894aa842...6f4e | Grouped Behavior
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Wiper, Trojan

Monitored Processes

Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x9ac Analysis Target High (Elevated) noitidetsrif.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\noitidetsrif.exe" -

Behavior Information - Grouped by Category

Process #1: noitidetsrif.exe
980 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\noitidetsrif.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\noitidetsrif.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:27, Reason: Analysis Target
Unmonitor End Time: 00:04:27, Reason: Terminated by Timeout
Monitor Duration 00:04:00
OS Process Information
»
Information Value
PID 0x9ac
Parent PID 0x45c (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 9B0
0x 9B4
0x 9B8
0x 9BC
0x 9C8
0x A54
0x A64
0x AC0
0x AC4
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points AV YARA Actions
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747B1910, 0x747B24A8, ... False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747B1918 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747CA604 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C35F0 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747B326C False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C922C False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C0007 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747BC88C, 0x7487C78C, ... False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C705C False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747BEAE0, 0x747C4000 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x74878B90, 0x747CB06C False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C8D4C False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x74893294, 0x74892AAC False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747CC000 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C6410 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C56B0 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C1364, 0x74879480, ... False False
buffer 0x04BF1000 0x04BF1FFF First Execution - 32-bit 0x04BF1206 False False
buffer 0x00242000 0x00242FFF First Execution - 32-bit 0x00242EE0 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C1690, 0x747BF920, ... False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747B1988, 0x747BE858 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747B32AC, 0x747C922C, ... False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C23D0 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C5970, 0x747C4090 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747CC528 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747CAEBC, 0x747C3FD0 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C6820, 0x747C8F10 False False
system.drawing.ni.dll 0x74780000 0x7490CFFF Content Changed - 32-bit 0x747C68D8, 0x747C7954, ... False False
Dropped Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra 70.39 KB MD5: abe518446df42340ed143f849ab53ae3
SHA1: 733b870627530cf511ddbcaa0c8e441064a869a4
SHA256: cbaf8957eb26662aa6d7be4c302e3fd95cfdddf7f93e205b97317d3a08737117
SSDeep: 1536:QytV7MZ42iycOolItPJHn7YBxb640XafdfaFn9gbx7WhjPtBUF/sL:QcV7MZ42iyTolCt7YTV0XaFfabhlP7U2
False
C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.litra 544 bytes MD5: 60c1ec16c0004c15963d8a942ccd6d06
SHA1: d9a7f89ecebbb46c95ee8314f393f031f40eeb7c
SHA256: f5567206ac112b4b7435287093865f6d95703d66461ca7adeff65a5ca4ca2005
SSDeep: 12:+vIhIlvQzRA5DwrWNFlmN7pn7JgOb3LuRFJtRdAS1K:+QhI1QzRARwrf7+O7OFgSk
False
C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3.litra 5.73 KB MD5: aa0fcbfd18eb8780d49f53faadfb62aa
SHA1: 4a829e2fc50b41203f31716be970126571e2fe69
SHA256: c34d4feeb03a4d7fe10906934ad48b1f560dbb72615abb609ad26fb468db40a4
SSDeep: 96:uKpQpZGUWuK7zuSYYAow4G70BUvUZOr/bvuvV72zzb75h4ecbNhdm:uKOSUWL7zbN7wfUcuo3HN
False
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav.litra 47.25 KB MD5: 432a1c70391a77a24a615aef7fc17a11
SHA1: 715fb8dde078b024e8e9c0337d83f2aa9621ade6
SHA256: d41790dd5168390e52d1aaf1192850655025f209095babdbd35b9480c371ae9c
SSDeep: 768:Llvdn1OF33gqIMj6RO1JhIYe9VKxVkdquAhjjbTf27zdehMyddyOPG3KEgcfn:Rv1QdNIR8DqY6UvhZbL2FeTd6Vgs
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.litra 544 bytes MD5: adad5b76c60d00b06e44f7ecf1174f87
SHA1: 2aecc9dc35e6184ef288d5636764131b7fe8b100
SHA256: c1b1c4c5e792182cdb61261b1d4945f477055fcbdf26c08d651c85abf270cea1
SSDeep: 12:8v4idLuN7mwJG2KyIzMCK9KDPQjAJy8Ib0Jj9yDnp95V:8Auw6yGMCKYxy8/9yDnp95V
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif.litra 8.23 KB MD5: e9d8530de075134e9ff289c5046c9969
SHA1: 3d988ecf754a5f0db3a04fd0fb73fb631109bf3f
SHA256: 6a8b21c994414263b86d21e43d12fcc47856b08e909a00ae43bf99d1a8cc22df
SSDeep: 192:8DPiUwfjkSV8/ePCeWAfHV3qegYsfNU6fP7W+08klRU94tPHrUeLQcD:uqUOjv8WPQAfVNGfP7Wd894tPLUeLL
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif.litra 10.00 KB MD5: a4bbfee1a368a4c36cd4014afc425a35
SHA1: 10b903d6b4b1a771148be9fa21e2fc1a0313c542
SHA256: cec1f609dbc6beccdffa1909c724a757b3cd54dd39581e39b037ebfbc9ec4fa4
SSDeep: 192:KAaJ4HanvTi90N1O0/DII00423iAemAXNu3b5oakZnPxGw2x1WCv:KAaJZbJ1bcI0p8iAemAXNt9kBv
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra 87.00 KB MD5: 870117a7033f2742e8ea9b54d0c85069
SHA1: 09c763325267eb52ef46062746510f2d0fd4ba0c
SHA256: ed2703068ed379d5f5fb24590f490d7c556a2a60ad16cbac22bfde9b126f8460
SSDeep: 1536:CgRz3oA/g6guk8PuCL8XgK0ntrEO4Rt+IQewPa1DKiEszrAjJvm10OHtz:b3do6g8QgK0n2Rt8aKiEoUdvQdJ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra 93.22 KB MD5: b528deb6d618d4788926349d9bda7b10
SHA1: d621926639659f554aed97d7fb47dd9506e4a3cd
SHA256: 43cf80bc7830a26953213889e721f5881838876c950e250389962982a62ede9b
SSDeep: 1536:CI8DsMgcQyBjC34e/PiAu6ndhZHHR92N6XkvHY8ia/6fMISJQcH7lUP2YlAiGa:C9DsIQyxa/Pir6nbZnP2QXkv48VVTJtY
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif.litra 59.56 KB MD5: 092f62cd5d323ae0c05bfe29e2a4fdf3
SHA1: 281c933208c362da64f56a07d8dcdafc0038ed88
SHA256: 334da399885411d95546fe9d976740b79524bdcc0dc96e2f5668327be4934712
SSDeep: 1536:pbusmqtCXmIY2kEeXT3NYG3EmgRBn4zwvs:pJtf72G0mqB4zwU
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif.litra 55.11 KB MD5: 0d2561c21bcb582379357fffc28feae1
SHA1: 085fd5aadb5a72072412a94efcadbac7e9dd0eb2
SHA256: bfdb972f636a37da69dd75a724de18b3121ac67cdbb9f7649818578fdacb66ad
SSDeep: 1536:Q77LB4whDJ2Jr6MO8qnGNJMGDnmXDYEpocX:Q77LB4wyZRqMlDnmDY4X
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra 97.95 KB MD5: 2b1e222547f1f121dc889cc26e815422
SHA1: 9cb87f2a27c18d58d030e7abfd91942da1fa5f67
SHA256: 3a106a1b9b590f41ded4565de06dc011a28775886aa1ece731fa62b9e84cfb1a
SSDeep: 1536:2UDdXM/QxthE/wtvsO6SquxLNWNPXiSlJj1RCDUP5sVj/Yr5cc2lxi7YT:a/QxJsH+LkNPblQDI5olLGYT
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls.litra 50.23 KB MD5: 2f49568854e77fdfcea54e27a3a32cf8
SHA1: 82dbadf0c561111711c1f1a689e7e5aff86dec15
SHA256: 62bdbb1a75646d00e62542487886b79c87073b399e2ab2be00d6656037ce8964
SSDeep: 1536:pukSK7GnkM/MCIjmbtipcANnEq6nOK+u7liE:pPSKkkAsjmbguA+5nsklR
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv.litra 60.41 KB MD5: 6ee161e58b11674afbcb3798db21dcd6
SHA1: efd16080578074cd7d6de8870dd0a1a5d1456b82
SHA256: e87c8268a29ebbf4d960b7b4eb11df683764efae6e94fcf3ba6c37dda466ed9e
SSDeep: 1536:eKygAPpZHPxDBCzVZHwUxiStMNFYG8LjBBUZjEeB0etpTWdwbl:hXwpZvxD0zVZqSCYdL8QA0etpTWep
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra 70.72 KB MD5: b34c8f83afe37670a637beebd6dc02e2
SHA1: cd290eb833e88b856a95b474fed42dc90b515909
SHA256: 94e78c5110c645dcde441d525fa60dc0dc8f5ec25be7293e514d6bd40d2326cd
SSDeep: 1536:H7HvExnzBnW2omylNYUV+1188qEYPbYNe/igiB7BLMgH3+5XF6Vs1:HjQFMmzJqqYPkzgG7BLMg+5QVs1
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav.litra 78.38 KB MD5: 1b2783730db8fe8a1b9ea657f15fb729
SHA1: 8a9cf75a6d23df6234b08ed3c37341343eaed67f
SHA256: 843d822e3faaab82234dcb4879140a80c1ea7b7a1523cfc50deaf6cc93463859
SSDeep: 1536:Aq0O+f4OX4Co7NdWOUqC0L2z8F2zn0Hm6RTad4+dbEe+DUXqRgMZyR:AA+QTNdWDD0Ly9n0G6R24+r2AOgMgR
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif.litra 71.55 KB MD5: 8196170ec225ec7b535d9048f86d6272
SHA1: 8f20c63a8c1983503fb4f028f5beb4fedf53143f
SHA256: 976eca040f5b41c22f56c0291118450d98acb4523c2a6eee21fce789292ffc00
SSDeep: 1536:bUnRs1W0HjI5v7yMz9JdCL/niPikbDu5ZFDCUfMPWPy/:bB1hHkdJmviPigDubJRfWWP4
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp.litra 42.91 KB MD5: 34c13def47583f67da29216be2e5ca73
SHA1: 84282a86a47d3028608f3166cd54faf3ddb0f5e4
SHA256: b655494cade38efb3cf1454ee4e2166c7b3c152b4fbf0970e8d7a5bf65511d3e
SSDeep: 768:Ufr8DKkqvTQEJ+5rzTeKtCOgm1LdUklx+uFLyE80GE2MYt8hLagYpP3imOR9dI:UfgekqbQdHT9CHmXD80h2MYt8pag+32u
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv.litra 26.58 KB MD5: 96e0577c0d87043dcfe8c069e70749a1
SHA1: a4621e381175c6ca9818b723601a8bd3198d9e60
SHA256: 22f8ee6c516b3d53d13fa346aea071e8dfe661fcf6e3690d242db56f3e65ed51
SSDeep: 768:XoV5g4APXQcze8gPpkvnUvHTaaEfZuKCuMX1EWdXJud9u9Bes:Q8PSPpk8Ta/fZuJuwagXJuq9/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv.litra 67.11 KB MD5: 67bdda5257d1eea6174ea532e9d0a201
SHA1: 81afa84568b6b2e8f2c0b3b93dc86a0955206a9d
SHA256: 23e10eee1646d18092690ee13ab473a6e0a0848d86978f2fbbfd975bb53398d3
SSDeep: 1536:Xn/MEGtD91dfG3Hk8wDgn4Xrvy6d2m5xMaWtK0c+KszdahxqO:vMECjdfDg4XW6d2m5E80Ey8hr
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra 74.44 KB MD5: 1c5b5039dfdba5a2ba4430d00daac02c
SHA1: 5a06a8468ebd37b09e9eb00661bf345497dfd416
SHA256: 98c27e21fbf17a81d064cbbb63bf6513289b112a4d3693930ee32a6bc7d7cdcf
SSDeep: 1536:6L+jNWUdsu5Pz/Mc+37E/ZFbALb6UcNgCktcQPjszEEVBKYNIF3qKhL:6LQNTdsc0UebbpCkyCsgZk6B
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv.litra 71.31 KB MD5: bc744c3f07939e22ed1b5e91e02c9efd
SHA1: 04b422c5d9e5763885e892e0ca664e5056bf770c
SHA256: 25db404e6455c35ae43be7f353755739f3dff18738a7ceefcbd79de2b1057ddb
SSDeep: 1536:he11pChHsukucSXWRLbPsiKt7wN5p/LccBcFoFtrx0d/EPWd6/1:W/CDkuNXWRPsigwN5pwGcFoFtrxC/SWy
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini.litra 320 bytes MD5: c63fce43df2a849910b4a9dafde0fd77
SHA1: a2fddca39880ce5b865b291acd4c61c7b119abf9
SHA256: 5263862868df341ea9ae5a909862fe35d9ebf7f3a5a13adec7818040379c24cb
SSDeep: 6:BuI1XwoiCVNToRjhUh8VlJPvZCUp2vfS8Hi2ig9IYGJb4teemGOnhDTz:BRpsCVChe8xFwHK1mIYGp4JChHz
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif.litra 65.59 KB MD5: ee4f876bfe970754358f2dce20039765
SHA1: 20c675398195d46b079bffe52e94664f07c5e54e
SHA256: 7e2bda99339ad1feec1e218e287dc19c42abc91d7ae889c0c69b933ca65bceca
SSDeep: 1536:xNbgiy1+OXJUrbpBQupi5z5LugiJOSOrUt7nqIbkZaxT2XPJT:xNSMOXJUrVOLugsOYlbRToT
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg.litra 8.44 KB MD5: 0ec1b73681deadff3e6d28d554254a7b
SHA1: aef48d3985c2858c35f5691edd018721e547bc8f
SHA256: b0497834daae14ac9f54c5015a6348c2189e85b68a413304846001e643065bc0
SSDeep: 192:TprFxtrFR2BY1RrUDID2kznD7iSUPZDBKZetiTa/phlhSnEsWxxn1:TprFn++15U7kruTKZ+N/pDxxn1
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp.litra 54.73 KB MD5: 9a8c85901ccce073d8e1838e30d4e7b5
SHA1: bc1722c23343f7a989fc8296d3a896357122b58d
SHA256: d2de393f5b671cdeaa57a0443b254733ace4ef499859f5bf595512842f73c9e5
SSDeep: 1536:MUDOou2YuAkv9IIhtm32xZqGAR4e8B4j6fPeJMU8GM3:MEZ9YuAkIIht1kRqqj6+JMUS3
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra 61.02 KB MD5: c78fa40e6bc0201f31f0ccbda7cc6695
SHA1: 4644b2265164e05d56d229720bb1d16fc1bb24e4
SHA256: 901e59919791c3a3c4938e09ebf7f4fe1058844520f96c62a4ba1f41da51b63e
SSDeep: 1536:QZhsHbrq+/50HAGL9QQU0JCBUPvF5cmguhTZJHWqP1NIXP/:QZhcbGkatC0JCSHMulZP1NOH
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv.litra 66.97 KB MD5: f78b37de5559f80199c8f4cd806ff790
SHA1: f7f60b516d71662c8745660edb9b821c13b583ae
SHA256: 77ef5fee82eb58d0b0c36c6fe40f00b5ed6ca8d164760da9eb3b8a2dc951ae80
SSDeep: 1536:pxtLB9L6TgMS4Hd4JRxT5Rs/so5O7Wjxm+LN2LuX:DFL6TgMt94JRx1RQso5iQNQuX
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods.litra 71.91 KB MD5: f9dd74a0d37fd5a081d3960f68ec736d
SHA1: 410c835506ec7ec5e8fc7008c41d72ceb945c04f
SHA256: 6cea87c8770ac4210d022f1b0422157251c6eb3721d9d0ba3edcdc1b048a653a
SSDeep: 1536:QYobv8tWepDpnu7OW+ebuM/NrSdXvfxPmjcL61XfcQKaol:IvBepDxlW+if/NWRBujcL69UQKr
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx.litra 53.98 KB MD5: a486e1725b65f881f35263e8fe37e26b
SHA1: 5499e1e1c35241ade47cfb133578127c7e20938d
SHA256: 086c54623871acd201b339a6f2d43e9130f2fa3e021bfd5c691df606de3e1713
SSDeep: 1536:cAWhDWitCk2aVydF1Dme2k60NltvQRBdN/dZIHkqnruJj:cHDWiyD1Dck60VSBdNlZExnyJj
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp.litra 32.84 KB MD5: 2166f813ed079b0d9914b7fee5508564
SHA1: 43b04fe2e4856110e171e7f9958b6da5f53920b7
SHA256: 299998d82fff65c74f261b27ed4742e6aaffa56d4bfdeb13fb74485ff8e6db6b
SSDeep: 768:nRDhZXVQ6CARi0tod3tb4SS6XUuTpzsIh19Twp16PZHNl:nRDh7zCAKdadiUulj166tj
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra 83.83 KB MD5: 07ac18c28a98cbb14f4efd1739790eec
SHA1: 51f59e756ed0abb072d2ee8848cdcf72ca5b0e48
SHA256: 3372c65410dea56df3f1fde49974157c5b62d76de620fbfce0c6888ff6327dea
SSDeep: 1536:EZc7Wf8N/AQr9Uxn0vp+h0P5/XMKalM6SBQzNFfqq9ijLH/QV1BjiQa:EeWf8CW9Uxn6p++P5BnF8N5qqfVb+
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png.litra 63.06 KB MD5: 59e5e69935f5dedc21bb355749d82980
SHA1: 85242b2ee2310a13be3884b8fef8be51fff2c683
SHA256: 9bf891b84ae85daa2eb28f940095460ceaeb97d3c2538bf850ce3af1a687a96f
SSDeep: 1536:/l8VX4QNvES5JS5q9W1uX/WTvQtMvAJRtfS7Lg+EBrNGnZiTlTMoN:N8VxtESXS5qM1uX/W0tBfSYTrNxWe
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf.litra 92.03 KB MD5: 4b3f20a313855a958eb0312be3933846
SHA1: bc5e3d4bd9233b915c43f7493589c9ea37f3de1d
SHA256: 673f91728d2f4286710cd54db26b0858117e22ec4cc7456dade0f1a1f40113cc
SSDeep: 1536:LyGL2vH4FVhzBsOdmniAqapGloN6uQniglUPq8kK4gQ60h70cRiwRfD:LyugEPd4KaQCVkinNwRD
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp.litra 45.36 KB MD5: d1b75b41dcbd187cbbd7fada987b5170
SHA1: f96d8c9a435e2dedcffe475bfbe0f1425b7dcb3b
SHA256: c5dc2ab978cf4453520ce435385435c50c77d8dd023f15a8b40a3f3e54ed3557
SSDeep: 768:pVQ4HplK8ls3qhhiP8OPTeFMRM3RRvVKfQTjy1mRoMW7o3Ov6DNh7YIvowykwn:pVD/K8ls3qhg84eF24RRvsIXyGotjqhW
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra 22.67 KB MD5: fdfe6cb8c3b4cc3b8338625756e3a3fb
SHA1: a9482c8ab7e684add337871ca25268df5cec078d
SHA256: c89f79de5875973008a0d048af15bb332ad33087861250e4eb27d6a4d195b555
SSDeep: 384:QwLJqDEWDs6jOMZLALQ3AJuVseXSPjOni8Ow7itxY6FBgrLMOL4JuSo6MG+:3NqW6KoLmQ3AJuVse2spciL3LOudzz
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp.litra 57.91 KB MD5: d55f4797cd9025d109b01d58792c23f3
SHA1: be704723870c0a8ffef39389e5ce84abf607c750
SHA256: 6ed0a4d3f68301640ee53709e38a017311f3c5f4fe5def38cd02a97b055e081e
SSDeep: 768:2b/XuKIZ+Uf7VK6tLVadb0Z8EkYG3qnetaLyPLRib0XqAX4nbx01eq80p/THYlk5:I/X5UjVK6WdAA3ftaLy04sW/D4k0oh
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv.litra 42.30 KB MD5: 873439976ba6170ee9ca3d5086c0a0de
SHA1: d1e2be67b8c61d69bba2a397625d85f026a2232c
SHA256: 30cb6240d355ceece8cc22c76cb83beb7f21138bd56b44175141717e86e261ff
SSDeep: 768:6R3TbRzmBvCAPcIk01Sh9mNSdvBtSIkSOXzu6Tb0AYYpndkTzU+Mcl:6R3vR65C8q01KGS9P5IdTb0jYNOTzlF
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp.litra 63.84 KB MD5: 1719df56be9d525fc951666f1dc600af
SHA1: 945655ad0833033ec913f25448c46282ccced3a8
SHA256: 1b6c8ff2755f85591fa1b14090d242d3651472ac64e5c28322fdbb2f4e562b43
SSDeep: 1536:6TNBfRBJmuhdPu1Xgbrfovv0RCih1lfSqjdUUOeO5:ullnovv0RR3Yqj2UOj5
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra 66.98 KB MD5: cbba56c83a356ec3c655ed6ffd1a4cc0
SHA1: dc8b768dbb838dfb6a77533265c6e0545605d4cb
SHA256: 73bf15bf971f4bb93af4f4a3b3fc927e8c8816032a7adbcac6443c5b109e0aa2
SSDeep: 1536:jTJNPOaH+BJoE5YlMgTorMzXgttxoTtjEmL9lh4LTf1EZTi:nJZHioE5vgT3zXgt78EUPh4LTf1yi
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3.litra 5.50 KB MD5: 82705b680f0f30d39faa380a62eb15d7
SHA1: 47feb921c61fd18f0ca5ddc04c4463fc2251b30d
SHA256: efdab34b3ec87ba6961d9650fea24c9092ee4332cc988f9c218b90abaa950b47
SSDeep: 96:D9B7g0mv+Qj00YSifA8B0soUddsZdBWNN13+NR71roolwHaVWhyF+9MMU8bCuLxu:Df++QNYTfVnoUOoryvroo68MMZqxa0u/
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a.litra 16.34 KB MD5: fd6dce4d623ede62e3d731da4d30c11e
SHA1: 502e720dd4ef79cd8712677bad72c095f67828f6
SHA256: c1ac1bd2acd0a229cf1b2d38399d52c0217bcb83417b74593ddd190eff99e065
SSDeep: 384:/irLBxgc5BoXjm9Rzo7X818MiN6kay84jL2+6vp7FFfQdiWT:EBSc5KXSkz818Nnay84v2+MkdP
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4.litra 66.69 KB MD5: 8b1c5f19190bdfb8924c989fa2e118ea
SHA1: 76a7b4312185d751138439618c0708bfb8415307
SHA256: 31611b218ba1369a8182a17298444e35e632bf0be257895fab098bee9f574a27
SSDeep: 1536:Bnsn2HN0kO0t2PsBwmH7JplY4s4nGud0lL4dPuyNu1j:Bsn2CkhtysSmH9Y4/FVG7j
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx.litra 21.27 KB MD5: 67d7b0c222c0a07c19f6eded30d15ca5
SHA1: 90d1ce39b9f0c1e5c9724274ee13eab4da2b22e5
SHA256: dc170c84f5bd3a1f451ccbde94baafde5e77a61e52adf96cda85e654e8f47e59
SSDeep: 384:0Q65GrOeMY3MSNrwwqopF7pKLzUVsKiOVbqiIr6G6EeM7zD7MTxz:1rOeMY3LXqordKLzUVRPbq9nVz/MTJ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx.litra 13.97 KB MD5: 9da2a6c964aec89f00f211e57cd36b5e
SHA1: 12053cd1ebf4aa30331507d2383ad7d9d9c0d5a6
SHA256: 6a7375d7f93aecc0a832ef7197ce6be3afee827728ddd95663ce7db45c5fd9c4
SSDeep: 384:/jwwNC2wUAKjYmAekVysIQ0+EgbUW402N9QeNmkHa7sayg/:7wwNChUAKjDkgWEw+02N9Qbk6Aat
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra 58.77 KB MD5: 4daf82669f632c8659ee671feeb812b0
SHA1: 83da24d4d1e3f43325cd0bc00e89d2960dc41e79
SHA256: 5f4f57e153b30aaee131113d2ba610bd5a22eff98faabf3440b667238d2437da
SSDeep: 1536:wiVaMMbgh2Ooq4/qn9gmwmoDlCtdYvYjeylz:n4MMbo/59gmRoZ2dYAjD
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx.litra 62.20 KB MD5: ea22bcf5cdb900de3f2fba0db35df064
SHA1: 7dbca84f9e36f8d39ee9ffdcfe44a6579bce5618
SHA256: 89dfde4869f1eb3876fbf6b535c9a1bfa5bc5adc77b516c6bb15218f7176cab3
SSDeep: 1536:VdlCqidWkurYRf0e0JdmSW22HcV4Bmd0+gz:1bis8Rf0e2mV8hd5Y
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt.litra 56.11 KB MD5: 6bbd8124896d27595c95a34fc5107017
SHA1: fa2667df0277cadd28f16f84c3cd5356825633fb
SHA256: 99fee6b19b082a236ad4dbe91265d75f11d527a54eeda8944110779381d9d0be
SSDeep: 768:Z6TLxxLegxcMJo1To1FXNNV7CdB7hwU1GK7yjAmqA6HJKQhRnH2U5mds4V68TJlx:Z6TtJ4TSz7qCKmkg60sH2UwsN8Tvx
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra 72.83 KB MD5: 02f266d89c05d0db36238208ba9a5207
SHA1: 6bbf2c6364d876b5dc5ecc2723bcad619c9efdb9
SHA256: c3b452d2ea012726757e0967dfd74f7a662e7206b9706be780a22849259585ea
SSDeep: 1536:5L7RIj+5Qv3B4qXiF8nyJ435P+juLLY5xWX8iQ4NMwUbNrV5cA:5+tv2qXiFuRoM05sX8iQ4+wUprP
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx.litra 19.67 KB MD5: 5921bf3b963b20a41ffd9e5e188eef00
SHA1: 1dc55b550773b88ce29be253fe45f0c94a8ee766
SHA256: 7682772c96373391742da9c9882991eb30d43e33746c48c2515d51c841b78652
SSDeep: 384:WcOEzBlIoz9+VW7sRkR4HZvRhKt5u7/OkGxfjhcPXzoA/DuiXu1SDlj+EPX9grPu:Wi26SW7sRKwZpYtMz7idcLDrN0uLkbS
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx.litra 66.50 KB MD5: fc43a2d6bef92103f23f3f9490b17860
SHA1: cd4fa4beaf526a9aa5384eb4ea9c66b95c07fa67
SHA256: 97a865684f92195e36c6fe4c491260c2c5e21918d708ebe1dc96f9c7839b4ee5
SSDeep: 1536:p/q77WLEZvlY0haASYhJkzXhLbUkH2ImNiS0YK+Ok:pRL2NlhaA7JYHUkNm++9
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx.litra 60.97 KB MD5: f89ef5d0c57ee071ad1c90b95a5f4357
SHA1: a605d3ceff23df94130e06a9a9e75dca8c60bde2
SHA256: 0bb5c476bd9441b39441b2cc31bd0bf57c58371e366810be4092f3cf623c826d
SSDeep: 1536:GWV2HoLqRZrt3p2PGOr4PK4ajaoMBk3MTOvIBgdLt5OnxHTzO:7uRf38FMvoMBkcKQudLt50xu
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini.litra 448 bytes MD5: 6947bd0999aeaf3736f51c4e7daa4326
SHA1: 301f26af9011715004566607e4455ac8264abfb6
SHA256: 8ff56441d21e449fe3081cdc9b4c90e84c4be5a0a2453777ab0a70f79dca356b
SSDeep: 12:eh3BWkElYo5BsodgwP29eX33PUzITIhnXQPWg:eZBW5DsodgR9YcU8pX8h
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx.litra 26.86 KB MD5: d1d078c7c03ce9d78679b136831ccc4a
SHA1: 40c67664649c78f08d341e400a77ac41d4fbc2c0
SHA256: 585811208ecd26651e9cc368a5d6d50d693d1485512ef8d8be7578a9d0804220
SSDeep: 768:X+Kvh+yXFXputnBXikANgTmpCyWGYikW2wBXQt9vKpGn:X+KpdHuaT/YyWGYa2AavKAn
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx.litra 96.50 KB MD5: ce3f7b099bcfeb97e66c18df47ed9ff6
SHA1: acafd6943a53d77968d47b6cb7a998d0fa3c154d
SHA256: 60f0ef541b82bfded5517cf657c3fda9df8a837aeaf66bfc262c4b9c07f893cc
SSDeep: 3072:ZZU/MPip83q19i1bStXQhimufv6rZzg1rYJnXRl:Ze0CrmbSFQhidfv6rZU1rY5
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx.litra 25.94 KB MD5: 4857bbf9c8cfbe3e3e96d5d6eaa7d5fe
SHA1: 92f463039dcd75eeb9879d4b9e09e2d759c65a62
SHA256: 89882b9a7eb387458bea6c69410375082ce97094c8565960267119ab42e18a54
SSDeep: 768:GU+uJNcBBM2+qb+cruiBo4Srcn1DTsJPBhr:QUN8C0bT73SrupozV
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots.litra 85.52 KB MD5: 764caf418902e5b9912f5c47d1676fb7
SHA1: b193fa9b4f7607fb4a7586dd3b8de6536aea48b1
SHA256: a3d9efaf6035239bea55105d39d5b63284c32d3e0d7b47f1bbc930025c652ff8
SSDeep: 1536:OT2y0lsj057UraTuqUkVFbE4QVyDak1Tjw8fNTnwxGPbci5Qn2KaUsmXM:OT2y0205iAUs1TjwElnEEJQ2zU3XM
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx.litra 32.97 KB MD5: 15006dde2c7c73045e97dbcc975d03b4
SHA1: 4048a95aba7fbc29d7230b7d8b5e70308685c4e4
SHA256: 1e51c01d05fb2734cfa099283939a7d51fd97d90ca91a2cd12a76c416683bf92
SSDeep: 768:UDAsjxnRIeaHKe+RAUpn0q3E6zZbtpKasL6pj/7ObKs57mjAAiuEy+:SAEiLKe6DZ0qlZ/KalvObTMjA5uT+
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt.litra 17.23 KB MD5: 4f1972d7490daa857a93d0c6fbc4845b
SHA1: a4c379d831e7ce634d4efbedd2d0e9879db2299d
SHA256: 9e875fd842172a6245704b73f464ccd37f745795cd92bb914a979d4d505db6fa
SSDeep: 384:vMswiNFxtvDRcZSpoQ0+VCwrIN7CVvf10Z1UASRAZqUtRQW45:vzwaxt7KZSpDCwrVHy4XmZVoN5
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx.litra 79.47 KB MD5: 6370506ec2770a9033de63b95d190abd
SHA1: 3d7ea6e6cc18cf82121842f311d46148bf26eaeb
SHA256: d9ca767d25e0781757d525af62184600cce68f5812cc086250f4f81198f60174
SSDeep: 1536:2XNtQ76tA5+EoSxxGYv87ABABSrCZbrtYT20Zm1lPA6v51B9:2XNALoMMX8BjrMbRS2DgAd
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra 60.42 KB MD5: c629d0430006a3cfdd1eafd2449eac7e
SHA1: 59b75948861d78e293b8d53dc117b186f7a42ad5
SHA256: 36d5ad5bc960dae2763f50e84caedef61ed5fe5410237e99f02190f675316b4f
SSDeep: 768:ptj5dZ1R37qtW3ox689eNk8pL6X7I4Rmt1Vo7ohpUXYYsUby6yfp8JnBzAROugoc:rbFGTxtPoK7IhVWvYYP7yfp8JnQ0JN
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx.litra 99.39 KB MD5: 96536994dcf0f1af065b1092685a1aa1
SHA1: e00e1fb51d9e8d710000c6f7acdc751f328c8edd
SHA256: 14bd216762eafa7d0bf23b8e599f36bbdbf27667bc546e5259800c0d22191acc
SSDeep: 1536:UnwbaP+ARGT1aZ+KJIuoE4a+gHnxYdSK1BtrMh3EWOMr9BO2nP+hvEUg0LT:U72AFZJfoEFPHxYUK1rM5EWOEPqvEUB
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx.litra 59.81 KB MD5: 35c2475870382846cd4f4061983f5d4c
SHA1: 55404af1c813cefdb4469c047354c28e41e0fff8
SHA256: 1068518544af1e51b6ad5fd97fe0f13f7f7e6fa373a372efc95aa40644969eb5
SSDeep: 1536:4kuCL0KkvzXE7s6HPUe5xbVpUmrRKy+EGwq0Jpu:4u0tvz63HvvbAmR5+n6Q
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra 9.66 KB MD5: 00da620cfc0d036520bddeb74e6c4aef
SHA1: c4e2f3052c614def704114815d7f5654d7ffeb3f
SHA256: c1effaf90a9008ef24c9457e5d168f6ea380ceecafbc6329a76bd9b018991ab2
SSDeep: 192:dLJKk9t9TKaiXPhFQCzZTRv89zHWcmmDUR/waPyO664zb6A2ESqOsIy:dLJZZmF/hK8ZTRMTW1mDUR4aPEzbTtm8
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx.litra 78.78 KB MD5: a2585c90af004d297cd4709f3caf79ad
SHA1: 0aa593803db356d4b5a96987ead95d606cce0f24
SHA256: 10e32b908b5231e303fffc2fc3a2b4724439178079d72605dc34fc6bbc004802
SSDeep: 1536:C65T1uieJW9BZt1VBXeVtNZE+mLEN1FuOB43MrPstEf2hEvbvY:C6l1uZJ+1VBOVt4+mL4FuOfrdQEvrY
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls.litra 4.31 KB MD5: c2eb190068395251dd2a1c6755be838a
SHA1: 65bdbbb5dda91c8d66452bc877ab4e575e3a37f3
SHA256: 7fd75cbc56f9e656a67cc4e1298cd404c5a7cdde43cd5948bc4e0bc99be2fa46
SSDeep: 96:ue1slD2g+T72hezLJwkFotGrKX1MrmDRZZ+sbRwdyiOmL+tKhBmNomQOJW:ue1s12g+OezlHucS/b6dyHEBmNrQOE
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx.litra 39.94 KB MD5: 9e355d8cffddff9aa4489b0bc427de6f
SHA1: b8aebd8e05d8e2fc95efd742a3eda61b3f18401d
SHA256: bcbaf28c97a3c03cfb3633e079b4ffdb8f4c571307ace59c9cde8ef1269b69cc
SSDeep: 768:Hff0aQINad3Ij89qQ7WmO71WPNYlENyyhyHARQ5kVY/nNEoffVDQTq:/+INad4I9qQ7CE1Ylr0rYVF5eO
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx.litra 32.88 KB MD5: 69cbdda0eba4cfc7a077be5c52867752
SHA1: 9e7b432b387469d682235f0d8d365ca93a5fd2f7
SHA256: 2d522142bf14d6de06274329409fe73968006d007b927d84c8f1baa201b371c3
SSDeep: 768:fevXy/9S0wAUiJZlvS5PIXviYxMwg9OuM+YHuoOkaoNTSmO3:GvX8U0ww7lbXtxMwg9GOoOkaoq3
False
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.litra 544 bytes MD5: 69bb52d1f8563365f7f95bae4304da19
SHA1: b057f3d9b01e9efac5c1654a8124760626854eaa
SHA256: 3353d2a4e37a7df79c29794c4a47f58a1e72f7b148fdd798a626495a6a000c43
SSDeep: 12:BzDX9yOJSPuU6hdZ+3kwQFgqM4eXCrW5hZBHscgyxZ3lbhaz8/+4CPhse:BPtVJTO3r8kXLlHsRwA4WTse
False
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra 83.19 KB MD5: 0d6e974c73c9f08ffd11ede79f8b3398
SHA1: 46a69d4f2c52e54be9c5ca889d4983aa64e3c307
SHA256: 8d26a37d56bd1e6831b7f2691c6c82d28b304af997e962ff5e7201a3e0f60aaf
SSDeep: 1536:7XlvIaGE5v4AxsggKWH4qtOmI7SKFFOxi2HFGu3a31UKHFh5ct6bbm1D0:7XlPGE5txsggbdGSKTw5HoQKHFm6bbma
False
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi.litra 35.02 KB MD5: 425e5db6d7892611d3da6df80586e767
SHA1: 0203edd82c76ad82456252248113298764a5a44c
SHA256: d7b60c78f34a8dc2670a08b814d5108dbe3d48c7db025bcc17ed87e2f3f69501
SSDeep: 768:8UZQqelGxKTDvw93ylGZhWw080TRX66cyZ:8UaNlKKT8uC0NX66cyZ
False
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra 65.72 KB MD5: 0d78ef7db27e3232467a1dd33baf5a94
SHA1: 4d0ecd33cc0dbfa90feed98a9a26ce8f79cc0b88
SHA256: f804351edde70d9b193e53d8b2d078d6d95921793507e953e4929701b4a9340e
SSDeep: 1536:8M6wssRQr8GPebxDxI649NLPFqJ49o3nAU6f64pdKyu4H:1pemVxYNT32QU5GuW
False
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif.litra 57.89 KB MD5: 2c1bbe2bcae86f5f9ea659c9deb1d83a
SHA1: 71d6b1df8001a1e4f56c9b0e6d7e853eefd99e76
SHA256: bdc6a6f6970d2fccbb28a5e1d09a4676d6afed76affcac78398143d1f495535c
SSDeep: 768:jdPeqGSdMoKXrfKPu5wESSQ+L3Hhwad7nN2vXNBj6jYklnth/9CBKU42cty/KsRt:9SSKwVM35Rkvd+/9mKd2xCsRrlgRmfnN
False
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls.litra 69.70 KB MD5: 126d2903b73466431267da3415d7d281
SHA1: 44b670a8a6bbbdc0f622260ebc9839ad15f99af8
SHA256: 84257aeeed2dbbb4023edd6a8e4759c5e547bdb05a1a8e47d8c556696e64d003
SSDeep: 1536:zRrNcBnIyYkXRpSABesfUn5L5ygUyoDHPo4woByYxIcCr1SpMAZ9MgPHhwVaa55e:z8lIcvVBFUn5NySsTppJLByo
False
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx.litra 4.78 KB MD5: 1ea7773c0247b962a4d6d83ca67dc65b
SHA1: e0ae0614dfb46cbb8078cd8ee9588316a538c559
SHA256: e89fbc2d9bf4f027a718473f8910dc81b51cc1b44378ea283bb206f5ecc35009
SSDeep: 96:6OfOUMBz+kf2oVTrwk2RNgtU0tVTEl+NHw0bQ1ao67QQ94k7+YDg:Fm+keoVE0vElmHP08o67Qk46+0g
False
Modified Files
»
Filename File Size Hash Values YARA Match Actions
c:\users\5p5nrgjn0js halpmcxz\appdata\local\gdipfontcachev1.dat 106.27 KB MD5: 92e128dcb152d05f07faf5da64bd1c91
SHA1: 2174814ca563fc2b9679fffbf1b40bdf3ac9abec
SHA256: 11437a99f5f9c0a6df09c64abc8828ad3ecd8cf4fa601340ded86b8945edff43
SSDeep: 768:i8HrbdvVyZHgTl7ho5sZWN/Ys9byFRQ+AwqGuGyZoVyOF7rrlqTIyMnm:/pVyZHgTl7h6tKR7AwqlGyZQVO1Mnm
False
Host Behavior
File (781)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3 desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3 desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3 desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3 desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4 desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ True 1
Fn
Get Info C:\Windows\system32\RichEd20.DLL type = file_attributes True 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\noitidetsrif.exe.config type = file_attributes False 1
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3 type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3 type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3 type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3 type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4 type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra type = file_type True 2
Fn
Get Info C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf type = file_type True 2
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav size = 1048576, size_out = 72045 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini size = 1048576, size_out = 504 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3 size = 1048576, size_out = 5830 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3 size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav size = 1048576, size_out = 48350 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini size = 1048576, size_out = 504 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif size = 1048576, size_out = 8391 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif size = 1048576, size_out = 10200 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png size = 1048576, size_out = 89046 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png size = 1048576, size_out = 95422 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif size = 1048576, size_out = 59240 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif size = 1048576, size_out = 60951 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif size = 1048576, size_out = 56399 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp size = 1048576, size_out = 100268 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls size = 1048576, size_out = 51400 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv size = 1048576, size_out = 61818 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg size = 1048576, size_out = 72374 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav size = 1048576, size_out = 80219 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif size = 1048576, size_out = 73219 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp size = 1048576, size_out = 43896 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv size = 1048576, size_out = 27174 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv size = 1048576, size_out = 68672 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a size = 1048576, size_out = 76189 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv size = 1048576, size_out = 72981 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini size = 1048576, size_out = 282 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif size = 1048576, size_out = 67131 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg size = 1048576, size_out = 8603 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp size = 1048576, size_out = 56001 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a size = 1048576, size_out = 62438 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv size = 1048576, size_out = 68536 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods size = 1048576, size_out = 73585 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx size = 1048576, size_out = 55235 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp size = 1048576, size_out = 33590 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3 size = 1048576, size_out = 85804 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3 size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png size = 1048576, size_out = 64534 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf size = 1048576, size_out = 94203 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp size = 1048576, size_out = 46410 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3 size = 1048576, size_out = 23169 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3 size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp size = 1048576, size_out = 59253 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv size = 1048576, size_out = 43265 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls size = 1048576, size_out = 71339 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp size = 1048576, size_out = 65333 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png size = 1048576, size_out = 68547 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3 size = 1048576, size_out = 5590 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3 size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a size = 1048576, size_out = 16696 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4 size = 1048576, size_out = 68246 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4 size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx size = 1048576, size_out = 21730 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx size = 1048576, size_out = 14259 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv size = 1048576, size_out = 60143 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx size = 1048576, size_out = 63648 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt size = 1048576, size_out = 57416 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots size = 1048576, size_out = 74532 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx size = 1048576, size_out = 20101 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx size = 1048576, size_out = 68056 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx size = 1048576, size_out = 62385 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini size = 1048576, size_out = 402 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx size = 1048576, size_out = 27459 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx size = 1048576, size_out = 98772 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx size = 1048576, size_out = 26513 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots size = 1048576, size_out = 87522 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx size = 1048576, size_out = 33727 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt size = 1048576, size_out = 17610 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx size = 1048576, size_out = 81337 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx size = 1048576, size_out = 61839 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx size = 1048576, size_out = 101729 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx size = 1048576, size_out = 61208 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc size = 1048576, size_out = 9842 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx size = 1048576, size_out = 80631 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls size = 1048576, size_out = 4373 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx size = 1048576, size_out = 40861 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx size = 1048576, size_out = 4860 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx size = 1048576, size_out = 33623 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini size = 1048576, size_out = 504 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi size = 1048576, size_out = 85143 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi size = 1048576, size_out = 35817 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi size = 1048576, size_out = 0 True 1
Fn
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf size = 1048576, size_out = 67261 True 1
Fn
Data
Read C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf size = 1048576, size_out = 0 True 1
Fn
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra size = 67968 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini.litra size = 544 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3.litra size = 1776 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini.litra size = 544 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra size = 84976 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra size = 91344 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra size = 96192 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra size = 68304 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra size = 72112 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini.litra size = 320 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra size = 58368 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra size = 81728 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra size = 19104 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra size = 64480 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3.litra size = 1536 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra size = 56064 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra size = 70464 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini.litra size = 448 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra size = 57760 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra size = 5776 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls.litra size = 320 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini.litra size = 544 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra size = 81072 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi.litra size = 16 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra size = 4096 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra size = 63184 True 1
Fn
Data
Write C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf.litra size = 16 True 1
Fn
Data
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Music\0fXSoYyeJ82KkswLWm.wav - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Music\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Music\KKTSZ.mp3 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Music\Q4MZzE8.wav - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\HNRbZQ6.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\JKFekB4feQgcHwoHVFB.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\m RI.png - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\R24NZ1BjqYMgeIvExG.png - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\rh3XTu3.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\tfqJGoHzfZ6i.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Y0q0rRmTvvdvBeH.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z_ULXMFau.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-XPt8YTaiAPsxF1LOj.xls - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0bJX1ZmT_7FZfn.csv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\16_6KBuq38ydo7.jpg - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2FtUP.wav - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3tpXV7e6d.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5UjqRR-Ub7uIuY.odp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9QYo.mkv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bk0yhoNpUIak.mkv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Bo_r4COe151g.m4a - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cAuM4I.flv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dy79t7HL.gif - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ESjnDz-.jpg - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\f6VlxrksN5AyYmhyHE7.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FWYtecM5teqj.m4a - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jIvWV3m8ltx3Efp.mkv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JXoiFmBBllm.ods - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbY7.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NkDEd0.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NluNY2i.mp3 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oe_UDjK5dglAj.png - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OPEX rQi2p5pE.swf - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\P9e_n.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PwKLg1 z.mp3 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rrPLmEe.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SxQNG.mkv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U2w5SGIB3Z78iuNMBa6Y.xls - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\viLm.bmp - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xh-IzNeDJf56yg43d-.png - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YySUDMilQuO.mp3 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZjDcKJFJVpuw1VY.m4a - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVx77Uk6cs.mp4 - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-5ovc5Zjg-V24VlVviIY.docx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0JFN cDosf1O BBErFFe.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\42T9W87rqI_.csv - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4sUXj1UPF-.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\65q3O.ppt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7srwU3T1rT02OYtKGq.ots - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9ot5SO.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C5g048Y8S2.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CZccI.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iJWNI.docx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j2xvAHsoCbW_lcjYe0iF.docx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J79kQ0LAFP2jV.docx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jdc1FwyylM_V.ots - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lQ412CZdlCABKG.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\LQIXpj.odt - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OANAwe.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\OEO5j_ynKCNGOzrxY.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Sk2r-nEmibcrb e.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tzTg9gqfq-oiz QbbNO.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UJc7MXkH_2.doc - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VAXRo.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Vh4gGtXSmEm6XoEv.xls - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\wgnNK 4geXIg25gQA.docx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xUit7Mu_Jjy0hUZ1.pptx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6gJ.xlsx - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Videos\desktop.ini - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mn9UghYWgPQe.avi - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Videos\toujiXE7X_F_AmdJOdD.avi - True 1
Fn
Delete C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tQUA10MJgPpbvdTdKW4.swf - True 1
Fn
Registry (3)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework value_name = DbgJITDebugLaunchSetting, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework value_name = DbgManagedDebugger, type = REG_NONE False 1
Fn
Module (82)
»
Operation Module Additional Information Success Count Logfile
Load comctl32.dll base_address = 0x73e70000 True 1
Fn
Load comctl32.dll base_address = 0x73cd0000 True 1
Fn
Load RichEd20.DLL base_address = 0x73c50000 True 1
Fn
Get Handle comctl32.dll base_address = 0x0 False 2
Fn
Get Handle c:\windows\syswow64\user32.dll base_address = 0x74f40000 True 1
Fn
Get Handle c:\users\5p5nrgjn0js halpmcxz\desktop\noitidetsrif.exe base_address = 0x1040000 True 15
Fn
Get Handle c:\windows\microsoft.net\assembly\gac_msil\system.windows.forms\v4.0_4.0.0.0__b77a5c561934e089\system.windows.forms.dll base_address = 0x73e70000 True 48
Fn
Get Handle c:\windows\microsoft.net\assembly\gac_msil\system.windows.forms\v4.0_4.0.0.0__b77a5c561934e089\system.windows.forms.dll base_address = 0x73cd0000 True 11
Fn
Get Filename RichEd20.DLL process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\noitidetsrif.exe, file_name_orig = C:\Windows\system32\RichEd20.DLL, size = 260 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = DefWindowProcW, address_out = 0x771625dd True 1
Fn
Window (38)
»
Operation Window Name Additional Information Success Count Logfile
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create .NET-BroadcastEventWindow.4.0.0.0.141b42a.0 class_name = .NET-BroadcastEventWindow.4.0.0.0.141b42a.0, wndproc_parameter = 0 True 1
Fn
Create Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create Rules class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create We are not the people you really want to annoy. We will most probbably block you, if you even try to "troll" us around. The key to get your files back are simple : > have patience... there is no better answer. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create - class_name = WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create encrypted. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Create All of your personal files including documents, pictures, texts and other sensitive data are class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, wndproc_parameter = 0 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 79628302 True 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 True 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 79629150 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.0.app.0.141b42a_r14_ad1, index = -4, new_long = 79629230 True 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -8, new_long = 393500 False 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -8, new_long = 393500 True 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -16, new_long = 46923776 True 1
Fn
Set Attribute Form1 class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -20, new_long = 65537 True 1
Fn
Set Attribute Rules class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 True 1
Fn
Set Attribute Rules class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 79629270 True 1
Fn
Set Attribute Rules class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -12, new_long = 262592 False 1
Fn
Set Attribute We are not the people you really want to annoy. We will most probbably block you, if you even try to "troll" us around. The key to get your files back are simple : > have patience... there is no better answer. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 1942927561 True 1
Fn
Set Attribute We are not the people you really want to annoy. We will most probbably block you, if you even try to "troll" us around. The key to get your files back are simple : > have patience... there is no better answer. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 79629350 True 1
Fn
Set Attribute We are not the people you really want to annoy. We will most probbably block you, if you even try to "troll" us around. The key to get your files back are simple : > have patience... there is no better answer. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -12, new_long = 197058 False 1
Fn
Set Attribute - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 1997940189 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -4, new_long = 79629390 True 1
Fn
Set Attribute - class_name = WindowsForms10.Window.8.app.0.141b42a_r14_ad1, index = -12, new_long = 131526 False 1
Fn
Set Attribute - class_name = WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1, index = -4, new_long = 1942298874 True 1
Fn
Set Attribute - class_name = WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1, index = -4, new_long = 79629470 True 1
Fn
Set Attribute - class_name = WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1, index = -12, new_long = 131524 False 1
Fn
Set Attribute encrypted. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 1942927561 True 1
Fn
Set Attribute encrypted. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 79630894 True 1
Fn
Set Attribute encrypted. class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -12, new_long = 131578 False 1
Fn
Set Attribute All of your personal files including documents, pictures, texts and other sensitive data are class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 1942927561 True 1
Fn
Set Attribute All of your personal files including documents, pictures, texts and other sensitive data are class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -4, new_long = 79630934 True 1
Fn
Set Attribute All of your personal files including documents, pictures, texts and other sensitive data are class_name = WindowsForms10.STATIC.app.0.141b42a_r14_ad1, index = -12, new_long = 131576 False 1
Fn
Keyboard (40)
»
Operation Additional Information Success Count Logfile
Get Info type = KB_LOCALE_ID, os_tid = 0, result_out = 67699721 True 1
Fn
Read virtual_key_code = VK_RBUTTON, result_out = 0 True 8
Fn
Read virtual_key_code = VK_MBUTTON, result_out = 0 True 8
Fn
Read virtual_key_code = VK_XBUTTON1, result_out = 0 True 8
Fn
Read virtual_key_code = VK_XBUTTON2, result_out = 0 True 8
Fn
Read virtual_key_code = VK_LBUTTON, result_out = 0 True 7
Fn
System (26)
»
Operation Additional Information Success Count Logfile
Get window text window_text = 3862452 True 2
Fn
Get window text window_text = 4854408 True 1
Fn
Get window text window_text = 3854332 True 1
Fn
Get window text window_text = 3861716 True 1
Fn
Get window text window_text = 3861692 True 1
Fn
Get window text window_text = 3861776 True 1
Fn
Get window text window_text = 3861608 True 2
Fn
Get window text window_text = 3861640 True 4
Fn
Get window text window_text = 3860640 True 1
Fn
Get window text window_text = 3861172 True 2
Fn
Get window text window_text = 3861660 False 2
Fn
Get window text window_text = 3861580 True 2
Fn
Get window text window_text = 3861412 True 2
Fn
Get Cursor x_out = 823, y_out = 455 True 3
Fn
Get Cursor x_out = 228, y_out = 840 True 1
Fn
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image