KB |
MD5:
d0e09dc1379ae9cd11c6cd4de80bd121
SHA1: f660bac09d408090559c30a023a7347229c9296e SHA256: 37bb5a1af09fafbb3458114927f2208e3995b3fa48993969d568451f7654809c SSDeep: 768:KaeJbJqgmwt+AkBNp9nmjH9OsQMqDHMwlj/EFUfI6XpGVhonCKuNC7kCi5JiMo:MXqrpVkjdOPMyHM6wFUNpGzonZdiriMo |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp.dodger | 63.17 KB |
MD5:
98dce47ff236989d5755ef4704c6cb64
SHA1: a39e1826598b7564017c30e5a7890a5f05f1e4f8 SHA256: 2fa5adac82da710e1992765c6b8fc8e8c8a48980da4422b6973938ffb54b976e SSDeep: 1536:iEzVSsj4sypyGpnhi/7YJyyi1e2yYRpXKumMnwqY:iSwQGviTYgNe2XTX24DY |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif.dodger | 24.34 KB |
MD5:
89abb093f8d3f82d8f9818eb2d7716ec
SHA1: 715347326541c76c2f0c695effdfa620fe2be60e SHA256: 2bc287397df9ba3c8dd92a348be0f9d8e8f2cfd4a03cc16bf48180de5b5852f9 SSDeep: 384:YZzZR/wiaPO78gXy2OZTB/kIaXF7w/v4zIolCR6Bn2edRr3YXHwLhr3H3fJXQm6t:mlR/wiT78b9O0ZR6BP93YXQLl3Hi |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg.dodger | 12.52 KB |
MD5:
c7d9c4a82b37ae321bfc211c0bfc60e9
SHA1: 9758656ea8f94d10ea8d0a4f0709a96e6741a6d5 SHA256: ce048f8a35c288d485f4238e87de12df3927c33d128bfff8db59ab365c55a48c SSDeep: 384:I9pvwc8FWUOMAY7YeoektoTLHK/uJ7UowOQ1oK:qvwc7HvBZe3K/aE1oK |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp.dodger | 39.22 KB |
MD5:
6ba685a9086beb0dffe52d94c06b826e
SHA1: 390eaf85d40a27c7ccdd76fb3766689576c1fab4 SHA256: 5b0d6f4085439ec353728246c0d8760958d50068d9f2eea796aff84e190a821e SSDeep: 768:8ZUZtiINCEIuDXcTLrCbghenbrKuwLRQ6e0Zi26zHvXoZA5yDCGZY:8FeIuDXYhcnqNLRq0Zi2vZA5yLi |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg.dodger | 85.95 KB |
MD5:
955b2678c21464c56c3d6c295cf6feaf
SHA1: 3ede04f10b1cb6365ac1b9581266ca223a1d1afd SHA256: 87af66abeee6072558cf0b90fedff07ed2c902eae7992dabefefa064a01810a6 SSDeep: 1536:IOwk2TcF7GvAj2SBcC8ejWpc50Z50ciSVdp+6gGbMdxizMFGt1:IFQGvcLCC8Z/rgNxRGb |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png.dodger | 68.75 KB |
MD5:
7792bcd737c5a32a49e318bd6bcf1589
SHA1: a09d5b5af22f6ad47874bbc7645381d9660a1937 SHA256: 5bd3bbde2df9a2ec79eac8bbd60bb28d140fe7105d7092c19c61ec0705614fb6 SSDeep: 1536:MHlSQ5i2ILogfDzFIae+VbOH44eWIFL+TaoX1URh:6D5i7r/vVbuOL/YORh |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif.dodger | 37.69 KB |
MD5:
b63a823c5130d08cc34b0dd6cbbf20f7
SHA1: 15b87460a41501ac9dbe8aa695e29a6ac135c535 SHA256: 7ac5b82f98a5c84cebb7bd18f8bcf9096fdd1ee291e22f47cc8ccb369509d48e SSDeep: 768:y1bKd3WBRP7RLkyXdr8DcvyIVB/wZX5ojLzniEskwA:WbKR+jRkcaIVB/wdmnTiEKA |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif.dodger | 64.00 KB |
MD5:
fd45fbdf9c74e6b489fce5e47a5de99a
SHA1: 2d6a8d9b68cc919df30a6064d505ba00821e141b SHA256: b953e3dc8cfae847bce2c4f2c0977c780739473e3985d1243f3bc4965a29da6f SSDeep: 1536:1tz/Qba7b97/s/Emkt6otgjEYH+X7TfWr:fz8U7/qxZiWr |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.dodger | 128 bytes |
MD5:
bc003c0db5781a49b8e6d98388fb6f7b
SHA1: b4d72e2467b92ba61c84eb212cb4dc948ee59a5a SHA256: 65afb01be6df924bb098ea29718fbc7cd3c2cedc692e34a1b166e9628bd9a69a SSDeep: 3:GCRbOUSCUrd5Ta97aYdswqqNpGIC5GTX2yK2nozpb:GCRvpUrd5Ta9uYd+q7GIAxpB |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.dodger | 592 bytes |
MD5:
b13167d8f3c420ac8e6106ae9ba90cea
SHA1: 38a6710a024229def069132179ee873c72497753 SHA256: facf886559e5cd708f70abf721041722170d9d9d379a8bc1b74abbb545109d5b SSDeep: 12:tM346voxMVriYB7IQI+zcO8O/E/XfxAb0DEZxX1MzP1r0Xno:e346QxixBzQ5OQqBF1Mzd6o |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.dodger | 288 bytes |
MD5:
fc4d3a835026e1d68b615fce350a859f
SHA1: c990915a46812902e683befa6c07a061d12ce0e3 SHA256: 3bef4b8ebe4bf664ab2d4d5143b528c91bb7c33b6b56ac6cf134c72285549297 SSDeep: 6:gjmKhjuUK9j1lFmBV2lizakVJYaA9NmAAMnkvMj5QMh:gjmwuUK9RlFmsizTKzreikv1u |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.dodger | 144 bytes |
MD5:
44c4f645ffd4ea7a16f788f34a88f978
SHA1: 88c7a0859c694fe340efc05d98888f021e89fa38 SHA256: 4fc84d90a9548fdbc9abe365f2eb17d3eaa04fb89af6facb1932a4cc66e9ce37 SSDeep: 3:jVhj1OhyyurdP+XttSP2M+pHQByVw4MT/orpBRUP5WCTkj:jVhj1OhXkdG9tSOM+pwByPMT/EzUP5F8 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.dodger | 144 bytes |
MD5:
68d8caf68fde1a46d0e6268a19919197
SHA1: 52ca5d868f358e9e05c857358c00c7eb82c0c384 SHA256: 575743cb7308767eaf4f23ff638433c0fb38d7b833146660fd1efbf706988e1e SSDeep: 3:SVLx94IIQHAG/Nuv1tEkCG99u9gpJYOcIZpaBatvnUJH2XfAl8:SD94IIQROMkCN9gYOcIXamvzXfA8 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.dodger | 320 bytes |
MD5:
131a3d41e04cd2a92628e883b06d61c3
SHA1: 38c9bb37f76c90ce2b8c44f23557bb6eeb0074fa SHA256: 606577ec1517a670a53d0b8efee9102d7bcf4ab566cbc5cee627119c1aada602 SSDeep: 6:XXbOGeil8eL/KkRR7bLn2pY6K48rCu3sNVR5nw1bfqLqovvbHr/bGJQn:XXbO6JL/FRR7bWK4syGOLHvDDa+n |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.dodger | 128 bytes |
MD5:
498807f8e52e2359c046987245430413
SHA1: a63c2741a4b0f5c7b8aab3e2d9638d149633cfe6 SHA256: 97d45753123229a0ce8f50dd1121a27ab2466ac5717f3326f8cd4a396133db8c SSDeep: 3:Xj/CERq2PYdrlV5Nk/xR6I5FdQCXww0RjN30mjEMTAn:T/DqOYZHk/CI5FdXXww0V0uEF |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.dodger | 448 bytes |
MD5:
ad883dc6584f9567090f83f3799f4bdd
SHA1: 1c40a15f5e12ab9d44ca377e9512cf04b075040a SHA256: 22a18d05fcfdf6f7f62f33b56efef68a3ff19effc874fa7e09e69a6febba062a SSDeep: 12:IkQqdlCRm2C+M/7/XiQcTd6tNvA7YKcz061eSzjppaaVsdtMPPJ/xWeun3:XYRl+zSpsGcz061eIqaVxPV83 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat.dodger | 32 bytes |
MD5:
8157dac21de2fc4eca19fc4c1a7e2c9d
SHA1: 6cac8f02c477127a3bbcaf1773494453e693ccb0 SHA256: b97713579c14a697ba99dc59835c1e2cfa541fdc9972ac58e5d9bb490286155b SSDeep: 3:5VXPe3n:rXc |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a.dodger | 45.55 KB |
MD5:
ff4396beded476596741f9d2031bb1ec
SHA1: 4811a7187eb3c936f935d35c32f3ba557201fd9d SHA256: 5cb8c22945d6d734a99142a1e73242beb0be178e0f24ef3b2c0be2be92648815 SSDeep: 768:xMqk/x8dDmsQOk9hvioFDy2Pet69AOARnCc92cFepgvtTIXmGBP1J0gkG2NbnBqC:xMqCmDmtOk9hvi+Dy2G2AN93wstTIXpK |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a.dodger | 26.06 KB |
MD5:
d0e469e25bdd259d489ce4bb9b77df7c
SHA1: d8db550beaedba10c8d403800de75e051646eec9 SHA256: 6c422686dad0418befaaa81cee6510fe0e719e4fd1854e8bc98ff5500f569100 SSDeep: 768:qGM8wRqc4I4ulCPa/NUXeNaS8OQbhNv51BLE:BwX4PPINUXWaS3khNv7BLE |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav.dodger | 12.39 KB |
MD5:
7e5c934fe4896d2c35fb6361b34ee6f9
SHA1: 12fecafcc16db4ec5965616c74c739d028c17f3b SHA256: 1c46cecde60ce39fe038644b6959322da0b2b0238932faf612cecf23c4acff96 SSDeep: 384:FjQlJuGuIS484LL5HygDsFKL68Ln66yIKnkYq:5sTuBw5PDsFE6Q8nkYq |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3.dodger | 60.55 KB |
MD5:
2400f5a444e3d01a43eac963ac253479
SHA1: 35cf34d8c8eb1eec7e792141759ad26cd7097425 SHA256: 8e755454f6ddd2591a461ff467d0c5bfc4097cfc2870e4822378153244155970 SSDeep: 1536:dKtKbMWYHZJ3TDO1PFgiWSbYYayUOkso4WAyryLBIcbXL:YtKEHZJ3GPFx0Ko4wOtIcbb |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a.dodger | 36.27 KB |
MD5:
187d251c793a36da9567f5a89fe36fe2
SHA1: 233e2e3aed924d7a81a5cb0abf43c656ed26323a SHA256: 66718280d677105de2043177ae80672b55f555b9701aae02e190f0a213f96c50 SSDeep: 768:dlz5KaMrnnBBVmfq1JnU8kZj0biS9Opp12e8iBYQZskoaHYRj3KbsziWVsOlc2:dZ5KaMrnsfqXkZMdYv8StZsHaHbsVe2 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav.dodger | 64.02 KB |
MD5:
89c09740faba625b2becb0452a4fa62a
SHA1: 0f5d194c3836c7794364509a778f5f28c98ccc0e SHA256: 5750a234354691d6d2bec6fdc2ff765a36473ce577616b5fa07a62666a69a938 SSDeep: 1536:LWMtrvzlHQNAtfHTJvIOlzJwOgictFLQoucM:LBvhQNAtfFvIUJngJLQo8 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav.dodger | 98.03 KB |
MD5:
c3b3659be7be25523ac0f8e950e02a63
SHA1: cb67f84f1cc292236ff21c6299cff3fdcd96971c SHA256: 5703c32ea671034edc94dae720cc37481dddf2cf0217e9beca5e3f8c671c6e81 SSDeep: 1536:8yy+VpBY2ecwjs+rS524PMKcluM+M/7lJQjGba+eJ2+EZGbtNWBz931179Jr:Y2Y29wZoMKmo/RJhEZGbtNWxx1xT |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav.dodger | 98.16 KB |
MD5:
db768a1089d9246a696823b435adc97d
SHA1: 0ba92064449f85b39b04d16e0e7c5d5a388271d3 SHA256: 06f5e3c8c52735c52e08947a1aecbcdaaf4e47ebd471e606208802486e3c180f SSDeep: 3072:hPJBee02dRggkX99vmb/LDHOnIEcyULRxa:dL02nKuDLDpjxa |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3.dodger | 60.12 KB |
MD5:
a5c7b8b2681c85ddcfa584b50aa367f7
SHA1: adc56f055ae3cb7f085286a62f59f6e9b304460e SHA256: b47fc90e97570d59f4a5697180d59a88d5eab663f3bcf3370f5774aa561acc71 SSDeep: 1536:lnD4J5eS3aAL+u4wZ51cF7HbQTpDAyBajfzMN/mMy3uQ7kU:lnkJ5jKALRBj1+7HMpkDzMN/ly3LkU |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3.dodger | 56.25 KB |
MD5:
2f5ebe6e5b5d5be9c760c19c63ed4b76
SHA1: 1ddddda35b8f6e313705302d874167117fd0bb2c SHA256: 4c4fcf57ef44a39c261bea1cddc83af652a4f63d992c4564704e43dbb2183eed SSDeep: 1536:ffJ4NzEZx8z1ineCEu2m4MSeYyDh5YUzpO4bcq2Bxt4EL:HJaEZxFJEbl2h/pOacd34EL |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav.dodger | 5.16 KB |
MD5:
5d43e485b45aa4156edf8ce88e8cb2d2
SHA1: e21fa66d5ccd9c047b139822647a2b8d70a53c89 SHA256: 263c77dd333d7c71f13269174a9bc18b392cd2af7768d4ca2a5923e2fe6db620 SSDeep: 96:7JijkrJHEJRObMRJzS1rhqPDzvjsCgc4HDiOE/Tw1ImuM48dhbfVKJQC:9eSSTRJzSnqrTwAIiOEE1bGOfVKJ9 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a.dodger | 97.19 KB |
MD5:
31a7d19f2cb41e7630c7360d60258432
SHA1: 98cc2d001b804cf610be4e2dd77192ff78e0cc2c SHA256: 775ce51ad0028595fcbf3cd6b3be46f122a91535f29659d3767c1e6a723f2011 SSDeep: 3072:0IYIMipgLWsz9KGU4ExKxN0iCetmjd4X+igsBUf7snx4:QIMips/ixKTFptmjdwtBUf7su |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav.dodger | 44.61 KB |
MD5:
d129773b62ccee6f2904c339bc1386ad
SHA1: 5a1dd2036fbd933e658eb4351cf4e2e7e221854d SHA256: dcfbdd071b9f4e147b5c4d64f41f7ec52a0568ec46bf50844802ea5d052faab6 SSDeep: 768:tTnZNujjviwS99e3smbrG41Zi+Ip0tWNdblfOulACfTtz8GxX:tTnZkjjviwiecmNZI5SGxX |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav.dodger | 86.77 KB |
MD5:
11b2ea9529f501fb269390d5b686d5c8
SHA1: 0f0fc6a6b7f8a8acf01431ed053035f02f75e15a SHA256: ece1d153288959c6589578ffbe21142ffb53e32aaed807c987b981e97546098d SSDeep: 1536:vTF+e9TWKtATqiSSrA1WGcGAsfsoR8Xz0Iyvn4M5exqtcIWnmt4/nAzcP8AR7eiY:rF+edPtATwnP7f+Xz0Iyv4Mwx63WhAzt |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav.dodger | 75.48 KB |
MD5:
c185de5c3d9ce791fbcc26683b19fbb0
SHA1: 8fa2330bb48f1b35ede27c41b0842c12fb9ea8e5 SHA256: 43e8838883aa55dfff95bba13639e36e8b204b62ad553e9501e6075d894e6630 SSDeep: 1536:Z8ouwatQHdji+opfbK6DOOugJQW7R5oBv3i/Enyd/EUgjTe7v:Z8BGj0fm6DOOugJL5oJqvEhQv |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3.dodger | 99.39 KB |
MD5:
e08d33e1f7f007cac614e500cf03e279
SHA1: 133beff916dbc8e7642892285546577a123bb027 SHA256: 242c45a5f647aafbec69460f9369ec527d28a65fb7c0783609de60d8dd4d8a9d SSDeep: 1536:1kpu5uRTwTbAL+Kfsex8W5z26lKkLWxErQGsSugNenPkH1WelHMwYYBshwxju:Ou5ITwT0+dex83PkLHQl1PqWel1PsOY |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3.dodger | 31.45 KB |
MD5:
201607f663301720e60edcf87e1a4558
SHA1: b0c6704fb49f6a24a97c7cd11ea8bc0670e615c0 SHA256: da45a64f4b6d4bd51c7f867b8f6d79aace675c8c432eb19d76b1ae16d63b3124 SSDeep: 768:z3Fs5XBfZzMKq3O3JGOzfiIOQCfRVLTQO2ixsI4:z3MtZ6O3AJIO9Rgixs7 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav.dodger | 10.67 KB |
MD5:
42a5b9efe644daedbf06f3c2e73f5ff2
SHA1: 8a3fb29d7ee468bc457d2f44e084540ec5530ea8 SHA256: 65dd3f9e25c0136cd447e1fafc4fbd9015574dbd4c053ca8f33f46633c170a8b SSDeep: 192:Zo5UuzV4CF6mB4sO5+hfp9S4VWnOl1k1pARkw8EfwCFvLi/Z+If:ZMU+qmBfhB9SMWOjk3AWw8EIk24If |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf.dodger | 97.94 KB |
MD5:
db6fdbf00e18308252d28fd36ddc55b0
SHA1: 3b38f23a32b8ed3f87753891315374b09b3e251f SHA256: 3ba57e684b56b3fce1544f10cfbbae239b9dc1949cf0a009fb3e005f4857824a SSDeep: 3072:vZDTeCEBrQQI8yS7HJ/apI7YcnyeigOV1bsZctEzuT8mH7Y9:teCEB8qyaHpam7ndcS6Szi8ms |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv.dodger | 36.73 KB |
MD5:
a26cac477ab4c2512d92c17ee7a9b775
SHA1: 9c2c692271251280c83a0a684555fba501b1c27c SHA256: 3e6bb512f3ad0634ad29392ef76d95a9b88077f1b94c3f740f95d0f4fd097250 SSDeep: 768:nilE97ibZe7RtjdyscdDXv7oIAYhe1tB1ePx2LsG02A8jiYQyy:SEUbZ8RwD/rIx1eA+Rt |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi.dodger | 84.66 KB |
MD5:
0bc19c0512b3120e67698b31d7b6bb58
SHA1: c5bcc717051197bcd24ab334c51f55dfb06c5bd3 SHA256: 37f928cb9f91d70ff97e0f42a4fe23cec1bb6f8732fddacaa16179242a3e81f8 SSDeep: 1536:6gTfDwlowOuFE0skWQ6hAZuhk1kPtZcB06ZgGlCe3OVUW3REVx2g4QBmQ7EOV9iF:6g4VOAZub3cBxZxsgOVUSC28w/OV93C |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf.dodger | 94.08 KB |
MD5:
a24052646c3b14be244b21e37bc557b3
SHA1: a062cf18b65b035b7aa7b25abb4902273325d04d SHA256: 54e6dae325ef87d0a5871f5e7529ce3f87c823cbf46be3bb579c96c00b9e4161 SSDeep: 1536:9p5zEQaXoWmjL4fXnDxgd3MIo5Be+8GYUGPFKQqKsQZDxP0MRkvEgagBAK/:9MyWgLEXDxgRge9DUwDZDxHRGEAKm |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv.dodger | 54.25 KB |
MD5:
52e00c6680704d55470265c70a412aaa
SHA1: a6237f8830eeae2c93eae246b1604b91ff483a3f SHA256: a73c03ad259e3660b9820c98199a35010b7ea888007f09aa6059e2137bf89551 SSDeep: 1536:8cVrC0sw+FD5xI2QFX1MuYTjSIDnntSLaNbGTPbE39yVNTg:7d+5HI2q1xYSQnxqTzE3MVNTg |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf.dodger | 89.02 KB |
MD5:
6962b5a9d5e41e6021aceec0da66a0aa
SHA1: 531fc27fea164b66cf232025b6522f4eaa6e227c SHA256: a56b91eb18cbb392a34463eef00b139c0b875cfb009922aa56fa03989f651122 SSDeep: 1536:nQPG7/GIAX5JVEx10n6v0V0xnwTN0yeWT+faef1upsy5uzz:nsWGI2+YY0GCN0BqFWsuzz |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi.dodger | 20.59 KB |
MD5:
7d9f760560487e238e73a44826ea0f98
SHA1: 722245e09f758c2643f79988cbb29a1ac0a5b166 SHA256: 582a5146851ec8daa31b5ccec0656f97f66965016c15d7cff704ff2e56539c65 SSDeep: 384:nqo27+rgjKHducOjRiGekZPTJ/SbtUBx9Hn8TQ2YLCRZ8CMFIM+Hf:n9NOj7BZl/Wc9H8NTIJIMYf |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv.dodger | 90.91 KB |
MD5:
1e09bcd0401e090923bca80799de3e34
SHA1: 62b4b4e3aa7321a012f5189e738d5dfc8d48bc5b SHA256: 7e33eb69fa3ee5fbcc89301a0f2b5ebc01d73997f38824ef1fc1a9077acdd59c SSDeep: 1536:64wFNYbyh4VMlgp5LHH0GBxMYSGDhUFsmRkd2StZFmAWSs5XTjB1OtoZ/37VuIPP:6/t4EG5Ln0UxM3aOCtZFmAbs5DjB1Mo5 |
|
|
| C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv.dodger | 92.14 KB |
MD5:
40fa444d9bdeae7ddd27153590765512
SHA1: 30356521ef29b4998c6afa01c3d5cfcd76021e39 SHA256: e6f7feb2a5e10c78a177ec486c024f4f48a5c46da559b125b874ac49cc511384 SSDeep: 1536:zhCjxGPH0UBP6Lyt4g5TmWW152PA7E0iW0meEIaOEgPIuoh0BvWjg0:zhCjQPH0Xyt4g5T3Y52PAniWZLQHo2WH |
|
|
Modified Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| c:\users\5p5nrgjn0js halpmcxz\appdata\local\gdipfontcachev1.dat | 106.27 KB |
MD5:
92e128dcb152d05f07faf5da64bd1c91
SHA1: 2174814ca563fc2b9679fffbf1b40bdf3ac9abec SHA256: 11437a99f5f9c0a6df09c64abc8828ad3ecd8cf4fa601340ded86b8945edff43 SSDeep: 768:i8HrbdvVyZHgTl7ho5sZWN/Ys9byFRQ+AwqGuGyZoVyOF7rrlqTIyMnm:/pVyZHgTl7h6tKR7AwqlGyZQVO1Mnm |
|
|
Host Behavior
File (1047)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4 | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat.dodger | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4 | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.dodger | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt | type = file_type |
|
2 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat.dodger | type = file_type |
|
2 | |
| Get Info | C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll | type = file_attributes |
|
1 | |
| Get Info | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | type = file_attributes |
|
1 | |
| Get Info | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | type = file_type |
|
2 | |
| Get Info | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | type = size, size_out = 0 |
|
1 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dodgeR.exe.config | type = file_attributes |
|
1 | |
| Get Info | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dodgeR.exe | type = file_attributes |
|
1 | |
| Get Info | C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll | type = file_attributes |
|
1 | |
| Get Info | C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll | type = file_attributes |
|
1 | |
| Get Info | C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll | type = file_attributes |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3 | size = 1048576, size_out = 46794 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav | size = 1048576, size_out = 37782 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav | size = 1048576, size_out = 21402 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a | size = 1048576, size_out = 46600 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a | size = 1048576, size_out = 26651 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav | size = 1048576, size_out = 12642 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3 | size = 1048576, size_out = 61959 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a | size = 1048576, size_out = 1208 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a | size = 1048576, size_out = 37096 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav | size = 1048576, size_out = 65506 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav | size = 1048576, size_out = 100338 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3 | size = 1048576, size_out = 28637 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini | size = 1048576, size_out = 504 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a | size = 1048576, size_out = 63860 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav | size = 1048576, size_out = 100467 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3 | size = 1048576, size_out = 40968 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3 | size = 1048576, size_out = 61528 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3 | size = 1048576, size_out = 57563 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3 | size = 1048576, size_out = 61847 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav | size = 1048576, size_out = 5245 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a | size = 1048576, size_out = 99479 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav | size = 1048576, size_out = 45636 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a | size = 1048576, size_out = 2766 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav | size = 1048576, size_out = 88802 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav | size = 1048576, size_out = 77255 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav | size = 1048576, size_out = 39411 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3 | size = 1048576, size_out = 43955 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3 | size = 1048576, size_out = 101731 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3 | size = 1048576, size_out = 47835 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3 | size = 1048576, size_out = 61536 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3 | size = 1048576, size_out = 32162 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3 | size = 1048576, size_out = 64257 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a | size = 1048576, size_out = 68459 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav | size = 1048576, size_out = 53775 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3 | size = 1048576, size_out = 79473 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a | size = 1048576, size_out = 53842 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav | size = 1048576, size_out = 10892 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3 | size = 1048576, size_out = 25746 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav | size = 1048576, size_out = 46558 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv | size = 1048576, size_out = 44716 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv | size = 1048576, size_out = 29642 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf | size = 1048576, size_out = 100247 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf | size = 1048576, size_out = 17273 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv | size = 1048576, size_out = 37580 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi | size = 1048576, size_out = 86646 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv | size = 1048576, size_out = 41972 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv | size = 1048576, size_out = 20173 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi | size = 1048576, size_out = 54278 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv | size = 1048576, size_out = 45354 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini | size = 1048576, size_out = 504 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4 | size = 1048576, size_out = 42841 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi | size = 1048576, size_out = 59804 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf | size = 1048576, size_out = 96292 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4 | size = 1048576, size_out = 26660 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf | size = 1048576, size_out = 14869 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf | size = 1048576, size_out = 57569 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv | size = 1048576, size_out = 12949 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv | size = 1048576, size_out = 55508 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf | size = 1048576, size_out = 91114 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi | size = 1048576, size_out = 21045 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf | size = 1048576, size_out = 88103 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi | size = 1048576, size_out = 93840 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv | size = 1048576, size_out = 93053 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv | size = 1048576, size_out = 41578 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf | size = 1048576, size_out = 14876 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv | size = 1048576, size_out = 94312 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv | size = 1048576, size_out = 27579 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv | size = 1048576, size_out = 82544 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4 | size = 1048576, size_out = 64052 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4 | size = 1048576, size_out = 46175 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv | size = 1048576, size_out = 46238 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi | size = 1048576, size_out = 67806 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv | size = 1048576, size_out = 45997 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv | size = 1048576, size_out = 34588 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi | size = 1048576, size_out = 61336 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi | size = 1048576, size_out = 90240 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4 | size = 1048576, size_out = 20925 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4 | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp | size = 1048576, size_out = 9869 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp | size = 1048576, size_out = 69232 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif | size = 1048576, size_out = 18769 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini | size = 1048576, size_out = 504 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp | size = 1048576, size_out = 1946 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png | size = 1048576, size_out = 40878 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp | size = 1048576, size_out = 9126 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png | size = 1048576, size_out = 34701 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png | size = 1048576, size_out = 99858 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png | size = 1048576, size_out = 78917 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg | size = 1048576, size_out = 46903 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg | size = 1048576, size_out = 91933 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp | size = 1048576, size_out = 64644 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif | size = 1048576, size_out = 24895 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg | size = 1048576, size_out = 12773 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp | size = 1048576, size_out = 40123 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg | size = 1048576, size_out = 87975 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png | size = 1048576, size_out = 70365 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif | size = 1048576, size_out = 38552 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif | size = 1048576, size_out = 65493 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt | size = 1048576, size_out = 83 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt | size = 1048576, size_out = 551 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt | size = 1048576, size_out = 241 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt | size = 1048576, size_out = 111 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt | size = 1048576, size_out = 110 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt | size = 1048576, size_out = 276 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt | size = 1048576, size_out = 86 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt | size = 1048576, size_out = 414 |
|
1 | |
| Read | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt | size = 1048576, size_out = 0 |
|
1 | |
| Read | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | size = 4096, size_out = 4096 |
|
8 | |
| Read | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | size = 4096, size_out = 3215 |
|
1 | |
| Read | C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config | size = 4096, size_out = 0 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | size = 4096 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | size = 42720 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | size = 4096 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | size = 17328 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a.dodger | size = 1248 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.dodger | size = 544 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a.dodger | size = 2800 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.dodger | size = 544 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.dodger | size = 544 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp.dodger | size = 1984 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif.dodger | size = 16 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt.dodger | size = 128 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt.dodger | size = 592 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt.dodger | size = 288 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.dodger | size = 144 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt.dodger | size = 144 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt.dodger | size = 320 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt.dodger | size = 128 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.dodger | size = 448 |
|
1 | |
| Write | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat.dodger | size = 32 |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\0GSS2pIG-FCGyMf5ynVp.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\1rBJsiJc7n-2TrMkvT.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\2e6rAsns_zYGX6aZT5c.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\4XakGRkT7R6d.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5gJYdoam.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\5YUq.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\6W0oP.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\8l9nPH.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\9lzLROC_itHxOVAM c.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\AiUwCYSq2DBg8.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\as_u7u3Naf.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\cHTWUGxd.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fgmTG1k5Fqm6jsN.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FiCoDsv0LmB.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\FmXWb2.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\fYsD3rBnwgJVxN.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\hdqVR.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\imNqLih_Kno_x.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\JbmC.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Jzkr8GTlfZDRrYa.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Kgs0mg0EI5pH_k.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Koraf6bwzsJcp9pvvN.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\KTgl3-hwbd.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\lhsOaTbFNUM.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\nG4EKCKOGV.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\p2rVuoiV_G.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Pcve.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\pU4PisOqAA0nY0_J.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qCsHfRBfORNQGvNfE.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\qK_ycgpMjyOJC-a5zY.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\rc_eSF4kX9uWqlJAz.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\RHhgfjYwnm6OTQ_QV6-a.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\SLqq.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\tL0zYxt-HzJVKltX NR.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ut1G4sNm7zHN.m4a | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\X7GdMgqd9OB.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\Ygf014KM.mp3 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Music\z4dN-aGOn1_JqH8Ovn.wav | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0_kcLs9lHdDqfHO.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3SP_0vvJ1rl7trKVv.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3T3kOQ _9EyjiI.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\3vzfdCo0YBk-_L.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5UjX_IOueokI5AX71.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6oqjZhxpAjO9C.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6ZQM82OxC.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aKnwbsQ625vK__yE.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\aVh4Wb52Mw6Y4ZF4.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cU1sAmECo.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\eoOzSBRLPr z2e.mp4 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gfd5RF4ubH7-JrhylP.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hR3R_RNR3NbPy.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hrmmKZv8Ds.mp4 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITz5.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\j4HAbIdZkv93DOwFVO8z.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\JD0y8xPCl.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kfXUm4XMpkpfEgGUcc.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\lHwgcR_.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ljelyX5CU1r3-Nmjg.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LuUnWw2.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LzGhcu4X09-ZOA.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\OZS8W.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\POQptpno0gROlDwmE.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qfQA_r8QPMG8R4E.swf | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SfPCbu1X3acjzYVSJcQK.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Sx5Cg4WyprGxdC_XqxsJ.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ve0rAZeJqb-I uCvw.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ViLBP8m.mp4 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVvmVvj0xYEsBk.mp4 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WLnvMP.mkv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\X3ZqV.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\xhG3O G-vh88.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XZ1BSPDTdxfeM4alYv.flv | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YBRXXkrE1p.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_Gf1UnVQ2UidV.avi | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Videos\_QkMFuwy-_kr.mp4 | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\06I2itq0.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\19S0c o6g-CcTSIaPF.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\3K2UsQ0C.gif | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoCoQlsajl.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\FS0ZhpecYN.png | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\H2eUx4iuEm.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iT--EnT2MGF9VY2N8.png | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\J5F ZFHj-IICF1NA2pAk.png | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\K khafWFO.png | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\KRLL.jpg | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\kVVjvlYe25.jpg | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\L9yWN2g1.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\M6uTV0IH94Cakld94.gif | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oIeHX5ZD.jpg | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\qyADx8u3_QZWVEC.bmp | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\UPy9g.jpg | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\uQCyHv224.png | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Xi_JsagGTsP-D.gif | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ZR3GS.gif | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[1].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@adobe[3].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@demdex[1].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@everesttech[1].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@google[2].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@ml314[1].txt | - |
|
1 | |
| Delete | C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\5p5nrgjn0js_halpmcxz@rlcdn[2].txt | - |
|
1 |
Registry (5)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | - |
|
1 | |
| Open Key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\XML | - |
|
1 | |
| Open Key | HKEY_CURRENT_USER\SOFTWARE\Microsoft\.NETFramework\XML | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | value_name = DbgJITDebugLaunchSetting, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | value_name = DbgManagedDebugger, type = REG_NONE |
|
1 |
Module (113)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Load | comctl32.dll | base_address = 0x73e70000 |
|
1 | |
| Load | comctl32.dll | base_address = 0x73cd0000 |
|
1 | |
| Get Handle | comctl32.dll | base_address = 0x0 |
|
2 | |
| Get Handle | c:\windows\syswow64\user32.dll | base_address = 0x74f40000 |
|
1 | |
| Get Handle | c:\users\5p5nrgjn0js halpmcxz\desktop\dodger.exe | base_address = 0x11b0000 |
|
20 | |
| Get Handle | c:\windows\microsoft.net\assembly\gac_msil\system.windows.forms\v4.0_4.0.0.0__b77a5c561934e089\system.windows.forms.dll | base_address = 0x73e70000 |
|
19 | |
| Get Handle | c:\windows\microsoft.net\assembly\gac_msil\system.windows.forms\v4.0_4.0.0.0__b77a5c561934e089\system.windows.forms.dll | base_address = 0x73cd0000 |
|
31 | |
| Get Handle | c:\windows\syswow64\shell32.dll | base_address = 0x75fd0000 |
|
37 | |
| Get Address | c:\windows\syswow64\user32.dll | function = DefWindowProcW, address_out = 0x771625dd |
|
1 |
Window (92)
| Operation | Window Name | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | .NET-BroadcastEventWindow.4.0.0.0.141b42a.0 | class_name = .NET-BroadcastEventWindow.4.0.0.0.141b42a.0, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | SUPPORT | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | Oh no! Looks like your files are screwed now... There is nothing much to do about it... It's your own fault. | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | WindowsFormsParkingWindow | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | &Details | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | &Continue | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | &Quit | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.IO.IOException: The process cannot access the file 'C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat' because it is being used by another process. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at dodgeR.Form1.Form1_Load(Object sender, EventArgs e) at System.Windows.Forms.Form.OnLoad(EventArgs e) at System.Windows.Forms.Form.OnCreateControl() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ************** Loaded Assemblies ************** mscorlib Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll ---------------------------------------- dodgeR Assembly Version: 1.0.0.0 Win32 Version: 1.0.0.0 CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/dodgeR.exe ---------------------------------------- System.Windows.Forms Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll ---------------------------------------- System Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- System.Drawing Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: <configuration> <system.windows.forms jitDebugging="true" /> </configuration> When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box. | class_name = WindowsForms10.EDIT.app.0.141b42a_r14_ad1, wndproc_parameter = 0 |
|
1 | |
| Create | - | - |
|
37 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 4065294 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 4065414 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, index = -4, new_long = 4065494 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -8, new_long = 197068 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -8, new_long = 197068 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -16, new_long = 33619968 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -20, new_long = 65536 |
|
1 | |
| Set Attribute | SUPPORT | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 1942992021 |
|
1 | |
| Set Attribute | SUPPORT | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 4065574 |
|
1 | |
| Set Attribute | SUPPORT | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -12, new_long = 197058 |
|
1 | |
| Set Attribute | Oh no! Looks like your files are screwed now... There is nothing much to do about it... It's your own fault. | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 1942927561 |
|
1 | |
| Set Attribute | Oh no! Looks like your files are screwed now... There is nothing much to do about it... It's your own fault. | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 4065654 |
|
1 | |
| Set Attribute | Oh no! Looks like your files are screwed now... There is nothing much to do about it... It's your own fault. | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -12, new_long = 197060 |
|
1 | |
| Set Attribute | WindowsFormsParkingWindow | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | WindowsFormsParkingWindow | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 4065734 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 1942927561 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 4065774 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -12, new_long = 1638864 |
|
1 | |
| Set Attribute | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 4066966 |
|
1 | |
| Set Attribute | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -8, new_long = 0 |
|
1 | |
| Set Attribute | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -16, new_long = 46661632 |
|
1 | |
| Set Attribute | Microsoft .NET Framework | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -20, new_long = 327681 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 4067006 |
|
1 | |
| Set Attribute | - | class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -12, new_long = 197054 |
|
1 | |
| Set Attribute | &Details | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 1942992021 |
|
1 | |
| Set Attribute | &Details | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 4110158 |
|
1 | |
| Set Attribute | &Details | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -12, new_long = 197076 |
|
1 | |
| Set Attribute | &Continue | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 1942992021 |
|
1 | |
| Set Attribute | &Continue | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 4110222 |
|
1 | |
| Set Attribute | &Continue | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -12, new_long = 131588 |
|
1 | |
| Set Attribute | &Quit | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 1942992021 |
|
1 | |
| Set Attribute | &Quit | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -4, new_long = 4110262 |
|
1 | |
| Set Attribute | &Quit | class_name = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1, index = -12, new_long = 131586 |
|
1 | |
| Set Attribute | See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.IO.IOException: The process cannot access the file 'C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat' because it is being used by another process. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at dodgeR.Form1.Form1_Load(Object sender, EventArgs e) at System.Windows.Forms.Form.OnLoad(EventArgs e) at System.Windows.Forms.Form.OnCreateControl() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ************** Loaded Assemblies ************** mscorlib Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll ---------------------------------------- dodgeR Assembly Version: 1.0.0.0 Win32 Version: 1.0.0.0 CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/dodgeR.exe ---------------------------------------- System.Windows.Forms Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll ---------------------------------------- System Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- System.Drawing Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: <configuration> <system.windows.forms jitDebugging="true" /> </configuration> When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box. | class_name = WindowsForms10.EDIT.app.0.141b42a_r14_ad1, index = -4, new_long = 1942854096 |
|
1 | |
| Set Attribute | See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.IO.IOException: The process cannot access the file 'C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat' because it is being used by another process. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at dodgeR.Form1.Form1_Load(Object sender, EventArgs e) at System.Windows.Forms.Form.OnLoad(EventArgs e) at System.Windows.Forms.Form.OnCreateControl() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ************** Loaded Assemblies ************** mscorlib Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll ---------------------------------------- dodgeR Assembly Version: 1.0.0.0 Win32 Version: 1.0.0.0 CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/dodgeR.exe ---------------------------------------- System.Windows.Forms Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll ---------------------------------------- System Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- System.Drawing Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: <configuration> <system.windows.forms jitDebugging="true" /> </configuration> When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box. | class_name = WindowsForms10.EDIT.app.0.141b42a_r14_ad1, index = -4, new_long = 4110342 |
|
1 | |
| Set Attribute | See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.IO.IOException: The process cannot access the file 'C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Cookies\index.dat' because it is being used by another process. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at dodgeR.Form1.Form1_Load(Object sender, EventArgs e) at System.Windows.Forms.Form.OnLoad(EventArgs e) at System.Windows.Forms.Form.OnCreateControl() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ************** Loaded Assemblies ************** mscorlib Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll ---------------------------------------- dodgeR Assembly Version: 1.0.0.0 Win32 Version: 1.0.0.0 CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/dodgeR.exe ---------------------------------------- System.Windows.Forms Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll ---------------------------------------- System Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- System.Drawing Assembly Version: 4.0.0.0 Win32 Version: 4.6.81.0 built by: NETFXREL2 CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: <configuration> <system.windows.forms jitDebugging="true" /> </configuration> When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box. | class_name = WindowsForms10.EDIT.app.0.141b42a_r14_ad1, index = -12, new_long = 131542 |
|
1 |
Keyboard (1146)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Info | type = KB_LOCALE_ID, os_tid = 0, result_out = 67699721 |
|
192 | |
| Read | virtual_key_code = VK_RBUTTON, result_out = 0 |
|
191 | |
| Read | virtual_key_code = VK_MBUTTON, result_out = 0 |
|
191 | |
| Read | virtual_key_code = VK_XBUTTON1, result_out = 0 |
|
191 | |
| Read | virtual_key_code = VK_XBUTTON2, result_out = 0 |
|
191 | |
| Read | virtual_key_code = VK_LBUTTON, result_out = -127 |
|
114 | |
| Read | virtual_key_code = VK_LBUTTON, result_out = 1 |
|
1 | |
| Read | virtual_key_code = VK_LBUTTON, result_out = 0 |
|
75 |
System (600)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get window text | window_text = 4056272 |
|
1 | |
| Get window text | window_text = 4056464 |
|
1 | |
| Get window text | window_text = 4057868 |
|
1 | |
| Get window text | window_text = 4055188 |
|
1 | |
| Get window text | window_text = 4057672 |
|
1 | |
| Get window text | window_text = 4057668 |
|
1 | |
| Get window text | window_text = 4057400 |
|
2 | |
| Get window text | window_text = 4054068 |
|
1 | |
| Get window text | window_text = 4056432 |
|
1 | |
| Get window text | window_text = 4056516 |
|
1 | |
| Get window text | window_text = 4056348 |
|
1 | |
| Get window text | window_text = 4056440 |
|
2 | |
| Get window text | window_text = 4054040 |
|
1 | |
| Get window text | window_text = 4053944 |
|
2 | |
| Get window text | window_text = 4056748 |
|
1 | |
| Get window text | window_text = 4056800 |
|
1 | |
| Get window text | window_text = 4055732 |
|
1 | |
| Get window text | window_text = 4912888 |
|
2 | |
| Get window text | window_text = 4057928 |
|
1 | |
| Get window text | window_text = 4058620 |
|
1 | |
| Get window text | window_text = 4057760 |
|
1 | |
| Get window text | window_text = 4056216 |
|
40 | |
| Get window text | window_text = 4056120 |
|
80 | |
| Get window text | window_text = 4056204 |
|
37 | |
| Get window text | window_text = 4056108 |
|
74 | |
| Get window text | window_text = 4057516 |
|
2 | |
| Get window text | window_text = 4055452 |
|
37 | |
| Get window text | window_text = 4055356 |
|
74 | |
| Get window text | window_text = 4054400 |
|
37 | |
| Get window text | window_text = 4054304 |
|
74 | |
| Get window text | window_text = 4054412 |
|
37 | |
| Get window text | window_text = 4054316 |
|
74 | |
| Get Cursor | x_out = 200, y_out = 193 |
|
4 | |
| Get Cursor | x_out = 869, y_out = 835 |
|
5 |
