Sample File: MD5 hash: 127e7dce984cc0acea750746b485c101 SHA1 hash: 2e920f4583c38f811fdad739ebaf5064badec42d SHA256 hash: 9f84be3a53d5f2a03a9ec2e60093c70293e15fd91addeb3936fd1f8c3b013b1d SSDEEP hash: 98304:eMGA/GKxx3TknUXUGG5ghUA2dqGJSkIX0BLNYDodDygooqgcZmOf9XhzuALXwHKA:eMGA/FxVTp7MzA28GJRVlNGabiZv1Xhk Filename(s): kfjgxo.exe Filetype: Windows Exe (x86-32) Mutex IOCs: - None - Registry Key IOCs: HKEY_CURRENT_USER\Software\woodrat HKEY_CURRENT_USER\Software\woodrat\sha HKEY_CURRENT_USER Domain IOCs: xduwtfono IP IOCs: 192.168.0.198 URL IOCs: - None - File IOCs: Filenames: C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\wzabvrxwaimhf8.doc.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\wzabvrxwaimhf8.doc C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\z69d8pfn8tk.mp3 C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\uuqizls6l0\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\contacts\aclviho asldjfl.contact.woodrat C:\programdata\adobe\arm\reader_10.0.0\adberdrupd10110_mui.msp.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\58ytyhaq9.m4a C:\programdata\package cache\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\mh8u t8iavcebj8b.docx.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\kwe-i2-.mp4 C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\xechw8l7-wjk4.odp C:\users\5p5nrgjn0js halpmcxz\application data\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\yvbf4slyqy8ci.pptx.woodrat C:\programdata\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\-cnmfjgrfq8qese fgc.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\6hmhzouzd-fa2jf.mp4.woodrat C:\programdata\package cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\o2bgc9aace9eivel.jpg C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\w9fyeo.ots.woodrat C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kfjgxo.exe C:\programdata\sun\java\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\xeazk j2wwuqtc9.wav C:\programdata\adobe\arm\reader_10.0.0\adberdrupd10116_mui.msp.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\ovl1 9.xlsx C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\3xdz6.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn autos.url.woodrat C:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\winre.wim C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn.url C:\programdata\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\gpzg80.flv C:\users\5p5nrgjn0js halpmcxz\desktop\mq0xor nbh66z.jpg C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\uuqizls6l0\cqgbz3jjyohhaz.wav C:\users\5p5nrgjn0js halpmcxz\music\xsqufmivqi\ai-g5wukqx46jajxm.wav C:\users\5p5nrgjn0js halpmcxz\favorites\links\web slice gallery.url C:\programdata\package cache\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\packages\LOCKED_README.txt C:\programdata\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\downloads\desktop.ini C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\htiguunp63.pdf C:\users\5p5nrgjn0js halpmcxz\desktop\-egi3nc 2u.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\wh__pbty2nz6rgujry\nvhh9u-gcahpgau0.odt C:\programdata\documents\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\kliim9wdu0r0r.ppt.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\zpv2wj0-cuzg0etso.rtf.woodrat C:\programdata\templates\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\hcrvqdqw9kvprsedxhk.jpg C:\programdata\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\desktop.ini.woodrat C:\programdata\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\yvbf4slyqy8ci.pptx C:\programdata\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\LOCKED_README.txt C:\programdata\package cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\aeflwrk7e5o_uq-qos.pptx C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\m9ay.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\uobb9.pdf C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\l26ocryeeo8wydascru.rtf.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\wh__pbty2nz6rgujry\nvhh9u-gcahpgau0.odt.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\z69d8pfn8tk.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\2-ghz3e8x9ng.docx.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn.url.woodrat C:\programdata\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\efbnvai-rcj8qnkqbb.gif.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\my pictures\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\t7do454phsitmf7.mp4 C:\programdata\package cache\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\packages\patch\LOCKED_README.txt C:\programdata\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\LOCKED_README.txt C:\programdata\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\LOCKED_README.txt C:\programdata\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\org9qej.flv C:\users\5p5nrgjn0js halpmcxz\documents\ltfcdbxx40tyuco.docx C:\users\5p5nrgjn0js halpmcxz\music\idhgpshyor9fbuxbcn.mp3 C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\LOCKED_README.txt C:\programdata\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\links\suggested sites.url C:\users\5p5nrgjn0js halpmcxz\desktop\wsismp-zitj.jpg.woodrat C:\programdata\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\_u e.wav C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\j jf8hbg.xls C:\users\5p5nrgjn0js halpmcxz\documents\outlook files\LOCKED_README.txt C:\programdata\adobe\acrobat\LOCKED_README.txt C:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi C:\programdata\package cache\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\packages\vcruntimeminimum_amd64\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\ma9dnxivjbitmi4lncet.wav.woodrat C:\programdata\sun\java\java update\jaureglist.xml C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\ddvtkoko.pdf.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\luf9nimwhua.png C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\azdsh.csv C:\users\5p5nrgjn0js halpmcxz\downloads\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\luf9nimwhua.png.woodrat C:\programdata\package cache\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\packages\vcruntimeminimum_x86\cab1.cab.woodrat C:\programdata\package cache\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\lp7d4y0kwf8gaq.mp3.woodrat C:\programdata\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\cab1.cab C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\0-a9gpur1.wav C:\users\5p5nrgjn0js halpmcxz\music\z7s83cc08.m4a.woodrat C:\programdata\package cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm C:\programdata\adobe\acrobat\10.0\replicate\security\directories.acrodata C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\0-a9gpur1.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\utbx9iafr 7toh.docx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\l7uh2xzyq.wav C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\q3x9moh5_cf.pptx C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\m9ay.wav C:\users\5p5nrgjn0js halpmcxz\documents\aeflwrk7e5o_uq-qos.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\b0utfcaw8cxq.m4a C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\m4li3n.jpg C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\3xdz6.mp3 C:\users\5p5nrgjn0js halpmcxz\cookies\LOCKED_README.txt C:\programdata\package cache\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\packages\vcruntimeminimum_amd64\cab1.cab C:\programdata\package cache\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\packages\vcruntimeadditional_amd64\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\o7htyd_otmt9kzbs9le.wav C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\sht1n.pps C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\xeazk j2wwuqtc9.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\gekj2vzkvo1_zt.pptx C:\users\5p5nrgjn0js halpmcxz\desktop\yympiwfiqsb_ivu.ods C:\users\5p5nrgjn0js halpmcxz\music\xsqufmivqi\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\vb_gqmxbes6li7o h.csv C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\contacts\administrator.contact C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\gekj2vzkvo1_zt.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\contacts\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\7ew7kda1xlecmji-np.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\l7uh2xzyq.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\04r6p5odli.rtf C:\users\5p5nrgjn0js halpmcxz\contacts\administrator.contact.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\my videos\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\3ndq5xug2p7v.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\o2bgc9aace9eivel.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\mh8u t8iavcebj8b.docx C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\-erjut6t.ppt.woodrat C:\users\5p5nrgjn0js halpmcxz\music\2gxxhzti1eg-nrx.m4a C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn sports.url C:\programdata\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\LOCKED_README.txt C:\programdata\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\g9ndp0i9s 6om_.xlsx C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\_u e.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\il0kukmvl.mp3 C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\ghmwlfclbujak.mp3 C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\9ahv.mp4.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\ftx4sxhibrx9ib1.docx.woodrat C:\programdata\package cache\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\bbfdp_efl.bmp.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\p3lmcikssqmn1.doc.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\desktop.ini C:\users\5p5nrgjn0js halpmcxz\contacts\asdlfk poopvy.contact.woodrat C:\programdata\package cache\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\o sklkik36jkikb0\h5wt.xlsx C:\programdata\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\-ijxbst-mjm1ec_ml9_8.odt C:\config.msi\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\hxhf_r_.mp3 C:\programdata\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\hpa2s1u-o.rtf.woodrat C:\users\5p5nrgjn0js halpmcxz\contacts\asdlfk poopvy.contact C:\users\5p5nrgjn0js halpmcxz\contacts\chucu jadnvk.contact.woodrat C:\programdata\package cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\state.rsm C:\users\5p5nrgjn0js halpmcxz\favorites\links\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\htiguunp63.pdf.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\LOCKED_README.txt C:\programdata\package cache\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\packages\vcruntimeadditional_amd64\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\thzrkafcoj.avi C:\users\5p5nrgjn0js halpmcxz\documents\utbx9iafr 7toh.docx C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\7kwflaxx.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\iucew4gepvyl2ya.pptx C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\id5c8tx.pps C:\users\5p5nrgjn0js halpmcxz\desktop\onpn6butn8zet.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\LOCKED_README.txt C:\programdata\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\hmnjahve-o7.xlsx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\58ytyhaq9.m4a.woodrat C:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\esnfs1j.mp3 C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\t3mpo8ssfkhplhz8q.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\LOCKED_README.txt C:\programdata\mozilla\logs\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\sjlu2nrhreddco.mp3 C:\users\5p5nrgjn0js halpmcxz\desktop\kwe-i2-.mp4.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\yg jfjgtd9n9lb072.xlsx.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\s0yq-bgahqraimc.flv.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\s_c1_38hcigl4vy4e4y.odp.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\onpn6butn8zet.mp3 C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn entertainment.url C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\ldyfq5r7a9vcj.wav C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\rrvrlt.odp.woodrat C:\users\5p5nrgjn0js halpmcxz\ntuser.dat C:\users\5p5nrgjn0js halpmcxz\desktop\hcrvqdqw9kvprsedxhk.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\outlook files\voeimd@djhreuu.uhd.pst C:\programdata\package cache\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\packages\vcruntimeminimum_amd64\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\contacts\chucu jadnvk.contact C:\users\5p5nrgjn0js halpmcxz\desktop\wsismp-zitj.jpg C:\programdata\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\cab1.cab.woodrat C:\programdata\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\nethood\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\fltql1vfhd.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\-cnmfjgrfq8qese fgc.mp3 C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\hpa2s1u-o.rtf C:\programdata\package cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\links\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\9ahv.mp4 C:\users\5p5nrgjn0js halpmcxz\desktop\zh8tiajyxyk2cb4hsv.avi.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\b0utfcaw8cxq.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\-egi3nc 2u.jpg C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\o sklkik36jkikb0\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\3l_x0gu0dflne83r_zq0.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\7ew7kda1xlecmji-np.pptx C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\sjlu2nrhreddco.mp3.woodrat C:\programdata\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\cab1.cab C:\users\5p5nrgjn0js halpmcxz\desktop\mq0xor nbh66z.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\yympiwfiqsb_ivu.ods.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\pjycnaovkovy9rvjz.csv.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\b-xwqo-ry8zl.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\04r6p5odli.rtf.woodrat C:\users\5p5nrgjn0js halpmcxz\music\vbpzdk.mp3 C:\programdata\adobe\acrobat\10.0\replicate\security\directories.acrodata.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\t7do454phsitmf7.mp4.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msnbc news.url.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\jb4 o9oyxxv pduz9eb.gif.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\dxyka.pps.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\l26ocryeeo8wydascru.rtf C:\programdata\adobe\acrobat\10.0\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\ip0tggstqqge\ghmwlfclbujak.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\ovp_.xls C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\jb4 o9oyxxv pduz9eb.gif C:\programdata\adobe\acrobat\10.0\replicate\security\LOCKED_README.txt C:\programdata\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\LOCKED_README.txt C:\programdata\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\cab1.cab C:\programdata\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\cab1.cab C:\programdata\adobe\arm\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\vpowfvgzfnoxpbxt2tl.wav C:\users\5p5nrgjn0js halpmcxz\music\idhgpshyor9fbuxbcn.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\contacts\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\lp7d4y0kwf8gaq.mp3 C:\users\5p5nrgjn0js halpmcxz\documents\wxaojgakpbvsn.xlsx.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\zpv2wj0-cuzg0etso.rtf C:\users\5p5nrgjn0js halpmcxz\desktop\vx1wpslsrs_.mp4.woodrat C:\programdata\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\links\web slice gallery.url.woodrat C:\programdata\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\cab1.cab C:\users\5p5nrgjn0js halpmcxz\links\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\xechw8l7-wjk4.odp.woodrat C:\programdata\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\bunf5_7dc.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\7x5-fnija\uuqizls6l0\cqgbz3jjyohhaz.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\contacts\lulcit amkdfe.contact C:\users\5p5nrgjn0js halpmcxz\documents\qxq ggmm9n3cilzird.pptx C:\programdata\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\5mckjgqq_dfvq1kxl.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\music\desktop.ini C:\programdata\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\LOCKED_README.txt C:\programdata\mozilla\logs\maintenanceservice-install.log.woodrat C:\programdata\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\LOCKED_README.txt C:\programdata\package cache\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\o sklkik36jkikb0\zu-nzbn8c.ppt.woodrat C:\users\5p5nrgjn0js halpmcxz\contacts\aclviho asldjfl.contact C:\programdata\package cache\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\packages\vcruntimeminimum_x86\LOCKED_README.txt C:\programdata\adobe\arm\reader_10.0.0\adberdrupd10110_mui.msp C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\kliim9wdu0r0r.ppt C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\ldyfq5r7a9vcj.wav.woodrat C:\programdata\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\links\desktop.ini \??\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kfjgxo.exe C:\programdata\package cache\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\zmn7 7vdl.docx.woodrat C:\programdata\package cache\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\packages\vcruntimeadditional_x86\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\tzlwctkw_.wav.woodrat C:\programdata\sun\LOCKED_README.txt C:\programdata\application data\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\o sklkik36jkikb0\zu-nzbn8c.ppt C:\users\5p5nrgjn0js halpmcxz\documents\outlook files\voeimd@djhreuu.uhd.pst.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\uv_qf tmsosj.odp C:\programdata\package cache\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\packages\vcruntimeadditional_x86\cab1.cab C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\p3lmcikssqmn1.doc C:\programdata\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\2gxxhzti1eg-nrx.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\2-ghz3e8x9ng.docx C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\lxxqhmvw_.ppt.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\desktop.ini C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\d-2rw0ee6g4.odt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\pjycnaovkovy9rvjz.csv C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\sht1n.pps.woodrat C:\programdata\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\z1jb4dkgjw-z.ots.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\z1jb4dkgjw-z.ots C:\programdata\package cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\vb_gqmxbes6li7o h.csv.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\j jf8hbg.xls.woodrat C:\programdata\mozilla\logs\maintenanceservice-install.log C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\ioa-7j8q iq.png.woodrat C:\programdata\package cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm.woodrat C:\programdata\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\LOCKED_README.txt C:\programdata\adobe\LOCKED_README.txt C:\programdata\sun\java\java update\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\s_c1_38hcigl4vy4e4y.odp C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\4ws6bp3.pptx C:\programdata\mozilla\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\-5hrue7vtj98g-p_jnw.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\s0yq-bgahqraimc.flv C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn sports.url.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\2dwmrorvsye.avi.woodrat C:\programdata\package cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\links\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\wh__pbty2nz6rgujry\LOCKED_README.txt C:\recovery\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\vbpzdk.mp3.woodrat C:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\-ijxbst-mjm1ec_ml9_8.odt.woodrat C:\programdata\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\ovl1 9.xlsx.woodrat C:\programdata\package cache\{3c3aafc8-d898-43ec-998f-965ffdae065a}\state.rsm.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\m4li3n.jpg.woodrat C:\bootsect.bak C:\users\5p5nrgjn0js halpmcxz\documents\g9ndp0i9s 6om_.xlsx.woodrat C:\programdata\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm C:\users\5p5nrgjn0js halpmcxz\desktop\i7n0egpj_c.m4a C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\tzyoe2bg4k48mjtpq.m4a.woodrat C:\users\5p5nrgjn0js halpmcxz\links\desktop.ini C:\documents and settings\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\zh8tiajyxyk2cb4hsv.avi C:\programdata\package cache\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn money.url.woodrat C:\programdata\package cache\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\vx1wpslsrs_.mp4 C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\wh__pbty2nz6rgujry\m46vff.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\5mckjgqq_dfvq1kxl.m4a C:\users\5p5nrgjn0js halpmcxz\music\tzlwctkw_.wav C:\programdata\package cache\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\packages\vcruntimeminimum_x86\cab1.cab C:\programdata\oracle\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\jxbhcipj.ots.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\esnfs1j.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\lxxqhmvw_.ppt C:\users\5p5nrgjn0js halpmcxz\contacts\lulcit amkdfe.contact.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\jxbhcipj.ots C:\users\5p5nrgjn0js halpmcxz\music\8euukfybsgvhuwz.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\ioa-7j8q iq.png C:\programdata\adobe\arm\reader_10.0.0\adberdrupd10116_mui.msp C:\users\5p5nrgjn0js halpmcxz\documents\1rsl9u.xlsx C:\users\5p5nrgjn0js halpmcxz\favorites\links\suggested sites.url.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\648zaz2woc9ww.swf C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\uobb9.pdf.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\qxq ggmm9n3cilzird.pptx.woodrat C:\programdata\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\gpzg80.flv.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\-erjut6t.ppt C:\users\5p5nrgjn0js halpmcxz\contacts\desktop.ini C:\users\5p5nrgjn0js halpmcxz\local settings\LOCKED_README.txt C:\programdata\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\cab1.cab C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\ovp_.xls.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn autos.url C:\programdata\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\r7df17a.avi.woodrat C:\system volume information\LOCKED_README.txt C:\programdata\package cache\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\packages\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\favorites\desktop.ini C:\recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\winre.wim.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msnbc news.url C:\users\5p5nrgjn0js halpmcxz\desktop\3ndq5xug2p7v.wav C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\o7htyd_otmt9kzbs9le.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\desktop.ini C:\users\5p5nrgjn0js halpmcxz\contacts\sikvnb huvuib.contact C:\programdata\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\d-2rw0ee6g4.odt.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\yg jfjgtd9n9lb072.xlsx C:\users\5p5nrgjn0js halpmcxz\desktop\bunf5_7dc.wav C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\ntuser.dat.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\il0kukmvl.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\6hmhzouzd-fa2jf.mp4 C:\programdata\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\cab1.cab C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\LOCKED_README.txt C:\programdata\adobe\acrobat\10.0\replicate\LOCKED_README.txt C:\programdata\package cache\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\locked_readme.txt.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn money.url C:\programdata\adobe\arm\reader_10.0.0\adberdrsecupd10111.msp C:\users\5p5nrgjn0js halpmcxz\documents\ltfcdbxx40tyuco.docx.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\oqkpol\o sklkik36jkikb0\h5wt.xlsx.woodrat C:\programdata\package cache\{f325f05b-f963-4640-a43b-c8a494cdda0f}\state.rsm.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\k9eggs7l0p.png C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\fltql1vfhd.wav C:\programdata\package cache\LOCKED_README.txt C:\programdata\package cache\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\packages\vcruntimeadditional_amd64\cab1.cab C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\qccrknmbaoxv9.m4a.woodrat C:\programdata\adobe\arm\reader_10.0.0\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\8euukfybsgvhuwz.wav C:\programdata\favorites\LOCKED_README.txt C:\programdata\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\vpowfvgzfnoxpbxt2tl.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\i7n0egpj_c.m4a.woodrat C:\programdata\package cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\LOCKED_README.txt C:\bootmgr C:\users\5p5nrgjn0js halpmcxz\documents\my music\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\_private\folder.ico C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\id5c8tx.pps.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\xsqufmivqi\dziw-aua_fhzwxu.wav C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\favorites.vss C:\programdata\start menu\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\1rsl9u.xlsx.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\msn websites\msn entertainment.url.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\uv_qf tmsosj.odp.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\qccrknmbaoxv9.m4a C:\programdata\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\3l_x0gu0dflne83r_zq0.jpg C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\LOCKED_README.txt C:\programdata\sun\java\java update\jaureglist.xml.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\up89_u.jpg.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\org9qej.flv.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\7kwflaxx.jpg C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\rrvrlt.odp C:\programdata\adobe\arm\reader_10.0.0\adberdrsecupd10111.msp.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\ma9dnxivjbitmi4lncet.wav C:\users\5p5nrgjn0js halpmcxz\documents\ftx4sxhibrx9ib1.docx C:\users\5p5nrgjn0js halpmcxz\contacts\sikvnb huvuib.contact.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\wxaojgakpbvsn.xlsx C:\users\5p5nrgjn0js halpmcxz\music\z7s83cc08.m4a C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\mbpttaqb4joydqyy5d\dxyka.pps C:\users\5p5nrgjn0js halpmcxz\music\0medmnqhp1mf\pjfs5xt\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\w9fyeo.ots C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\8wwqliribez\pwootdk\4ws6bp3.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\b-xwqo-ry8zl.mp3 C:\users\5p5nrgjn0js halpmcxz\downloads\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\thzrkafcoj.avi.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\_private\folder.ico.woodrat C:\programdata\package cache\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\packages\vcruntimeadditional_x86\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\zmn7 7vdl.docx C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\t3mpo8ssfkhplhz8q.m4a C:\users\5p5nrgjn0js halpmcxz\my documents\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\2dwmrorvsye.avi C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\648zaz2woc9ww.swf.woodrat C:\users\5p5nrgjn0js halpmcxz\music\-5hrue7vtj98g-p_jnw.m4a C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\azdsh.csv.woodrat C:\users\5p5nrgjn0js halpmcxz\favorites\desktop.ini.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\r7df17a.avi C:\programdata\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\hmnjahve-o7.xlsx C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\bbfdp_efl.bmp C:\programdata\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\LOCKED_README.txt C:\programdata\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\cab1.cab.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\q3x9moh5_cf.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\ddvtkoko.pdf C:\programdata\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\cab1.cab C:\users\5p5nrgjn0js halpmcxz\documents\azbpjfx-6 1\7kmdjytgjvvb\liothk9pur\simow\wh__pbty2nz6rgujry\m46vff.pptx C:\users\5p5nrgjn0js halpmcxz\documents\iucew4gepvyl2ya.pptx.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\up89_u.jpg pub.dll C:\users\5p5nrgjn0js halpmcxz\music\167ellivsnfltk\xeszqwvt8iiz\ow7wuajonrnjrr\hxhf_r_.mp3.woodrat C:\users\5p5nrgjn0js halpmcxz\documents\my shapes\_private\LOCKED_README.txt C:\programdata\package cache\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\packages\patch\x64\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\LOCKED_README.txt C:\users\5p5nrgjn0js halpmcxz\music\xsqufmivqi\dziw-aua_fhzwxu.wav.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\efbnvai-rcj8qnkqbb.gif C:\users\5p5nrgjn0js halpmcxz\desktop\k9eggs7l0p.png.woodrat C:\users\5p5nrgjn0js halpmcxz\desktop\l8nr\dgyahvtcgclivcyn8\-n9ik6zz4qkfr7b\920tdp1\tzyoe2bg4k48mjtpq.m4a C:\programdata\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\LOCKED_README.txt C:\programdata\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\LOCKED_README.txt C:\programdata\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.woodrat C:\users\5p5nrgjn0js halpmcxz\music\xsqufmivqi\ai-g5wukqx46jajxm.wav.woodrat MD5 hashes: 2cd35c420bf38b8b5c2ee49b2cda3872 9e6509fea30419cb2dac38f6ddf49ceb 2a30a6a372de2e941c9d072535e745b4 ecf88f261853fe08d58e2e903220da14 7dd26d2fa52e27edcc2cc07beb6bf857 1bb4e388949466f337184ed5344659f8 498c61f95bc81677276604d64a7ad649 4dd5af104f5f47fa3994f259a471bcbe 127e7dce984cc0acea750746b485c101 723cdbacda0cc2dd8d6df58faa25fabc cb35588c238595d239c74ebeed7c2676 dfd088c2330fc0b849f588e7d44546f3 c8a5afec0bdc2182421ba8787c20e515 SHA1 hashes: 19673458b7af3eb69ff1ad9022fd9ccb69ef3685 b883d7f8e3ef601f0eacabdb2224fd326b4f977a ced987c416c051f2739cb50f390e4866e4b2eddc 1fa957447a3cc3e40c0054e666840c56c39c1a0a 5bafbda1bae502f4ff30095b6e028844fab2624f f72807a9e081906654ae196605e681d5938a2e6c 74d556249ac4a4a2d91037cbf8c52f60326df416 941d6854f3fa7c8057c3f4830901b8de9d16cbb0 1a5432c12e1cb6031dc69f1d29102e342e01945c 2e920f4583c38f811fdad739ebaf5064badec42d a6b12fa75b1611afa00a82f7e03b5ff1ea3f309f c8faaa12fda4f541d59fd3a64dabd911bf1ccd7a 8efb98cc9bfe27d1578e8d0862870302eb306796 SHA256 hashes: d3d26704bec211758f73a18cd7b22819a200b45f14b23e1f9d3c023060c61097 9f84be3a53d5f2a03a9ec2e60093c70293e15fd91addeb3936fd1f8c3b013b1d cd63c2987647aedb70462b7879048647e9b5affc7b11e0a004d5b800618d28c8 c74d54d794204fca803c4b45c03c1e7d81f065ef191e213c6446743fceaee5ea fb21b98fb485e11877b74dcff297aa2d859c8a3cba0065a2d2e9b3c8b4f4faa2 553798e29693f796e9c77c9a3eacd06777ad43352cf51c51acc1fc9a2476c489 f63065862632422b5c8a0259f35f6807a63df59d7004dbd8c563938175b24c20 542eb075d898836543909c5cf853a6b7dcef1f21f5af7feceaa6e4fb03f8e67d bd44aa56d1c513b9bace89b0c148d7b4cbc94f159b0c5d4ff5633fcdef785495 0786bd35f658be0dcf6a13859ece91e5bda2f7bd8cf87ad1b15c77fcb4e8523b cafec240d998e4b6e92ad1329cd417e8e9cbd73157488889fd93a542de4a4844 acda9197b4c67f39e6caa8cb61dfc9346a4b44c1ef92d07b6c1e16c937efea76 9b883e87c9a032978eda9e54d2a30cb70d353b3990a6dad0f03120d94f612be5 SSDEEP hashes: 12:QZsiL5wmHOlDmo0qmUclLwr2FlDmo0IWF9klrgl2FlDmo0qjKAev:QCGwv4o0hlLwiF4o0UUsF4o01AM 384:7TwY6AOm1DdKLupeHXIYy9dNeeGYyiwBNr:7T96AhPKKcHX5yHNZp8 1536:Cpm6tCKIvyL8nm4ewkcw3tDbBkIf3x1YlGKjmB8AeOYbdsmhgqCEPc85qOMXNaXb:CVYe19FBkA+/OYbdsmhgqCEPf4fc 98304:eMGA/GKxx3TknUXUGG5ghUA2dqGJSkIX0BLNYDodDygooqgcZmOf9XhzuALXwHKA:eMGA/FxVTp7MzA28GJRVlNGabiZv1Xhk 1536:Nu4ixRlEDvuQH/MkWMd9ifhDn/Kx3ICqio3zwX8r3MD7:cNAvuQfM/Md90/Kx4CK3M7 96:NLHioTEY81RX2gKeSTNEovrlPN10zpe19GD:BCoTEl1kNvrlPSe19GD 1536:BlCmfsY8JnB4x1VfH0bZicdnrVPabSNt1V19qjPu/IlW9+0kUP3M82+:2mfryaPfKVVybIhT2ug49zP3Mz+ 24:9ZqHbGv8pPg+YEJo7QmwOTdfUBo2Wup2NSUDs9WIQBYu1r9RMafeIEWAVuuKh8:9YhJTKxwOpUoctWIQCu1pRIIVAsf8 3072:bGzbxXzX3bwZEOCIF5ro9KZiqTH51bQHcjLg+:bGVbgY++9KZiqTb6+ 6:JeQmnAxir8KeHhITGM3YMtkDx28lNh9tDbEdTH:8QmTr8bBISiYMtkw0P9OTH 768:au6jmWo41MumWNsc7gHaJLTvygWMKvGRoc44wM:aNjmnjtsv7qaJabNLM 96:/yYXQchaiVVYjlU2MAUKTccRgeK0gmm46fhR10lDW:qYgliAZU2qKock/mV8R10w 98304:jh+KH6gpIMjAGSivAWb7ykDN63poACCKQtDzxOH8zkC694dODfxTh4IPQQZ:XasIyAGSiJbFKpoACuzx4RCK/fxThLP/