Gandcrab Ransomware v3.0.1 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Target: win10_64 | exe
Classification: Dropper, Downloader, Ransomware

8a1e66b4834499dacc24abb27733c387733d919070fc504b14ee865678952559 (SHA256)

2018-05-22_13-47-32.exe

Windows Exe (x86-32)

Created at 2018-05-22 08:11:00

...

Notifications (2/3)

Due to a reputation service error, no query could be made to determine the reputation status of any contacted URL.

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

The operating system was rebooted during the analysis.

Indicators

File (1043)
»
Filename Hash Operations
C:\$Recycle.Bin\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\$Recycle.Bin\S-1-5-18\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\$Recycle.Bin\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\bootmgr - Access
C:\bootmgr.CRAB - Access
C:\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Read, Write
C:\Documents and Settings\\CRAB-DECRYPT.txt - Access, Write
C:\PerfLogs\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Program Files (x86)\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Program Files\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Recovery\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Recovery\WindowsRE\boot.sdi - Access
C:\Recovery\WindowsRE\boot.sdi.CRAB MD5: 427353d47c5fbc4cbda07f809f2bb0eb
SHA1: bf9d22b2b85c414a3162c2ef603d39b4d81a9303
SHA256: eb8e7876781a7c49d9098eadd27c4103524e147ab370dcc1abda785af9337315 		Access, Read, Write
C:\Recovery\WindowsRE\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Recovery\WindowsRE\ReAgent.xml - Access
C:\Recovery\WindowsRE\ReAgent.xml.CRAB MD5: 200b037a6122a3a16eb786919b60d2f1
SHA1: e6df5d099d2a22d8de0099b23b1b4b9956fc0f3a
SHA256: b3a8d25aa275354cb911de190f833476a3315bcff0b61fed6907a4df365f2dfd 		Access, Read, Write
C:\Recovery\WindowsRE\Winre.wim - Access
C:\Recovery\WindowsRE\Winre.wim.CRAB MD5: b44a1feee8007fe9bc558533a90e838b
SHA1: 0680eed2cc1c5b1056965f4be4a3bd5515bb6f35
SHA256: 280f4be3e3bd1a097e7be2b7d42900ef299e836861e2cf613aa9c0035748c8be 		Access, Read, Write
C:\System Volume Information\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\System Volume Information\IndexerVolumeGuid - Access
C:\System Volume Information\IndexerVolumeGuid.CRAB MD5: 4fa7d2739962e0e1e9f19778ab5c46e7
SHA1: 1c5e8e57c0ed9c946d49f1e996eeca4804c34b8c
SHA256: b8f52bd0fae5b82304cccf4357a079e3c9d242e54af19aa6ec0f6e9a2736f12d 		Access, Read, Write
C:\System Volume Information\tracking.log - Access
C:\System Volume Information\tracking.log.CRAB MD5: 8d4cb64abf26981e06c79928a1bbf534
SHA1: 21316c1fc14aec6e797eeac3ab431add84e134da
SHA256: 4fc5fe5ab2e0ec58e40c1b3cdaa3026850b5a6b0c13f07f46ea11382553b0026 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\1SN5z4IGoXLWUASwR7.bmp - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\1SN5z4IGoXLWUASwR7.bmp.CRAB MD5: f50b87497234bb4371e29c70a7fbd5ee
SHA1: c9e372d247cb30c71cb223df4d18f1340da0f130
SHA256: e54007eda9b8b23fa070bffcb4b91d0b04ca700de297dcdb7ae12942ff9dec52 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\1ZUAICRNW.jpg - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\1ZUAICRNW.jpg.CRAB MD5: de6578bb5ed47070134adc8e45205847
SHA1: cf799e47ebb8c0c4c441a065587b8624a37e8cc7
SHA256: e120d9f2a01e1a7c2bf3ee6f086c53d66b96e4dce0bf36930b3391cec745fc80 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\2nMJKjaaVFC-pzpkY201.bmp - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\2nMJKjaaVFC-pzpkY201.bmp.CRAB MD5: 91b39a9813d299b17fd8dc7c39161c4f
SHA1: ed2108134cb10c485b9fdb9beee827a9f58bfd12
SHA256: 4355bfe98d23b87bc32f1c945811696fa04509989e242a58d87afa41d6122c41 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\4buX8EgM.flv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\4buX8EgM.flv.CRAB MD5: 527c974a376a7986dc68e43b6722b19a
SHA1: c03d458a813d416ef1345b1076ae60a2b1b30e61
SHA256: 9426846c3f9e68febbb88d36431499929614f82e21392105a21adf8708224e7d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\5mRMlfAb_YTR5CYhx.csv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\5mRMlfAb_YTR5CYhx.csv.CRAB MD5: ccf0e9cdebe3a207f0309048e9a2219d
SHA1: c98306a69807a7fc854ddf43c0b7bb32d3689637
SHA256: 6512325133f34bd00bc6508a142449217532216c74af28c58e8258cafbffc159 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\6EvsKbCaqNJNGxe roT.bmp - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\6EvsKbCaqNJNGxe roT.bmp.CRAB MD5: cd3aa3fa3f9f2623ea6f764589661853
SHA1: 0230d257015b24513e08a26845c1606479bb4a64
SHA256: 025b41f5eba1a75faf451efdafbe6f557ee5764e0b51ab41c53c055b3ab4b7cc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\6uLyRSDrcdR2G.png - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\6uLyRSDrcdR2G.png.CRAB MD5: b4f4998b3e141eb86f66828fd033a7e2
SHA1: a51873df7d2f7139176a97b18c0f412b4395e079
SHA256: 84c58fd20c177f237791170da33ba3479c15629aca06dd69c5183863f58712be 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Collab\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Forms\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\JSCache\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobData - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobData.CRAB MD5: a92cb33d2e322219e7c24fff2c45c7a4
SHA1: 8a96093b9dd5d6510e91da0ca167c47594e8d164
SHA256: 008a007a8573ef90e93d7cc9399281abb327c24a1d2f252bc68e61c639c3526d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobSettings - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobSettings.CRAB MD5: fe2f65b03fb5445d74cbea3b40f0c763
SHA1: f3b5456eb50630ce4939e39da5b68b48b2f3145c
SHA256: 9b50fc137b57840e92b38548728417ba44f300c493cd8332d1fff9b14ad4fa8d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\addressbook.acrodata - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\addressbook.acrodata.CRAB MD5: 03652c3fc433dda27fdaf3c394e42a5b
SHA1: b284e1ec482e9430ea7f6352772f648fdd0ab35b
SHA256: 033e5b8ddd094d79bbe6d28bc3f89118f557b01deb6bd3eb3fa450234ee3b472 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB MD5: 56408f23dd18155ebdeca5c815d2bc8b
SHA1: f8fb41f675c6a3fcadc5af325f42e422b0a85ee5
SHA256: 490838d372dfe8bdc2f2d4df7a0acad07bc1d730d8918bf99cd8602949990066 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB MD5: 3cb7493a6a147525c80822a30d8bfea7
SHA1: 7025ba538a972e41e96b7d679504f6699e49c383
SHA256: ea61f07fe7acad835b8a8ba03a19ece848329677d5251a7a2e82d2cc9d028af4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Flash Player\AssetCache\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Flash Player\AssetCache\NAHQNPMN\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Flash Player\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Flash Player\NativeCache\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Headlights\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Linguistics\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\LogTransport2\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\LogTransport2\Logs\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\LogTransport2\LogTransport2.cfg - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\LogTransport2\LogTransport2.cfg.CRAB MD5: 76d9bae6ef407c385c1795c798a9fc7a
SHA1: f070e234c8651f58893187b0b385f04e3d064109
SHA256: 3c59cb6955e3f7241da0a64d8cf542a790140c886c1623580c19532dab106aa8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Sonar\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Sonar\Sonar1.0\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Sonar\Sonar1.0\sonar_policy.xml - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Adobe\Sonar\Sonar1.0\sonar_policy.xml.CRAB MD5: 40a79ead2e7688e5422d4333d16dc2b0
SHA1: 17b6ec9c1aece5b25b9b42e068b85718d881ec2a
SHA256: 61287ae06f0bb66a69aedf51755f593d268371013ae0c8423d40b2979bbba0a2 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Bg7C4xyzDiCSWMPfDDMQ.m4a - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Bg7C4xyzDiCSWMPfDDMQ.m4a.CRAB MD5: c1d52402961575dd4590159b49b46635
SHA1: ffb8954664a9cb9f25da44b0197fdeb9aa60f68d
SHA256: 703ceb4feec3c182d335484cc0442d6f6f344a8adf412a592201a5b70edf1adb 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\CipiNmbyJO4vYR.gif - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\CipiNmbyJO4vYR.gif.CRAB MD5: 3f6b410300884631d93e11b8eac3807e
SHA1: 3c449758d569e125ac28d233a690e64f4ca11c01
SHA256: b3825419a68b3425707d103fc2dcc4c481c23bc428083f7ed80e809c5081d7fb 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\d9DV3J2nXmKKe0ZK.mkv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\d9DV3J2nXmKKe0ZK.mkv.CRAB MD5: 9770f88bd4ce5575a595fcfd018ca84d
SHA1: c2b9bdb6049e7d2ad6c00f647995ffdbe655c404
SHA256: e1d4fa3bfea0a34fd90cad33da12d4b02fb0d2922df1493e6315b3ec3a470698 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\DgxZY 8vmJlYtnH.wav - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\DgxZY 8vmJlYtnH.wav.CRAB MD5: d859464f0e4af21144dc71191b5f9b49
SHA1: 6ef59e90af5bf3a41609a8dead9d521756196b0e
SHA256: ae5449586f0a64c1914bfaa4544c7f61a4b3caf2e8025a4ba27e38cd57c7a40e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\ffti16Pc.wav - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\ffti16Pc.wav.CRAB MD5: b5814f260f8a9500347043d35dd79e5d
SHA1: dc50e00074ccf241887e647c8727c7d4b6d8de55
SHA256: 8462241951532cbac8cbc76e3692e762618627043310dfc41a19b269c045b344 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\FGLUwMCYalOqdde5.jpg - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\FGLUwMCYalOqdde5.jpg.CRAB MD5: 694f9a875a60dcf93a5cd09a3fe5a14a
SHA1: 662fd29ed0d58184385afc327789170cb6ad2d30
SHA256: 761beb8c6a5d78896ea379e8dc843e73633203f6cfd1f74f6310e39b4197b86c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\g_ BvK HrWfCoZC-.mp3 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\g_ BvK HrWfCoZC-.mp3.CRAB MD5: c9ae08a831bbe5a179bab70c70ae4688
SHA1: c663331774de26c17dae97c6fffea93cad8ff902
SHA256: 1d8ffb6a5243a68a9aea5d8d1e97006b57b513abf830f366b8a578d50ace9d77 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\gKX413.xls - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\gKX413.xls.CRAB MD5: 48c288e0eb3ac4a5249c58d1d1a153c8
SHA1: ea358cc8fabd7bc993e5ceb9f7983fbd255c80b1
SHA256: 82bb3e788a5ba32b96a3ef4cf495c99c7e52976f3ac9af8524d6236b875f0b21 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\hfCh.jpg - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\hfCh.jpg.CRAB MD5: f4808d18349051541d80e62488d7bd45
SHA1: 3bbd90f2daa8ba8c5ada79b39eee4a56c2ecd7b4
SHA256: 8cff36a2e6e66d67cd77e0f231b91b2254cffc30fb6e3720e73fe196842cde60 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\hNPMPoAayN8a6GPyHRx.jpg - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\hNPMPoAayN8a6GPyHRx.jpg.CRAB MD5: bd68f0741a28c1378710a2e5665267c1
SHA1: 96abb319595c03b4a68bb46b95a2c69190a17776
SHA256: 78197c726d6cc6a47843c16c64261c4a353281e6a167fe30930aefc01bcebe1a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Identities\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Identities\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\lcdz0cE9CPp4KK7l99.rtf - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\lcdz0cE9CPp4KK7l99.rtf.CRAB MD5: 2ff646199fd81e46b2dfb449acbf4e6b
SHA1: 9d8977bfc332d7de1d55763416535c2b17ecfb2d
SHA256: c6c57dd77bbcd752b90bec110bb8b08afa2daddea7cd97101e45e2a69c273dbd 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\lhX44.flv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\lhX44.flv.CRAB MD5: 78435ff300da452030496aa0324ed9c0
SHA1: 175209c8710aa49489cd12e7d20e3f40c6abe663
SHA256: 050bf1639217fd93aa67bad2649fef831cf95e2e72d3e8d2fa865727f082c8cc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\M2uxCiQIOK6.swf - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\M2uxCiQIOK6.swf.CRAB MD5: 379792ae9cdbc9069a9c806edb62d676
SHA1: 0f9586b76b79edfeb1cd3ac0cff871cd40ad3b98
SHA256: 6425748ec9e8d1c30c883531283692b6cc93597636ba17286a47c0faac076ee4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\DQQHJZ8C\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.CRAB MD5: e33d1f98dc0b31f9d6919334bd154849
SHA1: 19a85451f2115cbf4cd5e2229aa6f357feea13cf
SHA256: 7a0406d49269b3c50c2969ee7b2fb97b0b5bf6b50d237b1b4eeded2361e9a632 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\mbVwjaWE.mp3 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\mbVwjaWE.mp3.CRAB MD5: 736103422d0576fd3c4db65ef2a5f69e
SHA1: 34a428023dfa7a8a7694bdac5389f94d88f0b2ad
SHA256: 1ced1dfa3a87c0b68cf6deb0880c83de67d488e40f769e387bf8dfc5f152747a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Access\AccessCache.accdb - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Access\AccessCache.accdb.CRAB MD5: 88e2636960803fbfd29017421924585c
SHA1: 942bc136b2d808622886034d2e07e5b0a813d194
SHA256: 28d6c10142b6232142b046622779a52c96dc9a05ffaa1e42b96db7411e503fb1 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Access\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Access\System.mdw - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Access\System.mdw.CRAB MD5: abbb0ac8706e3b1625aae8128b8af0e9
SHA1: 25cf91a94a871edc3ac463d960d131f921c9f0d0
SHA256: c7d3c51b00c7e139c269b3ef40bb19bfa76319f71534b04cb6034a17a35d955e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\AddIns\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\APASixthEditionOfficeOnline.xsl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\APASixthEditionOfficeOnline.xsl.CRAB MD5: 3f97197873a448066adce281e6583f3c
SHA1: d0bd83ab5fad3d4176f9017d8739490ccedf9651
SHA256: 23226c2b4e0a105268512812cf2c9109beb285c55f13efa8726b382027e180b5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\CHICAGO.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\CHICAGO.XSL.CRAB MD5: 753256337acfe7160e3fc2a8f18b97a2
SHA1: 2674aa3b11abfd73510b9b30bf0f1f5be46c04ec
SHA256: f113b4d23da25c65e9811813811324d342a4d3ca6dc5cbf75435a979b5271573 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GB.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GB.XSL.CRAB MD5: 33c0a266e352be589f954c23f22fb709
SHA1: 6fdfad7710e0a6f2663487e50feaa994fa4fb34f
SHA256: 33b65492b55b66d4e16a56e956c12859e49473cd84e18e3fb789d1cd7cf5aeeb 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GostName.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GostName.XSL.CRAB MD5: ed606308bc47173a3b9d1ae9a0e3e133
SHA1: 9ad4ffa19872487e12cd6e57bdc2d96a2be8c510
SHA256: 2f46f174e49453296785dde3dfe3f37e35466e243e238bc7e05c1a36bc83f716 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GostTitle.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\GostTitle.XSL.CRAB MD5: 3971f2299c6397ee71a253d01cb01409
SHA1: c7ba5aefe28552642925b9f8603c814af274ca75
SHA256: dcb28c9cd18e3374da2927175f88b834f4e2a4a869ace109fcfa3f11e3a31a35 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl.CRAB MD5: 035bf2a24ec9572cda72feb847ed5d4f
SHA1: 6b5dcd9eb3bdedb5d8f2e94319ddc538c013eba2
SHA256: 405b36145d5b1fc35247588fa35e49511f1a45349acd87f42b3d9b71f4f9910d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\IEEE2006OfficeOnline.xsl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\IEEE2006OfficeOnline.xsl.CRAB MD5: dfcc19ba6e0341a88ed95c4a3da277f3
SHA1: e5f7250329368b4e1a801e4f7cba6d924b6f45eb
SHA256: d93a61fb18caea0bf29e5e00b8f62d8452e03ceaad0d9ade7f89445d6d156063 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\ISO690.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\ISO690.XSL.CRAB MD5: 64ce31ba890256f498dc02b4e5e7d024
SHA1: a0bc930bf0183d6c5d5afc041b66692e09520724
SHA256: f06b7674b5b5f62c7c58571eb758f16f97b01462c203451cbd9a9930a5f37ae0 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\ISO690Nmerical.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\ISO690Nmerical.XSL.CRAB MD5: 44cd56bebb71f8e8aebff152cb0beb43
SHA1: e4a2560a82e8f6a38550aeff78a1620475611cfa
SHA256: a57ac6b2e8e20c5dac07a7e34d60b69b5d9cae0739584962fe341171a9f6e841 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl.CRAB MD5: 1284dcb58baf1a3644d52087ad84bfee
SHA1: 63bb9156d532f974cfd26e7d33901183ddd75721
SHA256: 78408f7c8491fe907213f2834e3fd8e306ed7e49b241ac00319871d2431ac26f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\SIST02.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\SIST02.XSL.CRAB MD5: 8a62af6a61c001799185a8292da0ef61
SHA1: 6aa4678aa97060013e5b328dac8cad027de114c8
SHA256: 946cd81ae064655c181c9b711af014dcc374b0065728e20ba35c98dfdb4ecb5a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\TURABIAN.XSL - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Bibliography\Style\TURABIAN.XSL.CRAB MD5: d590d501c32e670b02028048b0250cc8
SHA1: 3df94ec169866045c26de42c4cd99e65f7898a83
SHA256: 2bad0976eecf9bb01e0ff06b23229971d6126db2af62097cb3365f014643e038 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1462094071-1423818996-289466292-1000\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1462094071-1423818996-289466292-1000\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB MD5: 37773bbe5189ff9896de40334493ba4a
SHA1: 408a32011a15357fb550caef9192e678764259c2
SHA256: 7912de082598bca3e6290cb178e4462d4fe7a6660a5d06cef9572cd7980b0ce2 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1462094071-1423818996-289466292-1000\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1462094071-1423818996-289466292-1000\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB MD5: 7a7443d62a571876387c4cb17cfa0fda
SHA1: 3546da88360352330ba5b12e02e52b3914bea170
SHA256: bd4579e33fe510c2c4cd02f03efa6375d5769c2ad3d00c73600473f4cd3624dc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\Built-In Building Blocks.dotx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\Built-In Building Blocks.dotx.CRAB MD5: 9d568983a42790e51848f1f2c46b1d58
SHA1: fed1a2d75f427ea5c9b05fbd704833d30c3b4ae0
SHA256: 550270ca7ebc09b81cf14d46db67bfbfc6bdd41be1064b6be5cd6f89c0086df4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Document Building Blocks\1033\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Document Building Blocks\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Excel\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Excel\XLSTART\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\UserData\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MMC\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MS Project\16\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MS Project\16\en-US\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MS Project\16\en-US\Global.MPT - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MS Project\16\en-US\Global.MPT.CRAB MD5: ce3f6356ecbbe33e5e192feae3454e4d
SHA1: fec3e7ac70f7ad490511b4c48586b9dd875c7e0a
SHA256: c5a78485d5ba6212041231455458f6e491c5652077b66400a4f485b6ee1aa9e6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\MS Project\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Network\Connections\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Network\Connections\Pbk\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Network\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\MSO1033.acl - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\MSO1033.acl.CRAB MD5: cf93a498be88b1bb7a09a519607aa41a
SHA1: 9e1d3bde4b353650bbe3834365690819e6a895c0
SHA256: b99e25d690c92ef7c97524fe3e30515a5602f1f3a15660e3e28845ec9e886752 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Database1.LNK - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Database1.LNK.CRAB MD5: 5e94bd9160a9a0b0ef1a18d80facb428
SHA1: 38c5f1ef9f19964d58185e79f9da37def824641d
SHA256: e389fdd41942ef71d89158cfc829fbf5afd221cfcdf9494d029fcb1347914c2f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Documents.LNK - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Documents.LNK.CRAB MD5: 5196afd04b515e27e8e7c39f3fb95ad5
SHA1: 2e389dd633d9bfa3d2dd0bf0be17fc24d9ca245c
SHA256: c9d6bbe7d6656335dc7a6bfde3a20f712ca1710ba162765aacb39f7bf606a64c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Global.LNK - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Global.LNK.CRAB MD5: c3e60a174b5be27a457d967571aa6502
SHA1: 6f94dbb31fc1fe7c7b6795f5dae2b543d7ff977e
SHA256: 6f9b4e6e33dd0707ac5b877623b62c7a3a4bdd6c53c60f36e7605a6205b151b3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\index.dat - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\index.dat.CRAB MD5: 7b98441887c4dab35d7fdded45937a49
SHA1: 8b55b483b86c885aa1d81795d2729aeed185abdd
SHA256: 37ce53de706003e4c51ca4a07acb89d1c7a85dc520df39b895c6ac5502518c3e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK.CRAB MD5: 644239a39e1a92fa4e2627fa3e15ca3c
SHA1: b0545eca42178545c135c9701a275a14eb1598d1
SHA256: 47928b1466d04251cbaec5f1b38225d90236c9f27a22b60bbafbfc4676d0612d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\OneNote\16.0\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat.CRAB MD5: 5d896e6c9d81766239c3fb1a91808c0b
SHA1: e5e1b6d0eb52457d000dc7c3ef50da209e38e55d
SHA256: 10eec75352dfbdc64bdc086df0a522aa0478fb301679f56b8aed6cfbc52f9bb8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\OneNote\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Outlook\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Outlook\Outlook.srs - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Outlook\Outlook.srs.CRAB MD5: c1f9efa37a8ed31818c98627daf62da1
SHA1: 3d38223c2e3676df4c7ab84825854d991777a8e8
SHA256: 65e2383079b42bbad43aa1ed5f6722c248d4d561960b7b2666ca28d5f5cc64eb 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Outlook\Outlook.xml - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Outlook\Outlook.xml.CRAB MD5: c3b2f987a50e6b1c57b315b9f02b36a2
SHA1: f15cb337307489bf9684c81c019d36b7135e8539
SHA256: 04ec43fb0f45267ab5f20a1f37af75e0afc4b1925f1eef78aae5a1157b8e86d8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\PowerPoint\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Proof\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB MD5: 6f899e433aa2ed4a345d6929fe6f8dd7
SHA1: 67cd99949c62e8d0fe4be5ee5c962a6aeb14a511
SHA256: fd922eba0288a448d8e48e5a27e02d09731f8e4a05827b104512ba5505ba6d53 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\1c746130-55ae-4579-a953-fc484f604840 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\1c746130-55ae-4579-a953-fc484f604840.CRAB MD5: 85aad3218d990218e94e2bdef4cbd16c
SHA1: d9894cbe46e5d9dc2675d575dd4f4298fa642bad
SHA256: 2801e25eec0de0f1eda59bc80628283153447ea86c33ab93e0a7455bafc3c224 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\496f2c5b-a90f-4380-b805-3bf6ac63451b - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB MD5: fc2f06736b119b70c79e6856d85b9e66
SHA1: 57728355f7781b5a3e3f1ebb205dee2c0c179835
SHA256: a8c2b157e5fd82ff06d834b4e1d6e4cbc38669760d78cecb228b43bf3451f3f6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\5b8a3202-35dc-4437-b5d7-374f5e872415 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB MD5: a439051a065b7d5248b28c6256367c90
SHA1: eb7164b7c7760b67b1bcb2c08973274c7fde9e67
SHA256: 5579c5f4921ba1a6055d8905f413b864ecafb81ebd9cf63ca0fb7fc4ee159b38 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\d7746ecf-458e-4e71-8557-8ac80457022a - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB MD5: 7a526e3ed35469726ed7a0c706971911
SHA1: 7b852f4a6bf64216dfc9f60668187a34bb065feb
SHA256: bdf3851f684e0c0e57c329d541687f26230742cb6187f8cdab8e20b14e9bd285 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\Preferred - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\S-1-5-21-1462094071-1423818996-289466292-1000\Preferred.CRAB MD5: 6e1f84f7e787d9dc56e2987d9b12c5c0
SHA1: 343aaf2cb5945446a7ebfe80bb0dbf8b46da939f
SHA256: b70adf0309718c924e66eb0cb5091bf9a7ec5f7d9bb4d75da98c4add06fb2cda 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\SYNCHIST - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Protect\SYNCHIST.CRAB MD5: 847ea50e569ecc47f0b81240a31c7193
SHA1: 66706a4719a466604fde9fbc1fed3abe0d9677f4
SHA256: a1755abf186c4aec0b425265cc196739df228d2529717b45cc4a3c9ce56a29a3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml.CRAB MD5: ddd7cc37597ae3857977380838990242
SHA1: 79c37b86371a8b11c633c9bd8d05ad158bd25186
SHA256: de68fc62f02dde3db84a5490bb4fd3ee78d00473d2918a0191528400fedf7af0 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Publisher Building Blocks\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Publisher\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Speech\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Calendar insights.xltm - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Calendar insights.xltm.CRAB MD5: 5915eae22dc62dc2d266b794cf5b8e35
SHA1: cf0e91bd954f28bae7dd85b09ff8a27c68363b80
SHA256: 59a91838d65a0d53f87b2f41e9f73fd95e37eb0b20b862cf901be0e0d5974257 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Cashflow analysis.xltm - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Cashflow analysis.xltm.CRAB MD5: cc66b966136b8ca5bb967a360f59e6f6
SHA1: d82276e049004f6419f9a86e76840465420a44a2
SHA256: 23420708b5de11222db26b0eef42bdd5094fdbb8b553085fe2ab058f98b88e4c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Email Insights.xltm - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Email Insights.xltm.CRAB MD5: 825e47c240fa23896863804e07b37019
SHA1: 859f750979185b07e0871735dd86f1face53f508
SHA256: aa88a4b08d1c9d1410613f99a464f27845dbe5577d961bfd5469df689baa04b5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx.CRAB MD5: 2e3907cc8e080969508afb5192cff9fe
SHA1: 6bc55879b366625acad7a10c5826494cf8569eb4
SHA256: 828a6f913780d402b43eec78eb75f01cd770e16ea49b18b948e7a2e496188b4b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx.CRAB MD5: 78831e17d1267e8b436011365874f1b9
SHA1: 12337cf79286fd319a16859a4a443eea7fbf4c76
SHA256: dd49c6680700ef0950c68951248c124ed6fecbb92eeefb2495fca2ecff006a8f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx.CRAB MD5: 8c105872411103f24c38bbfb00787a76
SHA1: e5ba94d6d7ddf0908f2bc5c05e19b5a4c67bdcb3
SHA256: 5abe687d7fa8ecfdd2b8551c3e41d00707bc695fa45eb0089ae4d119b757a7f9 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx.CRAB MD5: 685c24d2f38d8e360f4ba7068373a8f2
SHA1: 6eeac9660e1990c6e4883105da5081dbdfbf49b1
SHA256: 350886b7972e7d5d314969e5a098c57bc1ff17c4dacd6a60ea18b3edb560e8a6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx.CRAB MD5: 9a153dcc009bbfeee64758c5639f412c
SHA1: 7ceeb37cffee0808b8944cb98c9ff4f5e733648b
SHA256: bc1c39aac5fd44a753baa42f2cf2678775961258c09b56f472f234b2df609db5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx.CRAB MD5: d48a0ed75333e6f1fa20afa0a89bb856
SHA1: b614e68bc238cb26a2d8b93b93f92d497c9ae003
SHA256: 3032dc917db8cc91e37d2f5950656a8c4598164f074fa67cdb6b76035a4ee2ce 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx.CRAB MD5: 338099e7c5a25eb8e1cad2636cf3790e
SHA1: 6e5c1db0db965b14eaabac88555e6019db14d7fa
SHA256: 0a9cda9cd04acb56c4b8e3ee8f0045f2aa8b73dabfe9a64a63cae5924e235181 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx.CRAB MD5: 55c7f5a9f749b7c4c5f5e77c218c6faa
SHA1: 2f932919c8a16331eaf15bb892107845027a2c23
SHA256: 58d9e58e3039d0bcc14c83298835168c6222c35f6ce750d551dd9add7c10763c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx.CRAB MD5: 7e1c4abc1364d34e11857479c5b677e6
SHA1: ee2b6c20e1fe0b41ea95b053e4917867fb4424ce
SHA256: 8c3484b5e371c8951d983dd64b6a2d35a676bccc2288e8038e97010a957bd9a0 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx.CRAB MD5: 8dd8cb916cf26122cee5599cf1e44bc3
SHA1: 032b84c2dfe6d1cb07ca9c56cc820ae6cbd92c69
SHA256: f3bd8c248a8a9c70d339165d62e9fb608db594ddaa1d0538fac0b8e2b3cd6c7c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx.CRAB MD5: e0b852fab3827f0080c2aa1227e330f9
SHA1: 88ec774209666f25e8902cc169b8c35106396f68
SHA256: 7adaa50cbf43835c7d8d406bfd6a68778a351e09818720338dedda93e4286071 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx.CRAB MD5: 441879eb46f94102ce72d1fa5626dbed
SHA1: 14b3f6386dd1a2442a68283d22f40dee2df5cba4
SHA256: 3c9764d107a20212fbe48c54dfdcd923548eb592c671bb552b69e779f1097f8f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx.CRAB MD5: 2e3ea8cf3d8b21cb8279c2d0ec41b720
SHA1: 41eedfab2bebac89b4ee1e7ff6b6960e438e37ab
SHA256: 91ae4789fcbe10fc2d89bbf9c890814a1c1b1f9501a1ced4cb7cd44947b7a2c1 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx.CRAB MD5: 5e86f3a0535d2d36e2c7ae15895def13
SHA1: f5fa6c42c521cb1197bae1db5d8eb6887f7f8b41
SHA256: 5a1782db00708eb82a93402345e271a98c12b699cdb3d39c74fc327e32af19c3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx.CRAB MD5: 851f9b51aa30ded25186ff25816d0fe0
SHA1: 49b3f5d005e980012fb92621189be79b63d10ac8
SHA256: d5812bae59e46517e87cfec8deb363aa55ff66f00a0393666df4ceed6e871f05 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx.CRAB MD5: bd3945480d22af40c43fcc16b7299e60
SHA1: 66d74d4b16d6103a4b0b0be6e61e9891dae1659a
SHA256: 9cb09adf29585064be53717b5125ecca9e7c585bc967194fddd294dc9241f392 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx.CRAB MD5: 1b3c17419cffe48c7eb4669136a85a1a
SHA1: dad43ffe2e15d26dade95badf8b98de914a9cc1d
SHA256: 1971f8660fd148dbda4f0a4247d52c28cbc7cd902abf209b4cbabe1f76a748a4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx.CRAB MD5: 64547bb00986157b2099772ab0a3a024
SHA1: 2a93d37e2eebf223b9361078bab0f4bdb0da102f
SHA256: 9bd7d63d20238068ccc1c0ca15214058ce7312b3cf17e3f2ffbea61db6f87834 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001103[[fn=Headlines]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001103[[fn=Headlines]].thmx.CRAB MD5: 036ab9517946a43ba6959c41f8cd15f3
SHA1: 6fa0b84c8f919b092dd35c827126dd136733cd4f
SHA256: 40649c46362f83977913904cde31c77732f18a513585304444d994599a2a6243 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001104[[fn=Feathered]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001104[[fn=Feathered]].thmx.CRAB MD5: aa93ced7e6796f7c37741a49095afa04
SHA1: e2c447477379c9253cbe9eaaf16ac12d7ede40c9
SHA256: 979fa4e90589c7756b9e1eac0597218a48b063aeb5961d212459d76360a3add4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001105[[fn=Crop]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001105[[fn=Crop]].thmx.CRAB MD5: d33eb6c73e332500b924833281858e49
SHA1: 3516407ad4f48610b9f5c15917ad35e8127274ad
SHA256: 366e9c5144b62c7f21cd63666a0ea49721eaa810e99cd6d5e6bd33f542543a9c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001106[[fn=Badge]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001106[[fn=Badge]].thmx.CRAB MD5: 323bd0784067657c67b445d91584fa87
SHA1: c018cafc129cd8a32f5ef1b63592ab76ca673967
SHA256: 8b81634ffcd189073227c330325d378495498c0fdde07a046a9a3ad8e5246b81 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx.CRAB MD5: 29f54d3061b7edaad9aea21fe46f4d18
SHA1: a09bc9b0a1543a78f12ba27f68ed71e9b4061a2a
SHA256: f091130e28867d96effbacbdaf6fd68cfc19196002bda215aa5b3ddf6ab2a1ce 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx.CRAB MD5: 82d80fcc7496edcbc921003bdb632416
SHA1: 8f4732a89d028b9e6e69ad83db1f3d78bb9f4bcf
SHA256: 4fba2da0a76390c92a403871c51f243bbf80534bf8150862a4a565320ed7fef2 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox.CRAB MD5: 0bb4bdb1ad3ae30331cd4a7b9166de20
SHA1: c3f7ef1e109299f0cfac20a264a5577f18d76c30
SHA256: 57104660f4fce40fbe6d7cbdae1810a18dbe10ba27475f45c014d8d7d22b2713 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox.CRAB MD5: 7d3cc5fe86147052608e80aac9fa3004
SHA1: 718a7c2064048f0ca00d65d53b8d536548e37dc0
SHA256: 0dc28d88fe6a157353b967090149ccd0592c9f93a8cb04acdcc0f6f33fb7eade 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox.CRAB MD5: 23ea5cba7461185330eb220ee040c2d7
SHA1: d1aafba0da575942baa12353cfea132cb17f7f61
SHA256: 2ff304209f1a3bfde76102c63d2239714ab25e86a85cd21b34bd493ea4bf2178 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox.CRAB MD5: 3b55755a51ed19d0939e458c0af506ae
SHA1: 00b124472797e7dc38981e33a7e7b979ad4fdb08
SHA256: 3ea9c9ee9731f967b6361056ff78e7d4309200a352a65c0d64370e7b76c4725b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox.CRAB MD5: d37b6720e3da80a9e7375dfba83cb767
SHA1: a15f1f387b85b37096bac8d5fd3dd6eb77a5f91a
SHA256: 988f9e3c34100b554523461e31fb45c445f1bd0d617bc01ca25864b74e5ff273 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox.CRAB MD5: 91c7776f988133d5309c67d4bb76ddd3
SHA1: 112da68a210efad7eccda30181f28992b00f3748
SHA256: cca1b6738a42cacf7c627bfef4b84cab0792d367b793eac9fd05f06e4ea7e683 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox.CRAB MD5: ce35c09310cf8dbe27156480bfc2d911
SHA1: c91ea9bcd23bb14fd999e57264142eec5e8f2541
SHA256: 5b702574c138f06baec1f8efd75aae1e1d8b939737e4d8aaacd0c09711f4d208 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox.CRAB MD5: 659b2b07d1ba7af090d406281e227a7b
SHA1: 04e9c1776f4dd8d526ddf36c4514b336808e3957
SHA256: 706bc7c46bb49eea39b7c1d846d9cd27ff05dbb1418e02e0a40aad9a8f541634 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox.CRAB MD5: e5546c76773f7f0d46c0c1eaf624ac0e
SHA1: b9ae5d745347f5ca879ec9fcef9232475e2f1bc1
SHA256: 68b17552576329270d0081aa045a1ea86b75d0a742f7e33290ae4b150f3de409 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox.CRAB MD5: cb5c3bf20c3a5658b93b70b416d51ead
SHA1: 419a0af6172d884db103b4577552d19df2fae4ea
SHA256: 26fb275758375bb40156bd94103f12a5cb60a46652814ce96de9c732f2ee7229 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox.CRAB MD5: d16923b96c9f944396e9bd955a42c481
SHA1: ae092a33eaa78db184e779abd7dbf4e06284028d
SHA256: 6dd1c1b5c937c6a72767d0e5e94da683b7e2d0f9b3665c6e1732b80df326fed6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox.CRAB MD5: b846257f7adc20c63b5b12dd3dc72ffa
SHA1: 88d56db603feaf6c92265166c13d0e93e41008e2
SHA256: 6fd7770b09742ec9321ac681089a0f8a26c40508c4c6ab00d984e86c9a2062aa 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox.CRAB MD5: f557c122ed9a2a57c6c5af844398405f
SHA1: 94bf3cb35fe730a8de7e321dd485f797ac17ccf3
SHA256: 38e3b63dd7818857a646fca451562f8c5df4851673af40e98ea5c90e91bbe69c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB MD5: 35e7efa01ee6dafc1e407b76cee86094
SHA1: f103f130f75dc84b735332b7a8707416b44ee483
SHA256: 503dcab3ed2c6f3a4fe507751e45c6a9f845b38fabb302d3efcfdd5015af96a8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox.CRAB MD5: 03b725d1151c11b5b8d6c4b3b742a34f
SHA1: ac09bbd0999b3383f2d90eadd80a46881c5720aa
SHA256: caf95325711ca6b8fb346665b1a21197f2cebd41fc47518803c3a6f71a0cecdf 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox.CRAB MD5: 91b581dc3770907db81085259e754a47
SHA1: 6995c2a7e39f752ffc01201007432c935c513747
SHA256: 6543e2f7887b30ca0e3fb4960ceb876ddf762fcd712ec98e9440ef1a7b55ad92 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox.CRAB MD5: afedcf41a6360814fbcb29594b17ce02
SHA1: 87358e990dbb61b3b69c087301337ec61e8946e4
SHA256: 35c23e32758bb8c902c4d925e0e03967b3c361fc72b304cf8a7c8384dc1a5bce 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\1033\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\SmartArt Graphics\1033\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\SmartArt Graphics\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\LiveContent\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Normal.dotm - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Normal.dotm.CRAB MD5: 6d814453a37fb67bedede6c331ab7a58
SHA1: 974806d95429996e6d5a98c5c90361258325df0e
SHA256: fc20cba2631a2575c8c3548a2ec31183e08952fa50a161078255345ee07f1133 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Process Map for Basic Flowchart.xltx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Process Map for Basic Flowchart.xltx.CRAB MD5: 2cee03f664df22eec8d8a078fe158115
SHA1: d351f724259c4f8df70f68bc28ff38e5b3c98391
SHA256: c3a8431528c080c162a0ffc07cbf9e6e3b0309b53bd9882896a765beb3445759 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Process Map for Cross-Functional Flowchart.xltx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Process Map for Cross-Functional Flowchart.xltx.CRAB MD5: bb206a7646aeb58f84ce41c32f7566bb
SHA1: 6fadf11d78c04c739ed0469f062452f3834c309e
SHA256: 30feff1db7f42bcd0e762d3917b82324ccb30d80ceeeb1fbcc5d086c701b95ba 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Stock symbols comparison.xltm - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Stock symbols comparison.xltm.CRAB MD5: 879eb3901289d988e007e578460c7f4e
SHA1: 4fa586fa003a6b35665cb5b639c24f8c7137ae83
SHA256: a04e562404563c31b3945dc07f247c957cb90712d772720eea0e0ec7e6c7d564 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Welcome to Excel.xltx - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Templates\Welcome to Excel.xltx.CRAB MD5: 4deac270584396aef84fb40f30fca057
SHA1: 5751fb0c58c8273a8705024094352e36c112adac
SHA256: a044f032137eab6f6c55ea4704270c88c6c4c5bb68eae8acb6116767f05bc61a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\tlgmea.exe MD5: 0f8ee2aca89c33231a50ac71c1e7761a
SHA1: f6a19a9971ee098b4868c86a444216e236bff37e
SHA256: 8cfac092eee191351171af55f912e66bfd120ec62fe0ec792f56b10aa88cb761 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\UProof\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC.CRAB MD5: 562b6ecbe3f6ecac78fbc06f87091c87
SHA1: c8aa8f529de494f6b51824e9e990b70a5faeb0e5
SHA256: 1746e411e9c7227f358e23187c270065f064525e705bb9eee239ad2a5481ee51 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Vault\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Word\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Microsoft\Word\STARTUP\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Extensions\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Crash Reports\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20170518000419 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20170518000419.CRAB MD5: 863f719bbb0c84c30e99731d0ae47dec
SHA1: 02399cc8d5ce6c879e5d8a9459e638a686610e3a
SHA256: 23e74f270c860ea1361e12e6230ad551965cd5a4cef4b9bdef13137c049f86d5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\profiles.ini - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\profiles.ini.CRAB MD5: 04ea846be3b6c88ecf43668e0dfa41bc
SHA1: cf50e8de34af4c569e4ccdcd8fb1d445ec0f8385
SHA256: 5983ebb97ae42557c4fa9de038822602354dcafb44edc5826ff91f933fbfdc33 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\addons.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\addons.json.CRAB MD5: 5237bb5d611a4f5d6684c569a373e194
SHA1: e34b4855880327b3ff66a6cffd1fc5bb9a5a7374
SHA256: 2e2db1430abff141d60332e86d97adf68c45b3f6b6af5b157ca925fbf88f135a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-addons.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-addons.json.CRAB MD5: ccde482d67edc97ae152e37216fb772d
SHA1: 041bc909fa6d52300c9725888a3214d1e2c139fa
SHA256: b74f64e882376cea38aa7822acb27b9107d1a3ae478b3ab8a1b99263d0fb5e00 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-gfx.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-gfx.json.CRAB MD5: 55322250120ca9a370203ab002e9b0c2
SHA1: 315d4c56f7de4e7ac0f435b9c6a59ec645c0b2d6
SHA256: 075cfb07a6145062c2ac6b3bcf5d5b2f22f1c7f01112bba2305ac87be12ed08d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-plugins.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist-plugins.json.CRAB MD5: a7e1411f694bdf80c9367243e1d0cbc5
SHA1: 9ec27f2253abc0a5fe71ff61bba0085ce9d45174
SHA256: 5dd70301b4dafa4c7bf505d51e211b90da04cc3524ed27d27d5893bb28d58410 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist.xml - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\blocklist.xml.CRAB MD5: d2652cd15f97265e85cdb09917be5ab5
SHA1: 46f41427644d4d23202d6900a1cda731c063cf74
SHA256: 31bee0f419a4615864c648ea36db8ddbc128f8404863b0d9fde89fc18af5d247 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\bookmarkbackups\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\bookmarkbackups\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB MD5: 186d4318db722ca18d1fa4ba6c9ad186
SHA1: 1f7304f8f7ff0a9c74a9a72c8aef7df1f4e3acad
SHA256: 9822d7f3b7dcce39fe8e3f4fc3b242dfc92105efe9aee83751e863d78d8b6be8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\bookmarkbackups\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\cert8.db - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\cert8.db.CRAB MD5: f253cee4b35ea8b0a5e3805b8ed24e4d
SHA1: 78e82d43deb51f31e6537e371255f662c78761ef
SHA256: f6d60fdbf2e030a061c7b491387728be986c6e2c6546ed034146e596a854fe76 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\compatibility.ini - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\compatibility.ini.CRAB MD5: d6791e1048ba883792303c6b1e0c219a
SHA1: 4adf6fbc4b3c5ae74db6a88dde57fbca10b1b61c
SHA256: 7606eef55b7242341becda98c648b63921753414bcd652fb4d932f8981b3856b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\containers.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\containers.json.CRAB MD5: d2de83ce134751ee31e5d5d3ec8428cb
SHA1: cee0038cf299a716e8d65ee6a261a6556a7c585a
SHA256: 782dada38b3a83f5b6a1a808bdea52aa576a76b257ed6b1d7043470fc9862839 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\content-prefs.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\content-prefs.sqlite.CRAB MD5: 73e0d7f76779eee128f3adcc48cd05eb
SHA1: c8bba45c9d081a72cc9a600be7cb19934c78427b
SHA256: 1f4ffdc6ae31b78576a50c9f9f62851ccd2d9d20e0ed934a76f89086d2c8d0bf 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\cookies.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\cookies.sqlite.CRAB MD5: 1a66e6875fae5a0453766f10c5f1760e
SHA1: c858ba28e1ccf68d70787608340af6e41195e355
SHA256: c9e8ee61891f01fe85b58266ed303bef4f898bdb6076802a358af82fb08f3bcc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\crashes\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\crashes\events\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\crashes\store.json.mozlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\crashes\store.json.mozlz4.CRAB MD5: 2963e10ac7892b61f68b8fb42ee33a56
SHA1: 7489ac1072d8371baa91c684ecdde22126183f4b
SHA256: 73995262537b702e96e6193b9e1b1dbea06f5185e1c177aaf7a8571393c20595 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB MD5: 6456bda15345a28851d2005ce4a2906b
SHA1: e22f88056a400282b8c906ca3228a4d1f4615571
SHA256: c9b84b9d9fe9e757f892b5349222554a5462fe9116a9e13bb16b9d0b0ace0a60 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB MD5: 2aa0203060e62874b35f0e0312425aad
SHA1: b96b38b62c5048f817296551a953a03a90c509e8
SHA256: d5badee0e6721e57526972971c07929c8b242a932a7ba147f722cda0205f8b95 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB MD5: a492befd2051d69c4a46e7e06f44d1d9
SHA1: 4782e481f9725399f3ef188efb41456e5b2f58f0
SHA256: 396577dcf6dd7ddc21adb52264863d6d7e42a013d6122d03050cbfc1abe11917 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB MD5: 9e0dce18fa4dbfe99fbb2566edd59dee
SHA1: 561153d5aead3c1dea043117c2f9f011cc794345
SHA256: beaeb5ad8fa063490b3ae688557632e8905c529b0cd3caddb2b23c9cb1040d2d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB MD5: ae098c3662630744ae6df4247d54549c
SHA1: c9908e10e9b45902d2026004f1cda7550ca2c81d
SHA256: 63a81b6f6bf73a3a984444a4de7461d24e4246da6ad7672fa5efa11a8a754857 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB MD5: 5d80bc8bbe067206be5f7e58539c8f6b
SHA1: aca4e9498b3715f1878ced9fcf910f40d68f63bc
SHA256: d809784e1c9b7b717e3e7154fd7f571cb4fe8a7785368b2cec7c943a87ac223c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB MD5: 0fc1c1415649641b6db0a06730a39cfc
SHA1: e9e1c2f81f5f1e596c9dcc521535035e753655da
SHA256: e98d4ae467ae0baac25a832af03632bc22be97eb25e0dfc9ab1717c95cbe529a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\2017-05\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\archived\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\session-state.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\session-state.json.CRAB MD5: 8cc3ac066c912b6eaae37855f86f0c5b
SHA1: 1a07f39423d4ed835eb9db182ba78d32f2cb5231
SHA256: d262c7051aa426f3ebaf45cdcdf58e21a38534d0b14855f05a3c785877047859 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\state.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\datareporting\state.json.CRAB MD5: 11bad4daf90471e9617757049188247d
SHA1: 37cd5bffa0654c1c51b8ca2af6b61e3b8af8019f
SHA256: 5d98c23c5f736c60c17c0fc3916f29ccf7409435c510b5956de7e3e51061c223 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\extensions.ini - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\extensions.ini.CRAB MD5: 27c7e0bd228dfa1c4fbfb0b7c2db8d87
SHA1: 03f48eeb4f83c848c1fe41f0d463da1898c29120
SHA256: 0a684a1dafff52829c13c6575476a49c5a6cd8e99a1196d7f042c3a251397109 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\extensions.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\extensions.json.CRAB MD5: 7285ba2de87d56918b5d5e02c8f30077
SHA1: 3b89e180d08e6b44dde0b0f1a107f1d5c05cc96c
SHA256: 792ba71b55f580233e561bd95a3ba91e0d618fba43d93f45170dbec4587acf86 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\formhistory.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\formhistory.sqlite.CRAB MD5: 20c9ba358fd680bdcf575b09dd9636e8
SHA1: 01aa86e1de7e06be0b74fc2a304968833932f14e
SHA256: 05b7815a2ed533343dcb12172fd8cc57540347b507cb10c3479c2f8ac7abebbd 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-gmpopenh264\1.6\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-gmpopenh264\1.6\gmpopenh264.info - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-gmpopenh264\1.6\gmpopenh264.info.CRAB MD5: 48c99ae207ae0fe271cee6d85366691e
SHA1: e1c5587f011184b045adce40e8562e5d8c664408
SHA256: 865fae515e7c34eae2854473565c28043347a7eb4889f26f13138f553483e40b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-gmpopenh264\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\LICENSE.txt - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\LICENSE.txt.CRAB MD5: 0b93478045268b1b6b2347ee864291ce
SHA1: 243c6d449936626a578457c09b88d35778d05ce0
SHA256: ce0377ec127115b385ecee8c65a493a1c673d03417ec105aee74dfb0aa1f7daf 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\manifest.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\manifest.json.CRAB MD5: 8f82f272665570300be2401f3cfa6df2
SHA1: 45d3a0093510c9776e70c3e680f9853965954768
SHA256: 4914f23a67cd3e0af5dbb9277b33f03705cd47d4d5f07137aaa3bd09a75e93d3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\widevinecdm.dll.lib - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\1.4.8.903\widevinecdm.dll.lib.CRAB MD5: 47f45426c220917da97befbe65e2f774
SHA1: d018dde9d71ddf8755204d414967a1fb600223b5
SHA256: c8d18a8cdcbcacfefd664dbd3a17ad6ec52bfb293dd62647e0eb8fd55f6f4d23 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp-widevinecdm\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\gmp\WINNT_x86-msvc\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\key3.db - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\key3.db.CRAB MD5: 558e5b2b4b13bde2c7947f69377a6c3b
SHA1: 1b97b857bb85a2f5cbdc7b0ffd88e09248694810
SHA256: 3c391d92e609fbdccbace385a8968ea9f597b4ad0506d277aa76471d0f205fe4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\kinto.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\kinto.sqlite.CRAB MD5: fe8211fa45665ad2118d089239cbda9f
SHA1: 324c3f644fd9d6fab2b9c469067a46222ac1550f
SHA256: 58298cc5f0349545362016bf098be5b30c366112cc7277426a73dd777fa1dfb2 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\mimeTypes.rdf - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\mimeTypes.rdf.CRAB MD5: 3a4c9cfb59795e2cc6955cc9b0c1a7e5
SHA1: 147de31fd6d19c5aabbc4e35345bf59fbb5aaffa
SHA256: c7355c55c904895bac267fea395497a6430bc1e92c1bb3db28760a4120c4a23e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\minidumps\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\permissions.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\permissions.sqlite.CRAB MD5: 66a8f7cd37d9cd3d2100aaaf0ddf591f
SHA1: acc551f95ba818774a06d3f7b321d119b8c0fe8a
SHA256: aa0085ce97e84e118daac705660eb75130d30c29bfeeac443114a29f677848c3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\places.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\places.sqlite.CRAB MD5: 60d1c39b40ff8a5861e1e7a2ab6584e4
SHA1: db011b90d7916f84cc5a6a57ce85690aff76d662
SHA256: cdf0815cc065a43d92b700b1ba8f3f4fa77377dfce7a83d12df41fe934863cd2 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\pluginreg.dat - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\pluginreg.dat.CRAB MD5: 024b832ed4adecc51892b4807d4c4f89
SHA1: 588b00b6275c4f07aa48cc4ec5d2f817bb864482
SHA256: e39b14993b832090c7200e6a2a75a908419b7848a7e6be4a067f48e83b8ad558 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\prefs.js - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\prefs.js.CRAB MD5: 24bf90064a3314ca294f83c8366d6214
SHA1: 58c8fba8aeb2845ce4fa9e4299508f7acf7e67b6
SHA256: 66555c98693c42c35e1f4610c0a877fcfcbb120cb8f92751c7b579db43b57b77 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\revocations.txt - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\revocations.txt.CRAB MD5: 1f3506b9672e9aa56d4e0705058c160e
SHA1: 053b68d920ab1026e0c79a58ae7f0ad9127825c8
SHA256: c4df494812e8837d4d4579481fcb051938552ad5ef766473acc90701e4e3e42e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\saved-telemetry-pings\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\saved-telemetry-pings\d896fec9-1a7a-4db1-a3a2-e46d95b631a5 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\saved-telemetry-pings\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB MD5: e0c751a6d585091eee38adb11f3e2f98
SHA1: 25ab73c3257e91dda7fda426856b6cf3ba9fa63f
SHA256: 09898b163c461d8649da31ef16a5894a36662d59e5b69e66fec7883058bb9a98 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\search.json.mozlz4 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\search.json.mozlz4.CRAB MD5: b4e629472baeb1d64b4b0d34b63c88a1
SHA1: 6bfaf46a59dd7021741a2126b8b33eea720845b6
SHA256: 372277b3e924d330cfab4f1481acf32e44d9d2d6950101001dd3a3c077ef4f1f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\secmod.db - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\secmod.db.CRAB MD5: ef16124de73326e7b9723fb5661de7f5
SHA1: c625c4b2d71cc965a7bcfa7562937124bde04140
SHA256: 397d60eb5e9699d1864023db7c32cbad79b2718b65d85cd274097dedbb522e06 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionCheckpoints.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionCheckpoints.json.CRAB MD5: 6233a5471582c94869d8405c2655d896
SHA1: d69efad1b0b42a216a657bb073145853fc8f8a05
SHA256: 382459808253a2522660edfadb99b0db1e09a4235077dd660e35af9213a97e03 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore-backups\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore-backups\previous.js - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore-backups\previous.js.CRAB MD5: f916fc047dbf2cca14f376a8e39274d9
SHA1: 101b9d3eaa6992e9380de0db32e144aa71295193
SHA256: 0c3c4e117f2b74f63c247719afcaa90bfac1554482fdea947a61de051bf7dcfc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore-backups\upgrade.js-20170518000419 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore-backups\upgrade.js-20170518000419.CRAB MD5: f6233f2574766a0eb5240b721a7a353d
SHA1: cec32aa661ed3ffaada37e3b712ad47cc5d19c33
SHA256: 71013073f9cea25f1fff1e77797300f191a749c9ef65a300490b4b672ca63654 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore.js - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\sessionstore.js.CRAB MD5: 8da7619514103ae9f2ff471d3896fad5
SHA1: 9ad4773cda2792ad69beea54f44614cd67c4d721
SHA256: 368edefc1fc5b8d7ab3ee1ce6d8fd5e827fc774b4197b488e36540c22d0a1b8f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\SiteSecurityServiceState.txt - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\SiteSecurityServiceState.txt.CRAB MD5: 18b042766544d1f2d2949aa833060037
SHA1: c2e4df5c887ed576e3e44270227d047e24bb55b8
SHA256: d03db4d613a296d10e8c1921fd87679e466484a0ca81f40edf36d8120612cfbe 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage.sqlite.CRAB MD5: c54ce70ef5d689e175c17ddfdf1b0772
SHA1: 4628e5f6f54f21a1a2ff5a0424c5a84e41ac0fe6
SHA256: 1c5ad8c7d10aeca6f8029983bcb7baebc0c0bd8d89985304dbd9f4859a4323b5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\.metadata - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\.metadata-v2 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\.metadata-v2.CRAB MD5: 8c76249567262c7ec01c772f62064ef3
SHA1: e8ca906689c5e4d677fb2e234174944c6ccb50f7
SHA256: 4112df695b24f25c05131220cad825a810f7be87f58fe7e541417788f5e899d7 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\.metadata.CRAB MD5: 7b736b556210162b84f5250680aac1b7
SHA1: 4a0b75e421061c12e7a71aff0d61ad94e1bdd3dd
SHA256: b43e177f525fe01c588fad1eacf39c533455e2b78572db38124060f103117c7d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\idb\2918063365piupsah.files\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite.CRAB MD5: bb29530e57876b224d8f940382687542
SHA1: 63318d1b8915353ff51ec7c4a13450ccffe19c18
SHA256: ff1827b11cc5550cbf62ab4383f47562d69b1cc4329f195addd8a6b077a29f81 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\chrome\idb\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\.metadata - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\.metadata-v2 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\.metadata-v2.CRAB MD5: fcbc796a0f1a4676915e8401cfadac21
SHA1: 038dc671641c8e04bf45999e9596274c1f6d150d
SHA256: d2923822ce9e490aa75db949d4996f9ed98e5c6495175eec016e72ed99942609 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\.metadata.CRAB MD5: 9f501ddff26449c0dfb7a0bc7e757c04
SHA1: 553c80f9d52fbee593957b571cc2e890c4a0fdf1
SHA256: 1b97aac857a1f684b9f4933f5efe10a1d16f4e4bd107e82a7a0a4f1daf03df75 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\1 - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\1.CRAB MD5: c2279c5c66d5d401139f6cee539de121
SHA1: 6aa6ee0b640ecf0b0e25ac27bd7bc718e49aa551
SHA256: 3e70e67dc67646ab4cd90630dcb3413049d4188c82f94741956d5f6bf349f1cb 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\journals\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite.CRAB MD5: 3f402e609d6d49615931976c00f7de8a
SHA1: 4afda2cdbf0a41a46c5eaf9b5f6c81b79c88f2ca
SHA256: aec41f3b9f6b2e5478748dbd3c2a7f4b096bdc5a90199e84b01faaef92d0b37f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\storage\permanent\moz-safe-about+home\idb\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\times.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\times.json.CRAB MD5: 5793b35c8c11f79f1d37ad8866cc29e7
SHA1: fd27bb756e1360ccbb676d0563d95fc708136db0
SHA256: 13744bd88daf6ae27d995c6cae65331a69e52f9062fa70e935cf07fc85b5c5c7 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\webappsstore.sqlite - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\webappsstore.sqlite.CRAB MD5: babe3b530b239141720280b79956d6c7
SHA1: c6840977ecb89bbc51694ce8f42cd3842be22f7a
SHA256: e9a85c80fae4251cc4642cc1dc0915197ea9594848c17e73e55ec2713d25374b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\xulstore.json - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\8i341t8m.default\xulstore.json.CRAB MD5: 961399123326cd41d0d6bc345e8eb002
SHA1: 8e970abb0bd0335167c0b8b10cf91e8176d75764
SHA256: 13b87d494b87e2bcc052dc5fd5b990fa2ecaaf129f2d1fe8793fa209e8e40615 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Mozilla\Firefox\Profiles\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Q_mYW.flv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Q_mYW.flv.CRAB MD5: b0f4d75becbe94ec70d72236d644fcfc
SHA1: 0dae4752b9dd676eaaa16dcd745e4cc2784c40a2
SHA256: e6e48fd2c853abfe42d4228f0007d61b7f1e4593bc69ba7cfd334d618caf8e53 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\RJhtq03C-dzP0a.png - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\RJhtq03C-dzP0a.png.CRAB MD5: f0ea6127bbe8a785f5a2f2a40d8a0faf
SHA1: 91887106c65ef099d033bb81782b0dd28ab2ef14
SHA256: ee7c21e7d85594dc0c8197c1ddadca42f94d24cf5eda59055b3c7323bb49a9e0 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Skype\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Skype\RootTools\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Skype\RootTools\roottools.conf - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Skype\RootTools\roottools.conf.CRAB MD5: 20f86a63422992d2017fbf7156db4026
SHA1: 9e968103790981f80674456d5d837529729ae6ab
SHA256: 9859e2c59429e8985cec20100147852aa59aa9c531e83e85400c83343ee2b6d9 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Sun\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Sun\Java\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Sun\Java\Deployment\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\uledX1UbanQu.flv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\uledX1UbanQu.flv.CRAB MD5: 63d1c524b2e4e313973749c04164945b
SHA1: ea7c6a11415a2368b10c1680a9f1f41c25713195
SHA256: 436ae5241f86cddb99a77dd45e083414c4e08835781c40fcaa75950672241101 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vKNfa5h l0W10S.flv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vKNfa5h l0W10S.flv.CRAB MD5: 97fac0007b8db34ef016b986b7834d90
SHA1: fe2b2e692323052d789c95a53e5cf6522e27884e
SHA256: 2753cb3bb6487378b9d70d92bfbf2ac34ab77bb6e04d7670f759e9b18e2c4a43 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vzInOZx68n6k9sMC.mkv - Access
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vzInOZx68n6k9sMC.mkv.CRAB MD5: 43bc325ba53b72158faed960bc7d09d6
SHA1: 20173f314c4ae4296ad80f54a30670c2df197a48
SHA256: 16ab93e1b4c47107be053af6d118f62a2d0ac8cd60a2ffd3a24fb4fbb089354b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Contacts\Aclviho ASldjfl.contact - Access
C:\Users\CIiHmnxMn6Ps\Contacts\Aclviho ASldjfl.contact.CRAB MD5: c97a8a4616199cddbf964cf85b13c14e
SHA1: c5946fc33b89a6a042ae4d87089ed1ea4f7ed10e
SHA256: 410d8b5ce5b1d86ae966e4e999d83301c050b90d0db3b445a9f771f4c3af63c6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Contacts\asdlfk poopvy.contact - Access
C:\Users\CIiHmnxMn6Ps\Contacts\asdlfk poopvy.contact.CRAB MD5: 4678e1fb69d4192a2a1412490355b681
SHA1: 31cf95dc06491c1a0bcb1d0848e4c893a48e1750
SHA256: 2b74399ba3c93f02df3eaf6d1dbc8afc6380a6a4af7045a72789dc8e4bfe8335 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Contacts\chucu jadnvk.contact - Access
C:\Users\CIiHmnxMn6Ps\Contacts\chucu jadnvk.contact.CRAB MD5: 835d5ff565a767322984684b17a2bdfa
SHA1: 4feef2f7cbd3d75c30d3f71b73c92ba8ad931792
SHA256: 0c2b3f9555b39e0bcfe6c1ee715b07d048ec77cf9cee3753061383f84eece1db 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Contacts\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Contacts\lulcit amkdfe.contact - Access
C:\Users\CIiHmnxMn6Ps\Contacts\lulcit amkdfe.contact.CRAB MD5: 0955428ecfc078f8216459c3f45923c8
SHA1: 9e54fa19b4cf34be450a6a419729db3d5394edae
SHA256: d3efa4230fb61b198ecffb9c24bf8c51aa88a8ceaa1755b59adb9023f72e02a6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Contacts\sikvnb huvuib.contact - Access
C:\Users\CIiHmnxMn6Ps\Contacts\sikvnb huvuib.contact.CRAB MD5: bcfeb1b3cfdf762c37e8340d7c4a6232
SHA1: 33b4ab94eef5e51035914bdbd2c16fd11c161153
SHA256: 844435cf558d5e8be16367c759a03a13bfc8538b0ffb96c8f1be7e208b3b9671 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Cookies\\CRAB-DECRYPT.txt - Access, Write
C:\Users\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop - Access
C:\Users\CIiHmnxMn6Ps\Desktop\2018-05-22_13-47-32.exe MD5: bc4b14b3358aa5ab15f2c134234eb333
SHA1: 110f1f98d9ca8b9d4d85941183db0147d2dc2c8d
SHA256: 8a1e66b4834499dacc24abb27733c387733d919070fc504b14ee865678952559 		Access, Read
C:\Users\CIiHmnxMn6Ps\Desktop\2rhmuK56n91eYcl u2T.csv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\2rhmuK56n91eYcl u2T.csv.CRAB MD5: 311612c1e227741187d9151d3d4a2493
SHA1: 12224b55bc621d2814e9fb36b5d51b308992b445
SHA256: f75e91243f290eda44c577e24f1b80c6196f6f0823c009460c5d3d4fc141d16d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\3pDDvqylxS4MV.flv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\3pDDvqylxS4MV.flv.CRAB MD5: c3555d4e6cf1ff3a80dbca9a1eccf9cd
SHA1: 8fd058eabbb88ddc670773efb84a71ea4fcd356a
SHA256: e0cee0af1c78e37adf7cd9e6126e627b617cede7789d183e31d14222db54b448 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\4ghG1gzHtP9eHasy9.mkv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\4ghG1gzHtP9eHasy9.mkv.CRAB MD5: 65a2d2edb9f10cab56cd3977b05dedee
SHA1: 0bf7f5b587f66babae04b519087b1f6a5fe38be2
SHA256: a4a16c48c0c75f001bec77cdab3e41f1a38d40da7bec0d8c51907ec11a5ecd3c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\6gi_m.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\6gi_m.mp4.CRAB MD5: 8454967033248dd965db8e12a48dcd73
SHA1: d46802a51c8207dcb9101f0e780c8be17892c13e
SHA256: d1ac84c3d1eacee838690a5e0a15d6630f1db81de3db086d1cc8b7d7f5bbeaf3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\9D-GHz.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\9D-GHz.mp4.CRAB MD5: cc2d659601eeb6536482c67d53a14a3e
SHA1: c6f6cc2fe846c0c944be8e1c73872bdbf6ac455d
SHA256: 4c0e210be6b7543f09204c57338d943d17e23925110f99883e74cd4342e3cb59 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\Ac9Wkcop5-69bHUpoV64.gif - Access
C:\Users\CIiHmnxMn6Ps\Desktop\Ac9Wkcop5-69bHUpoV64.gif.CRAB MD5: 9e6258e929c7aa89c216d844f5859fbe
SHA1: 14432d849e65a2a302ae0935946618b823e032f0
SHA256: ba214e15b9d72f9aeb21703c530a6bc56e7038f5a0dcaec4fee4d7d7ba4ae311 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\DbwSgo.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\DbwSgo.mp3.CRAB MD5: 4b032ad4b2b81cf9156e49312be5c8fe
SHA1: 9ef6e988750b7fe665bedaf01538f19e0cc406c5
SHA256: c24c089201778c0f51ca23b684875e22ce6e51e9f6a7f57afa1dd4d0e7e3683a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\EDMRvY91wxHrfggoW.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\EDMRvY91wxHrfggoW.mp4.CRAB MD5: 7e59dde621a41409feb9f4ab106e98e5
SHA1: 20662fa70e772a510bcb5c6ba8d0016229ef4540
SHA256: 88bf1fe3697cdc0cdbdfbce8aa0dc704a9e34f51e6844e4da12d69fc18014456 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\3dDYbq.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\3dDYbq.mp4.CRAB MD5: a2f416b1d49929591d56e1065e4d80cc
SHA1: d8ff751b080b5f6cf398194d0a919000731b3931
SHA256: c7e4399765ef5d084fd3281c29bf04e745ff694222c6a641fd31c0fd0ab9709d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\9zQL2ouqu.swf - Access
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\9zQL2ouqu.swf.CRAB MD5: 2c51d88ca2ff001356cf6358c9ad724c
SHA1: c0b4528fdcae23a60dc16ee2d087fd32cef71f19
SHA256: 015420fd62169e1822ce9640be75e0340203411eaf4b267f1cc9858962c50164 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\um2_az.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\EEftF0yDYhdXB\um2_az.mp3.CRAB MD5: c3f0820c93801d35a9c9981b9648a96c
SHA1: 08b22d6f4a16f8af7563636d7cb57fa13645620d
SHA256: 549bd2e20eda9d87aa916de1fa78337c3edf032fd3fd7a2fc32aef4f9aaefb66 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\GfONmJp.avi - Access
C:\Users\CIiHmnxMn6Ps\Desktop\GfONmJp.avi.CRAB MD5: d2c24376e8f8886f912112704d566978
SHA1: 038f5799bbcf9f5179279af9347d1099949d8011
SHA256: b0172bf2ba4ff534c02d181b312db051906d86366a32c253aceacdd4533c1c03 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\1VMZ5c4-g4u FG2vLVF.doc - Access
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\1VMZ5c4-g4u FG2vLVF.doc.CRAB MD5: c6e9d18d564450f2c0983283b6448202
SHA1: bb424b127e026c83d4382917eabf4062e0f4a2c3
SHA256: 5f724fa69d9e97a184358cf4332e75984422c36548a7f8ee03b43e648561f90e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\GPPfcC6X.m4a - Access
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\GPPfcC6X.m4a.CRAB MD5: 63d7a29b56dd19f453fce01c6c549b28
SHA1: 7e02eeb6f3d54e98b438fe8b4e925c4c51bea634
SHA256: 8569d4264277156fbf7ec47ac8fe2ee69fc3885b10c1836ac4e632950236c8d5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\y0HGizf4CLnSI5nP98F5.wav - Access
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\4Ol1NVxgeUs79kc\y0HGizf4CLnSI5nP98F5.wav.CRAB MD5: 096e85f92fc1f8e499a8799688447db7
SHA1: a879a1ab3bd39e5142856adc998c6ee264da28f7
SHA256: fbc15df3d54273f6c9b7348ab476ab1ccd1779ddc8793c0557afea66a2cdbde1 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\ozd8lfaft pYNzp0.avi - Access
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\ozd8lfaft pYNzp0.avi.CRAB MD5: 0266c8ebd8b9a1d51857c5288b698f89
SHA1: be01fade4c4e432957dabb16b5becd93c292d877
SHA256: 450add509a3a7508233320532e41c95f6605ec071a194db44bd0214e79cfe226 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\uJJXci.m4a - Access
C:\Users\CIiHmnxMn6Ps\Desktop\K7ajnAqG4ABJKo\uJJXci.m4a.CRAB MD5: 8ad0f0d720ba10e5ed1801fbacf61d19
SHA1: 64e1df11705e0aa91f9428ff1c72273ab1035648
SHA256: 44a5cafae6e738dbe4cd3885fd03f7d7b93b246d84f54c87c43df6611ace68ee 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\kH1qmFcpWk5qqvTb.swf - Access
C:\Users\CIiHmnxMn6Ps\Desktop\kH1qmFcpWk5qqvTb.swf.CRAB MD5: ea8c53001ed2bcbabc42a0cd64de9a1d
SHA1: 636b129d0ad8e964850b556dea5c53115762307d
SHA256: e66ade2e2d9792654dfa05376e1200b3ef59560b0c18b77e3d717327f0078732 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\mOFFJg.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\mOFFJg.mp4.CRAB MD5: 07a2c35a76588d1f4fb9e14ead6a3501
SHA1: c20d55c3d2a86d871d3dbe988ee085301c49a586
SHA256: d73d01dea99a38ef5d1420920258b78a1d1afa34488a2ba48aedac72b64355b3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\n7k18oDCf0zHOVW.docx - Access
C:\Users\CIiHmnxMn6Ps\Desktop\n7k18oDCf0zHOVW.docx.CRAB MD5: 27cf5fcea86fc9e8cd8e57d1492902dc
SHA1: 9c97cbe5c2fb16140d524355e2f9249b5d480118
SHA256: 355d9f244dbb9a641e88ae38da1b8cd5dea56035e1fbacf3f71e9a48bf36bc11 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\pwE0OPg45dirkDdm.wav - Access
C:\Users\CIiHmnxMn6Ps\Desktop\pwE0OPg45dirkDdm.wav.CRAB MD5: b4d1ad4a5ce80863cf358c228cfef534
SHA1: 7eadf5802960f4bdd8c358e015e2527e1a32cb9d
SHA256: fa041ee892e995678b7ce759f49f8e4eddbb9497a12e33e2c739d62b3274154e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\qUbhxjX2vsrFy7X.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\qUbhxjX2vsrFy7X.mp4.CRAB MD5: d61fea36d85f38d184b1f0db53dd1197
SHA1: d65ef58e1e1f1bd9ed128155d9fcb251daf0fe33
SHA256: 460584aa77b12b3fdbee326c798201d5af459d9283c5284fff20d0d3aa1fb235 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\qysVT6Sh3xUAtZQBv4h.pps - Access
C:\Users\CIiHmnxMn6Ps\Desktop\qysVT6Sh3xUAtZQBv4h.pps.CRAB MD5: d1719395339e47ef38f266755c955942
SHA1: fa07c57a61a864ade67f79dd3874842c5569d8a6
SHA256: 6a2feb6edac3fdce57c0f0f8d0edaf2477df959be5526012b812932cc6ef955c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\rzIMwScyQ.m4a - Access
C:\Users\CIiHmnxMn6Ps\Desktop\rzIMwScyQ.m4a.CRAB MD5: bcfb02b6b672f70ede7ab2dd7f452848
SHA1: ea9668f634870fda1d5936fc926017b135fc068b
SHA256: 94ce70b0f8d9f6e4b2ba7669d9502cd4a128f426e7100b95e48688876bc0b35d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\tgQW3V.swf - Access
C:\Users\CIiHmnxMn6Ps\Desktop\tgQW3V.swf.CRAB MD5: 18116ab9659e674b483a809ba342f392
SHA1: e5b5229c26998a8789fcfe06f17b8912c2c89585
SHA256: 98598bcdb72b044d3f0977e10304118f425beabfb990d06c02a250120955eeaa 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\VtwliR7PBpZfGv3.avi - Access
C:\Users\CIiHmnxMn6Ps\Desktop\VtwliR7PBpZfGv3.avi.CRAB MD5: 323d903b93cd0d9dfeb7d65ddf78781b
SHA1: 424ed16101fcc63174fbfbf1bf0fa45ed5ce9cc3
SHA256: 18f74df12c00efe4e05c7ebbd2eb48d15aff966ef38d9eec62b61b99490bb883 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\WafYQp028KI.jpg - Access
C:\Users\CIiHmnxMn6Ps\Desktop\WafYQp028KI.jpg.CRAB MD5: f17b36452c181e643e9f76629f379ff7
SHA1: ea83e217b8ebabed1efa6b05ebd3301b29a48639
SHA256: c93655972e095a1009933bc0968f18d4d11f0d8338b94af6ec4fb7066891d717 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\y _Ca.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Desktop\y _Ca.mp3.CRAB MD5: 5046c2cab855e1edb9f8c83000487e0b
SHA1: c383d7daf0933b92b91ffab79e5f0db924fc5779
SHA256: a142f8bb1f2210a1c8c73dde52bce7512b9befcca95e5c50da6e57c3625a8573 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\zEyCwYRBvbI.wav - Access
C:\Users\CIiHmnxMn6Ps\Desktop\zEyCwYRBvbI.wav.CRAB MD5: 79334ad03a472dd311a176ef0be4b7d6
SHA1: 4f3f0b77b91c937f6973b6c72d54c75d865f0f3b
SHA256: 95bf703e7147bb594b1556a2703fad2de6efaadfa0e9f9082dff60f30d0fe5e6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\b0q9R_zPWgW2wN.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\b0q9R_zPWgW2wN.xlsx.CRAB MD5: 38a2e38242763370383c91756c70405b
SHA1: 1ebb9633b0ad6514f1fd8a3a24edfe4f47d36b0e
SHA256: 5c6df790f6fa6fbc0f3844b21c40fdf250e7dbbe2324f089ddcce324c827bdc3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\mM8a.m4a - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\mM8a.m4a.CRAB MD5: 2fc8db9c39a0498f768dc6a19c4e3f41
SHA1: e0ca4a548529a371879a4463f8eb3899d7015044
SHA256: 43db64d8af9109972178dabbe0b48b9105d76a3584bf44427d4227a99aeb2824 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\pGdDRp31omUabRbu.flv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\pGdDRp31omUabRbu.flv.CRAB MD5: b0dd219259b5e98b41877b5937902d93
SHA1: 9e63082ae3fa49d5eb258cb076ac756aabb5678c
SHA256: e9d9445a569b42f67a953c749a4ada3a513d4b37d1e999aba3b285f73de9b9db 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\Vwii3iLUjWQxrx2TqJYY.wav - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\Vwii3iLUjWQxrx2TqJYY.wav.CRAB MD5: 8607dc95b9d695dad1a3ac8388bd7d5e
SHA1: ccd3c527d6fd70f362b900ed17f90a7c33c748f0
SHA256: b2eeed119f3a9b2f387d82ce13c444b6fbe283e75784c5df65dfa581b163cad6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\3aDVPU4YXJbAd CIF.png - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\3aDVPU4YXJbAd CIF.png.CRAB MD5: 098e7ac87c1d7839da79a1a76495c5a6
SHA1: 2e7641d259500c8ace7eab1ca97f5ed867be3332
SHA256: d9e14f270175c9be8bfb02ef106a2444778f1e3f2d935785f3470faaa0451c85 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\7ZELGdpb.flv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\7ZELGdpb.flv.CRAB MD5: b46be59f62f5675b712fede3c7225118
SHA1: c1728453da119e1d6aaef7ac16a0446587c33859
SHA256: 3e082d2e0d94fc6425162313e975e4f939bbcde795878c9e5872839034e8336b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\M4Y40FMQSCukvjEAmKw.mkv - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\M4Y40FMQSCukvjEAmKw.mkv.CRAB MD5: e1fece66af5989eb1df25d50250d48f5
SHA1: 6a2ce3057ae038222f6f6614f0bc0b5436df2885
SHA256: f163618c3256ea0892102b6bdf300ebd881cc84a8bb944c864e6562b96720211 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\YS9X8Y75HU0rl5bVSsM9.png - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\w4RvRjq1j87g\YS9X8Y75HU0rl5bVSsM9.png.CRAB MD5: f748c50b17e4e88e4173aa6ae9049056
SHA1: 131226219ced389db83881673b104c9d30c785c8
SHA256: d7d267dc70f806fcc9eb32b9c37ea053d608825f416c01ba954b758c86bba7cc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\YketoAaK.wav - Access
C:\Users\CIiHmnxMn6Ps\Desktop\ZTzo C\YketoAaK.wav.CRAB MD5: e5dde91638386184b793df78e152fda1
SHA1: ab33e47dcda88718a577761de94a8f6fc17dcb26
SHA256: 56eadfeed036ecd7d89561f07b721564c1ed85a7e2a1d9741e3954eb76d09f4f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\2xBwy0j-HeX.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\2xBwy0j-HeX.docx.CRAB MD5: 8bc6f46812a7ecce8b3d6837028391d1
SHA1: 9d881fdd1d1c03e0b7cdce4cb1cd9850ef32660d
SHA256: 21bc67b4345ea64d866a6aa8dba48a5f302e8e202d09099cab889b11af1015f5 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\3hGyGca5Vn_afOXy.ods - Access
C:\Users\CIiHmnxMn6Ps\Documents\3hGyGca5Vn_afOXy.ods.CRAB MD5: 8dde2aedc41d1068ede00f7ee3df05bd
SHA1: 3293513cad7b49cd616f6c1a36931efab3d54c7f
SHA256: 53d6e2ab24602635d5ba4a4eac35abbf4400dd0740e98c90fa145213f7143621 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\3VNICA8.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\3VNICA8.docx.CRAB MD5: 35ae4341b706343becb4154f4513cec0
SHA1: 20090f85dc647aa0bf052b5491169ba7bf1de44a
SHA256: 7d0339f45d7985ff9a9633fb2a743f8e0f6b4fa5b83b216603f52f68f2eca0aa 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\4l1jx7A o704QO.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\4l1jx7A o704QO.xlsx.CRAB MD5: cb8b3f1702b4be55b45a1e586b29d9e9
SHA1: f3945d9de1dca45eb3cc8c7933a37f2b0b5ba66b
SHA256: d129df8b6230ec537b8508e62e64393213cf1df69e6b1579a266968047282f74 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\06QHx_9gpLSlHZdsF.pps - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\06QHx_9gpLSlHZdsF.pps.CRAB MD5: c654809b219bfbd921e17c5d78396017
SHA1: 2a46322bf2526c21be3796113c3178f21868324f
SHA256: 1028f727d9ee80ca9f7a1cd61e1130db49fb726aa7eaeac2b5f7928cb48cfc8c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\1FK1etW.csv - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\1FK1etW.csv.CRAB MD5: 9d28316f94f26f84fc6a2e2764496d85
SHA1: d32dfdf5233a077ef0e002e2c3ce4bdd645ff43e
SHA256: e10170a115557682115832e16ce21d1d6099bad842d881a966fd389605654890 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\7wlScYb2GX3Upfljuvq.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\7wlScYb2GX3Upfljuvq.pptx.CRAB MD5: 9ab8bcfd5c2df3524904575dc47f8208
SHA1: 5b884511e4222857b9c48054d98f07423d14fa51
SHA256: 4539f5849c09bd35d851cc2ce811979078b7ae457db9ba3d30bb66471345bfc9 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\g Jmgw.ots - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\g Jmgw.ots.CRAB MD5: 364a199a264076131046f7940510b524
SHA1: 9fe1f305fb3fdccdf3011b591f11bb2c22fd7da1
SHA256: efa62b51d66e1c97a5bcd75bd449e740865c7b0ce1c9e1c95252459d7d629850 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\lCeo.pps - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\lCeo.pps.CRAB MD5: c681cb3864b90bf03a285cc982e0887d
SHA1: dc17eae5bdc1a039e36ce5f9956856a92fac6335
SHA256: 4b48b917c8400f7f9c40a7b9b780f9e3186ef47f4a77d650e71a08265d47db98 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\No3Ho.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\No3Ho.xlsx.CRAB MD5: 6de99e4f370a390a1eab711317f329be
SHA1: 80b127ef6c84f46a655fa0404e3defc9fedd293e
SHA256: ee821b1a11e7502e78fcfd8444fbfc63ccf6ea1c3fb25e2ca30859f14ddb85fa 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\qHTC0Br2i901-ZAA g.pps - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\9vJRDM9WfVZaWqe-9Ats\qHTC0Br2i901-ZAA g.pps.CRAB MD5: db2e5ad9f09516b3b48cacd405dc47da
SHA1: 7ae2eaf33ca4074aef372efc9b4d9bc6fa363fea
SHA256: 52aff5ca10e8365fa2a3280e1938ff4c3ea82237ca36326d14c8f204513a828e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\oXqtxTG.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\oXqtxTG.docx.CRAB MD5: b27f93795b1816bbad150d426f9c0628
SHA1: dc528073b603533b29745f4ec03ec6dfeebcd0f4
SHA256: b28c4d7e743f4a694102ea1bc3edf94b51dc7be88c9322f4dfdad4b519cbe104 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\VG1gJXKX8F.xls - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\VG1gJXKX8F.xls.CRAB MD5: 8e5be31cdf122e07dc92099f2f394ffb
SHA1: adbed0aea3489bae07679f46cbc31a62ffa899eb
SHA256: 08053fc5cb12edab0944ac5790a23c651e51ce0fc5aad58f658d2c15cc24ea7a 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\vnKyramz.ods - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\4F2otGvhrNXrv2J-y\vnKyramz.ods.CRAB MD5: ba5c31d0e815481e73d6689aa6742003
SHA1: 9060d2ba2cb135a5ca898d98a64baaa546ec4adc
SHA256: 94c3b5b3ff403f020855e9c6b82a5d16f20c8d7061178c0c788b1d12874e5335 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\5HRREuFNWzOo-.odp - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\5HRREuFNWzOo-.odp.CRAB MD5: 3ef5860c91b7e4a49dda52ebc9e7b94e
SHA1: e4338eec64656bc86dec0c760bc600e185a02e74
SHA256: 039b5048a48708bde87fa29bc12890601dc3860cd08270f47b396ffb910201e7 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\a w1z.xls - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\a w1z.xls.CRAB MD5: 01c47d8681e1be034ebbb4d52023eb0a
SHA1: 044d03e038b3ae8145820f96ce20ac2ae0e74ba3
SHA256: 99cf152f2f9cac07f3838e0fb59891df86951c4a93fd4817f93cfaabb900e4bf 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\CSJP1.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\CSJP1.docx.CRAB MD5: 0a18c649ba528681ea4528eed0f80829
SHA1: 345682671f3d115b3d2381d657b9e6c09b0ebfe7
SHA256: 75ce982d7d18019ac5d8e485743c7144ab62bd555700e46c82aee35c990e8db6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\0kolztY2IYE5zFfk.pdf - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\0kolztY2IYE5zFfk.pdf.CRAB MD5: 32311f28e036524426c96eecaa6528d9
SHA1: 7e3d59807a72c36f50722d3a86b308b28075e176
SHA256: d490033ce3af8812ae6d819b7da783fc04621620ccae1162e59d9f07d0b14ee0 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\9yvqqzj0HmY1fXei6JPM\5 7VfjVBKfC BMHtN.ots - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\9yvqqzj0HmY1fXei6JPM\5 7VfjVBKfC BMHtN.ots.CRAB MD5: f008000692317b2809b0c77aba5bcb14
SHA1: ab508d70c6b2dd653c03a83f994d34c2f5771321
SHA256: 4ad05a17e1734329d4677634b6dc19e56b049b9dc6a54a72f963a810c39bc0a8 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\9yvqqzj0HmY1fXei6JPM\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\9yvqqzj0HmY1fXei6JPM\nyxNFcG1.ppt - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\9yvqqzj0HmY1fXei6JPM\nyxNFcG1.ppt.CRAB MD5: e7033e987fc4394e32322921f06923a2
SHA1: 4b7ab0bc78f642f9e4bbb7782de17099bd9995c6
SHA256: b95d5cf621e285cc7e789ce284276db4ee695c5c0ed95b50b603a89cc02c2307 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\bHIe.odp - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\bHIe.odp.CRAB MD5: 827b6ff2f4f7596d45869519a4cb0acb
SHA1: 39fb5ce62a7b3dbfeeb55c1dc5a7e36c65ad347b
SHA256: ff6ebfee34a5e28598b72fdf4f3da5950bf02ba5bc7b7a6d3249dd33c622a666 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\d4I8kMHkq.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\d4I8kMHkq.pptx.CRAB MD5: 2ad4726d5335c0b9e2f0d0a22ec9f63a
SHA1: 0224068e372a350450e784bc28b932259b883cb0
SHA256: 6a974931ae73408fd833195f48a5919f5a0481bfa5fd6033d1adb018700acaf4 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\PsoMs.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\PsoMs.pptx.CRAB MD5: 740d36e0bb260de375eee88294bfab31
SHA1: b5e0fb22bef43b8ef593ee541380537e0cb41089
SHA256: 1a997a73db873f6d243cadf05c8c94d7dbb9fca94b0d9c2af94d4a4208959667 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\SouuOgfdTHe.rtf - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\SouuOgfdTHe.rtf.CRAB MD5: 96b66a5f3ef1598e054ea50d598172f3
SHA1: ad431eb581496a42ef2eb9692cc5171690077269
SHA256: 77d8696f123be5f9a099aa78d6da228601fdfc0df71c32a69729c65bd24aea4f 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\ZbGgq9230bKHNrkfs_Ko.csv - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hnnU39XhtzJjP\ZbGgq9230bKHNrkfs_Ko.csv.CRAB MD5: 21ce3073c2b0f5f8ea82d8d1f14cfd13
SHA1: 6b4d7f1b4f4fa3d003844e5acb8fa51e81aeaba3
SHA256: 339ecfae16381df51af23c609c35f85edaebef83fb77ed6a9e078d36ee41335b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\4Eltdm3eKBHlLDan6D.ppt - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\4Eltdm3eKBHlLDan6D.ppt.CRAB MD5: c2b201e9b00ca3db7eea8e3066794bc9
SHA1: 4ed6de8264d469f571be3d148b5fd78baf95dfac
SHA256: 52083165ea1c3dc905758273f179771ae0b8e06e7849c0fb4c76d477eb803a36 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\8QKzTyPO8JV.xls - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\8QKzTyPO8JV.xls.CRAB MD5: 3b40114b820cacc216130ca3e5a350c9
SHA1: ec8f2d1eb8ea16621ae3df01fb396b96b96c6f55
SHA256: da7b7dcc7a3b994361fe70a4b934c45742f5e045042cf8f3bff8b35f72a337d3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\_xufb32E1.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\_xufb32E1.xlsx.CRAB MD5: 0d1e0fe1d0241d751de4592fe6ba8885
SHA1: f80990b37e1b47c16d2ab6574703837cdf32ccc9
SHA256: 12710167dd7da0d2be296dc082b7b8e7b893665aae1f6559975cc5caea2b2e57 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\A7gU2Z.odp - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\A7gU2Z.odp.CRAB MD5: 970d69d4e922122a6f17008debf8e1ba
SHA1: 83083d28bb59e6930473c4b85b583651b021a9dc
SHA256: 7a32d949dfcf0b46dac0ae20252ee1fc3b7fd1c967b91f6e1ae47a2148543412 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\c1PV.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\c1PV.docx.CRAB MD5: 5ec59c537ee169dd08cd00ab62b2c985
SHA1: 4003a98802f630b155dbd6a315d51269d10cf90a
SHA256: 44fe6d8a2be64d4d501010fb1d6160eea68d6a8ead87a15481c679fb416a9b0b 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\hz2xeRBmW4nHOhdIomn\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\MFPGWjg.doc - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\MFPGWjg.doc.CRAB MD5: cd01ed75452597b61bba8e2804e4dff2
SHA1: acd07fe70f7c491650b17050b38cf5aa5a4854f4
SHA256: 85cd4ca169ed82c76cde5ed54dfbe669e0afbf182b606fbfaf97b2d429cefe47 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\QjVBowuEO5xm.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\QjVBowuEO5xm.pptx.CRAB MD5: 03786d608048dd874eecfa69d7b95da3
SHA1: ea75efec26712f8043943ef8024719090c976259
SHA256: 9c77b4530e2090ce6c639bba412f0320abace3fb7560c30fcfe6861346bdcf2e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\r7_9u-TSg5v9b.odp - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\r7_9u-TSg5v9b.odp.CRAB MD5: 66601221e20b842a37601e5648ad695d
SHA1: 1e6b8b2b6b05f6ee71de3d7309040cd0ef9927d1
SHA256: 891c48caeab5e3b738b3a49c76f42c334e252ed1224f9160faf1dce4b5630c90 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\rWSqSBjhh5Bza.ots - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\rWSqSBjhh5Bza.ots.CRAB MD5: 81a7aac7870d3788f2abc16c644994c9
SHA1: a9b7c738c4dcc4f5462215751eb13b45074a1e25
SHA256: 1b8c272a1a28036b8ad761445aaa088f19ec24de8a734f71fa397ca43eb1b641 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\WYrBVvEAN.csv - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\WYrBVvEAN.csv.CRAB MD5: f1e522a9f52a814682c811ddd20903b5
SHA1: f50f292815610da692e4cb284b2f3c9ebd5f0399
SHA256: b06499d6a7acd60ccd7387ffdc58a315156dd140e342245e99f494f53878683c 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\x Wi59d3Fh7gfh4RRPp.xls - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\x Wi59d3Fh7gfh4RRPp.xls.CRAB MD5: 285e8955b99b989506d1cd9133d3e51f
SHA1: 0e9cc7432a7a0ba982a00ff000d451ceb1ce4791
SHA256: d34428a65e4e1ed4084be7a75ea5f6275a0b8bf8e2ec787d7a067859d7c513c9 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\Z2u5TX-QvIqRtTLQU.pdf - Access
C:\Users\CIiHmnxMn6Ps\Documents\aTgk\Z2u5TX-QvIqRtTLQU.pdf.CRAB MD5: d0ab277d4b901e5bfe971c333c675982
SHA1: 5a7b3422f9f08b88e9812bea869fb882535174a7
SHA256: aef0a11706f29431ae5568cafe8694eb784e8ca4c5e61f38db19dabe39cb835e 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\Database1.accdb - Access
C:\Users\CIiHmnxMn6Ps\Documents\Database1.accdb.CRAB MD5: 0d0722facbc26a32157ba6849985da30
SHA1: 8726e7c0c561e4d5afc3d0a26d9b6c83c9bb4cd7
SHA256: d0438cdcc2a460aa0ef83da27039e2f4f98ae7dfedb1e57e1bddbc3273a6edc6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\dz-WQkNn_bUJB9dnEV5L.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\dz-WQkNn_bUJB9dnEV5L.xlsx.CRAB MD5: 2d204c7544da64778cf002154987b11a
SHA1: bf8025af8c83a79360fd940c67e38ec7446b7a2c
SHA256: dfa5b136befe106481784785cfc6f44ae388295a60d0d9e14699651e0dbed070 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\eTZFZQCrh.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\eTZFZQCrh.pptx.CRAB MD5: 7c985f666d4fc1397a025279d0acf9b9
SHA1: f228d17c07c9deca1552420809ba9e5bb91e2d2b
SHA256: 31e67a4639ddcd73545546d25cf81a269522a41c2f7e970042f33d78ed5a11cc 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\Fc_OD01S2.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\Fc_OD01S2.pptx.CRAB MD5: 0009c9aab6acf79cb5498c28650e51fd
SHA1: 41160672768ea8ec470ceac10ac700a7932e34fc
SHA256: 2ccffa68f0f0f322c64d282ff807a9800895684ea5213d649fbc1c58970b81ee 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\h1Z-06FlHNHNLXtgJGt.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\h1Z-06FlHNHNLXtgJGt.docx.CRAB MD5: 7a062c4bd812a88d30855c5bc3a02f7e
SHA1: 328d9c0a21c6691fd73e19ed97b61306b22491a1
SHA256: 9a8dcc2bff16a6eb6980f1f1a2b102cca229a661eaaabf015becad1b94117270 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\I314Akn7N.ppt - Access
C:\Users\CIiHmnxMn6Ps\Documents\I314Akn7N.ppt.CRAB MD5: 0f8ed0a8435cb3b8a2b4f8b0b5f95b2b
SHA1: 4b53c7e25238123d0afa2a1ad9f3bc8d66a5ee77
SHA256: 450802cb4624e2781ca8296cf01c48b269bf7a21b0fde92780da0216c01facab 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\joNRt.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\joNRt.pptx.CRAB MD5: c8efda8a806ad8f22758af23b9b09d0c
SHA1: f9e5a8da55ec826bd520055c5c98dbad709b7597
SHA256: b3b64efb7a46317793db67a4e19c43ba6b84128e2512c218de1210584c0e34d3 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\jrJRQ_IsKjxx7tzo0TH.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\jrJRQ_IsKjxx7tzo0TH.pptx.CRAB MD5: 410c49babc739dfb3f95e45df1f97392
SHA1: 067f2cd663c1aa335027b58485ae46992bf8ab94
SHA256: ad75df75d0f2741468ea799e9c19364e513845154b2fca14e7f5b1ad44891af6 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\lafHpZTirt5nX9U_BRa.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\lafHpZTirt5nX9U_BRa.docx.CRAB MD5: 6dbc71da8765c95f34aedee0cb80ba4f
SHA1: 32765ba76044aff3add63031c262b452b91a27ae
SHA256: 049555b21a1db5edb14dd6112dbf3bd064763f3728f38f6559891d020b2a31ec 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\LHv_P122.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\LHv_P122.docx.CRAB MD5: 0716cae4a5e988de740bdf927a55c754
SHA1: 892bdbd34a1b75eca99b7cd5eccaa7927e247458
SHA256: ccfc9e17e840bcb2c15c205186a34aac46cf2a2dfc821e29c07d080108933ffd 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\My Shapes\_private\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\My Shapes\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\O12g.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\O12g.xlsx.CRAB MD5: 881f63abafc3454477ccfea553ef4fde
SHA1: a78786ea8e4f44bddd7a9b164a20a8f7bdfd4be5
SHA256: 582104e530a1a8fc2e38ac5f575ed53ea8b964b21941af13239216d989d93690 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\OFzwP.ods - Access
C:\Users\CIiHmnxMn6Ps\Documents\OFzwP.ods.CRAB MD5: e9b9f765dc4c066fc9268a631d2ccfe7
SHA1: 7b91f6e9eb1c4b83dfb6d8416902e9bb7491be46
SHA256: 29a3dcf3bc189d5c875757f3c81b800bfcdfad8655ddfa8ac6882c8983cde69d 		Access, Read, Write
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access, Write
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\My Notebook\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2 - Access
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.CRAB MD5: 4744242794ab56ff01b882cfe366628e
SHA1: 395fc3233d37e237dd117266cf5c08a637d925f1
SHA256: 418fce8166216e3822925049ad8cf2ac112fee2a6b4287e345a470bcceaff65a 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\My Notebook\Quick Notes.one - Access
C:\Users\CIiHmnxMn6Ps\Documents\OneNote Notebooks\My Notebook\Quick Notes.one.CRAB MD5: 4383de5de5bfdffe3710362d88c5b916
SHA1: 7949649c51ea9e0771f42c7b32fb0ecf995339bf
SHA256: b3b9d44a597da4621ef6099f3d69262185e5f5c8917cc9732a32f108d9705a97 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\Outlook Files\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Documents\Outlook Files\lcfkj@kiekc.df.pst - Access
C:\Users\CIiHmnxMn6Ps\Documents\Outlook Files\lcfkj@kiekc.df.pst.CRAB MD5: f995766b6bda4fced09cca6b90a44de9
SHA1: 3dfac4fc393ede88155ec284b0eceef93a0b639a
SHA256: f945da0ea7f46f612516534bc13b232da4fbfd1ddc6ab0dc2554ee5d1b56e0d9 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\q0DQMWGV3n0jWRC.pptx - Access
C:\Users\CIiHmnxMn6Ps\Documents\q0DQMWGV3n0jWRC.pptx.CRAB MD5: 35dfcc255fc478d5690814bac28cd4e5
SHA1: 616d05ed83bfcaa7dcc74546091404d1585806d5
SHA256: 0a8efe7ae2edc2335d0ca768e7355ecc8715553dac669115d0b9b84fa036b78e 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\R4ayCKH3 Sueugi3.docx - Access
C:\Users\CIiHmnxMn6Ps\Documents\R4ayCKH3 Sueugi3.docx.CRAB MD5: 987619a7c3dbdf568836a86abdec4ac8
SHA1: 0cdb9ec19e3dba465fc77e8ea96a4734148e2157
SHA256: c6e9e7bde311452bf5cde67e77d9ab3ce92a5175529f4fae6ff0d8cdfafc474c 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\RlAfw9W.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\RlAfw9W.xlsx.CRAB MD5: 1ccb1acbdbb897d25eb84da75bfe82ec
SHA1: 48130774ed47a58cd58860876a1065828d5eb472
SHA256: c81ea2d87e416836fb0100813de418155dfb8f6f5c6aff097d3025acc1882d60 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\VdBz6LHl0d2m0Rs6vlAI.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\VdBz6LHl0d2m0Rs6vlAI.xlsx.CRAB MD5: 28fd9eb0b2516a3e6f4eae8494e3020e
SHA1: 1d857d1c771da2876cbe4dc00d98a5a27e8edce3
SHA256: 2c3ba60833f3523612b666c9ca33a259c565a2999bec2e2aa7c7915b9158a625 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\X01V32LT4HD6__.ppt - Access
C:\Users\CIiHmnxMn6Ps\Documents\X01V32LT4HD6__.ppt.CRAB MD5: bbfd8cce06c5c9dc125e2033eb6ea413
SHA1: 23d04d7de7d5dc546242e76b205fb2e7260e40ed
SHA256: b8a5d9c8a1d761bb2e25d795178ead1cac4d4a2ace17a4455e0ddb9835c51241 		Access, Read
C:\Users\CIiHmnxMn6Ps\Documents\Y59I.xlsx - Access
C:\Users\CIiHmnxMn6Ps\Documents\Y59I.xlsx.CRAB MD5: 994136bbbe471e97e51299e4efd873fb
SHA1: 204c73fdeab65c7b5035c7b8a08324a2cb747a85
SHA256: 077eee14ae7d8bb6c0a1050b149221c192bf5f30ab70df298f6b7090bda43301 		Access, Read
C:\Users\CIiHmnxMn6Ps\Downloads\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Favorites\Bing.url - Access
C:\Users\CIiHmnxMn6Ps\Favorites\Bing.url.CRAB MD5: e13ac54fefd197c99e30c2132f2a53cb
SHA1: 7b2e405b62744e0de5210ca8714cc008bba51d9d
SHA256: 450e4ff10cc400da8e3dd342253afda5f8684791e6ca48dbed98eccee2a8784d 		Access, Read
C:\Users\CIiHmnxMn6Ps\Favorites\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Favorites\Links\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Links\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\A6TW3A.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\A6TW3A.m4a.CRAB MD5: 5d8aa05bbcf4e59627c25bf74bcddad5
SHA1: 1f8eb275bafda9888d4874cf715de4c66d7936dc
SHA256: d58e62ef7182090711a64231e1ce874f4c0a52335a62cd2be922ddb182949897 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\hlxPTujKbg6PddG_0.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\hlxPTujKbg6PddG_0.mp3.CRAB MD5: 95ad43b9f7e7b0b92f3875fd7ef066d6
SHA1: 9f5b00d3b95cc46a4ecd565043963aa4808d7712
SHA256: 1530d41447e70ab7941823952e1dfad6fccca089f545da7927d93454285d570d 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\0LoiQTylKrF5PHsYGes.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\0LoiQTylKrF5PHsYGes.wav.CRAB MD5: 8ac8687822017f588d8b29c748a9f6ee
SHA1: 36e3943e8cddc2a66819df017f0ddbd0fd92a0d6
SHA256: e2b5dae952c006b941fcd2d2e9a1a6ef50c83ea1eb739c3780a296b906b632c8 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\4l5sDzc1S.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\4l5sDzc1S.mp3.CRAB MD5: 7f4e2c73d15becc740ea916df736db03
SHA1: 1f01edb1c27d14be1bf685d27111437f42446940
SHA256: 72be31226602039bfd9c3495ecc02cbc3fbbff24f6bd5bcc680430cc8ac696f0 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\aP8e0edr\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\aP8e0edr\iwCDy.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\aP8e0edr\iwCDy.mp3.CRAB MD5: d4e519937a3d7e6aa84b40ddfd48e86f
SHA1: 52fc08f576fcf975a9b08335bffb77df43e3f345
SHA256: 61b541dafa3e2f019b603c1ef11b8070424eeb790926d9674e7b3143be50b880 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\dorC\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\dorC\J c9SLhgC70wS-Tvhbw.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\dorC\J c9SLhgC70wS-Tvhbw.m4a.CRAB MD5: e2567ddec43a3a51c4de6f21a875a6b2
SHA1: 57614fc9b97800b68c400958755fa8fe910b44a4
SHA256: c6bc62f66f6264389b33454f5142c7c7019a5e3458c1ed12d65f5202fbb33135 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\dorC\XJg8fVlkqbm41B.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\dorC\XJg8fVlkqbm41B.mp3.CRAB MD5: a45ee539f555898ed8392cf9f26d5a8e
SHA1: 60806d44528b0ee240d8d063b567c5149660c2b7
SHA256: 4031a71be76fee9f9a09bc6c79e072d2ce193f86ba0ab6d05b1da501dafacf0f 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\Vn8dzJxa3\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\Vn8dzJxa3\kIXg5WaYFWCkAzurLG.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\J9V0B7uNl5yLpDod\Vn8dzJxa3\kIXg5WaYFWCkAzurLG.m4a.CRAB MD5: 2560ba4818e3667a94dcb417aad03a26
SHA1: e7bbcabe5e38162c34bc3fafc8ad8f3fe27f3fdf
SHA256: a3754bbc12fbac7414809abbd1f01e2fde331a6e55b28f556197a5b1fff24f4e 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\lYs1x.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\lYs1x.m4a.CRAB MD5: d896f8565aa154d8f0e4cf2ccca644ef
SHA1: a57b519f07c37bb9418ad36d9e3bf1e3ca530bf9
SHA256: 3d244c339ddd90ae450f4561873b5f11b3b05a68da054d7da29d4aad00fe20c8 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\vbNgdRi4MrF--gtOk.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\vbNgdRi4MrF--gtOk.m4a.CRAB MD5: 75a7b85b03bf590cc256ede223fee772
SHA1: 68adad09416891f316fb5a544869a3cfe2b24a56
SHA256: 7208233a4d09c64c238399bd8f22ef3c8455b8ca646cecc251de9612c9812516 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\2GJr7qe.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\2GJr7qe.m4a.CRAB MD5: b72351f5479b8166e60661367236d702
SHA1: f6d03688ab5c3abf87ab7b6537c92e893f050be1
SHA256: 79a5efd615470f839ed0a7108ce72eed9edff9b5064e3f847ea236a06f545b5f 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\60cUywO5pw8TmGYWF2.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\60cUywO5pw8TmGYWF2.wav.CRAB MD5: b20261c252c33396e728ecfc8cffb4fa
SHA1: 7162dfd860841b51d0bc1eca17c0082818531d9e
SHA256: 0374ad6f9e7e037d4f229b7e611926e7a8fdd8dca5418c782ebbbf5866c98e2f 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\a6ZAGL.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\a6ZAGL.wav.CRAB MD5: 25a817e876cc94cda6cafa5369afc08c
SHA1: b95193b0f607b13e2899ebe1b9efa7f8f87df5e3
SHA256: 4ed5516a52f844754b199a17dec355e6a2a554a2a55a80ddc28d3203b9936279 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\qL53IXtpXF.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\A7WpA\J-YwcEJqn_mfqyVgy4\zhuQB6w6CWfcI3\rmnortzNuDYt0D Hpk\qL53IXtpXF.mp3.CRAB MD5: 5a38614b9e9a16144f182991fd890008
SHA1: 8e904a8b3419a54f74fe992fe8a17df7866345d0
SHA256: 33c5ec5fe2b94b26ec1a1aaf75078d05f958dbce139b5ffda5a1b4d90e445e51 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\kIu5nzbzqgalDxREJJ.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\kIu5nzbzqgalDxREJJ.mp3.CRAB MD5: abaf0c90203da9f4d2644aefe047ae9b
SHA1: 46abc4cda8b5fd5923c8ad24ff58dc682a447fcb
SHA256: b7fd80007adf10e6cf58a1630c762c0089b5809d922b059d7db01dae1da8b708 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\NadeC5Y4s_hMy2rk.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\NadeC5Y4s_hMy2rk.wav.CRAB MD5: 47bf394bfe1ed950fff017aeaa0155fa
SHA1: a4d48b436ca79e6b404c806830a394b42db40b5a
SHA256: 09054498d009fdc8ff2b7bbf52b73c213838ccb4eca48be8017c84f2c3fa3de0 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\LweyS\O-dhuzuBcWg.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\LweyS\O-dhuzuBcWg.m4a.CRAB MD5: c9953ac463aca013c9d9ea03aab46b27
SHA1: 745b8fd2e4ae458b84759713b27f54e60548650c
SHA256: 3191dd7349b20f89d5e98c6ba186720c8c625ad07f4bad1c709a9cda5edd1c02 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\5mBi2yI46B5MyBJNR896.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\5mBi2yI46B5MyBJNR896.wav.CRAB MD5: de25aed036c2a887342e1f42899d03a1
SHA1: 3aefbbe5c30dce8daa780da16b942262e63b32c9
SHA256: db1fa8cf42f08db9f37b1df9e465f1513481debfdbb790768e730fff95b34c3f 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\HKrqlCPm0HjAG.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\HKrqlCPm0HjAG.mp3.CRAB MD5: b1ca69338f53e4926e07f23b0889d1a5
SHA1: 62929d952c176e40db2769dcb5c34380179ada3f
SHA256: a9bf63ccf65a5e1ffcfafd2e6426194ed261e1028cd3042cb7cbdecc20e608f0 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\JdLKjg.mp3 - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\JdLKjg.mp3.CRAB MD5: aab454f1366d68b1a1370f29c1b7a361
SHA1: 7ebf4a9afce244d9aa618e661a7a275c20599953
SHA256: c4d4dad6ecec9cdc4f5741d911ffa7bfb902e920ca1c7937b79dfa80f7b19ad7 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\ktIZWaoKioO4IUK.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\ktIZWaoKioO4IUK.wav.CRAB MD5: 6da049fb7413503bd986b1b256514419
SHA1: 63b81d88797eee43aec362251bf36020d3d17389
SHA256: 72c89bcb27145514c71a148cc0b5e52111a31fcad419b5386107fabb6b1918f6 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\pcPSIClG7.wav - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\pcPSIClG7.wav.CRAB MD5: 3ff63a12b6441ac5d517fa6ba82801b2
SHA1: 6459e2a6496ae23e48443da9d69bd7a890ba436a
SHA256: 2a72867aa35122ede76775278db8e3418f02f6e06f12f89eca3bee92e6c5876e 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\xkFde96f.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\OSTZ2CcMt18\xkFde96f.m4a.CRAB MD5: e24ff9abb54a44793231168ccaada828
SHA1: 940bf9b71acdd6d5cf0d91f45bc3cc2bbb1f5d44
SHA256: a5e5b258d538d8c00fc70b81a734182a5be9e889fc259048ecf316f2e5f6bfee 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\X6uo.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\X6uo.m4a.CRAB MD5: e3a8f6899dde5f4127610af8127fd28c
SHA1: e4a522445407d9e591166e44786c8437e811025e
SHA256: 2f1d45b151739b8c06b64215e4ed4edbe125f5a4371ffb693596240d53a4a482 		Access, Read
C:\Users\CIiHmnxMn6Ps\Music\xiD8W1Q.m4a - Access
C:\Users\CIiHmnxMn6Ps\Music\xiD8W1Q.m4a.CRAB MD5: 6aa971e35606d6e75e26918d4db13364
SHA1: 7f4e80e3a1b2536b63bb34633cbde76a4ab0c244
SHA256: 05d25d5d9f7c29f84ccc6d6885ad5c9d37063ddc509a0352ad72384aa02d2166 		Access, Read
C:\Users\CIiHmnxMn6Ps\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\NetHood\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\ntuser.dat.LOG1 - Access
C:\Users\CIiHmnxMn6Ps\ntuser.dat.LOG1.CRAB - Access
C:\Users\CIiHmnxMn6Ps\ntuser.dat.LOG2 - Access
C:\Users\CIiHmnxMn6Ps\ntuser.dat.LOG2.CRAB - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\CIiHmnxMn6Ps\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access
C:\Users\CIiHmnxMn6Ps\ntuser.ini - Access
C:\Users\CIiHmnxMn6Ps\ntuser.ini.CRAB MD5: b1a565c8738cf2fbe622c500b6848712
SHA1: 724a4ca9274669c707336187f5a6dc348ffadb52
SHA256: a95cac02997387729d49bec8b49ac8252206251af11731219cb7b3183888efca 		Access, Read
C:\Users\CIiHmnxMn6Ps\OneDrive\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Pictures\-J01e.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\-J01e.png.CRAB MD5: 72a529b80894db018cc173fb1a547cb5
SHA1: 0cc99ad170cdeb24ba29dc89d613e6791cdabff3
SHA256: 3f2de6f1b060b6431f6336e1d5f5a4088d28b2a4ba204be77d1f4f936d24471a 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\9pppZsTSKzaS9wuiJii.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\9pppZsTSKzaS9wuiJii.gif.CRAB MD5: 925b7659ac5454e8fb5f6fba6defee7e
SHA1: da212090f6dd338f9d35c83626efc391aaddee3b
SHA256: 1ccf11da7170051f5852d1ccf44cf7b0827ed094a0ecda74511010f66ec9ff46 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\_Gx1M0GTVLb.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\_Gx1M0GTVLb.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\9IZnYz2x_fm7F.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\9IZnYz2x_fm7F.gif.CRAB MD5: e2096788888bfe6667aed23ca6490955
SHA1: f236fc36805242902ea212ce5157fd6053022691
SHA256: 7e74ffe93e0a0ac6d1fa7a9b124af4c6f1e1f3ec58bb5a207d360cf809fa2193 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\JpO gDnh_9SEQQ.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\JpO gDnh_9SEQQ.bmp.CRAB MD5: 0dbaec58aa441987f86f985146a007ab
SHA1: f08e37ac71eaa34ae86b1aef775b024adf2a2907
SHA256: 513e9f3e4e82e8d192f3d9c689e69b9814353aa9671160bdb93ca8e61e3458a6 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\lhHIKj83QA.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\lhHIKj83QA.gif.CRAB MD5: afb54655f03bf39af70fe602fe2c3148
SHA1: b9ad5736693c6a17ebf893ba5928b43ee8082ac7
SHA256: fab955dbcab5d55099334e2b5993ad13f21c65bade2710c0ed7d4272b48344b4 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\LXZBP3.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\LXZBP3.jpg.CRAB MD5: 198c7af652a7fd99295272214374ff83
SHA1: 4a587e1eb41c243e91f12557451a4c3a6f2412e7
SHA256: 8488e91b5ba36b58af14cf57050a589a75d24fe352f11d25643daed0e136207c 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\5E0evKq.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\5E0evKq.gif.CRAB MD5: 78011882d3ecf3945c8c1651dff9e74b
SHA1: e290ba1a5531a1de1000247ea2f80a0519dd1763
SHA256: 495a81bd17220f85f736943e2995c79ad9dfcde975da32a2e8aedf9a7b58e28a 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\6OuL8ot9V_3yM1.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\6OuL8ot9V_3yM1.bmp.CRAB MD5: 2c499c60bb2dda7692e574652e495647
SHA1: a8f6556db9eba10ebfe5c05c3ff8d491020181e8
SHA256: 504e3425f62df559247bf3d727a379e40135fdbc86b82a1a97d2022ebecb06d7 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\hR6CFuHcX0u07gQrMQST.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\hR6CFuHcX0u07gQrMQST.gif.CRAB MD5: 3b76ecc6bb731dcf1e7c8809f29e8e4a
SHA1: f44f23071dd3f575a2f365ca72ecce17ecacbe68
SHA256: 2f61a1369d3e1a3f86b05b10fdfc60b2b6f6a1acffa00b87f6d366cefda89fb7 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\mkG9No.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\mkG9No.png.CRAB MD5: af967e07f9a35a14ace41d0632105157
SHA1: 63a7cb52ee87c833d104267abf42b6c89f21a798
SHA256: 50a78b2dc65ef3fba48cb993b0aebae5add7088dd78dfffed45fc3c7439b1d9a 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\pnzHgF.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\pnzHgF.png.CRAB MD5: 1751e6c399e841d49aa410417e9ae7e5
SHA1: ef981c50209d9ed1d8d955d2ab0adf3e0cf888bf
SHA256: eb779ed375c7c7d861c8b745472e0bfe63aff2bce58233f2349ce886ce9cd70e 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\PykJt82K9ZnacHSv0KR.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\PykJt82K9ZnacHSv0KR.jpg.CRAB MD5: 98335c7a242938e44483685bc2ff17e4
SHA1: 967e936bc72505b1709402d6b359a74299cd2ce4
SHA256: 05c4544bf6a9e556af95cac998b69f8e667283f53c5bc25aeea2ff407234dc7c 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\vi_ta6YT_tKSm1G.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\vi_ta6YT_tKSm1G.png.CRAB MD5: 0eab4e68f9ed8072f1d5b7c7031e828f
SHA1: 8a9db767af23940ba5f03e15e251705f684a37d1
SHA256: 1978c3602d98a7e919fec65dc0af5ebc2599319b298ea3257652a33070ae650a 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\w3rN5KB2S.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\w3rN5KB2S.gif.CRAB MD5: afe87c13862517ee20b3e76a2a34b340
SHA1: 48c4bbb0412f472060e2abc5c01379079f68d880
SHA256: 92ee1201777ab68ecbcc8fe90b0419fcb2cc83003155388819fe0427e281e7a4 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\Wu_m0yiYg.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\Wu_m0yiYg.jpg.CRAB MD5: f2fa186ec57350e2421807767c8fc00a
SHA1: 829f54981c6a2812b2b70d360f8cb2d82d9e90fa
SHA256: ccff16ade31ed4535a4ca28c67b1f3795134c3969ff5784946363fe062854135 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\Y2-ydWeohDOSKE7qriMG.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\opc2YyT8fbsCGp\Y2-ydWeohDOSKE7qriMG.png.CRAB MD5: 7a45d89eeb3c87331bb1eaf5cf832899
SHA1: af7ec7a9737ee3fa0a10d44ca80f3da0f3177980
SHA256: 89949ee7dc5b59533739d1e4fe49f7362ef5391be8a3a2bc361c329b11ac72be 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\ST msx.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\ST msx.jpg.CRAB MD5: c0f2747a17c5a1a464b393237e708e30
SHA1: 8a37359dbd909617a3d7dd76fac30045a6c8d002
SHA256: 4262e8cc484558cbe12a102b8f3dbc4fa32ba7927fce9e7956fa819cbf9b9bd6 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\tdcWaDsPf52eTbUMtU X.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\tdcWaDsPf52eTbUMtU X.bmp.CRAB MD5: 9021c382d0ecb98b885bdc039ad18a5c
SHA1: e10ae2a67e0bef10d32ebb83d072ad14f60d4700
SHA256: 32b555cc1c751fcba5fd776e003fd092fd23357f0e55ed50c673689f40a8379b 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\U2lB7_.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\U2lB7_.bmp.CRAB MD5: 31811affde8a44e33ce1f6f5c75d130f
SHA1: e289760a57840edd257bc7d5ce49c0a135e9d0e0
SHA256: a8038e1624074e912a20d5e30ddc70f9b80e910c22cb8fcc1c36215d6948df5c 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\V5zL9wl.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\V5zL9wl.gif.CRAB MD5: 4df9f3ba5577040c012639d569f8b85d
SHA1: cc9f4d8749a9a80619c69bcc55db6e6e9da23941
SHA256: 015b4732eee19f3505db84b870a83afa2a1547c3d0fb6bdd7a4019a436354903 		Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\4UWH.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\4UWH.png.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\53Q_0.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\53Q_0.png.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\6ccP.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\6ccP.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\FEt0p.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\FEt0p.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\i9dLH-.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\i9dLH-.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\IbbrTAOo7BYxX8.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\IbbrTAOo7BYxX8.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\rISQujB.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\rISQujB.gif.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\vakwu-ha.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\vakwu-ha.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\XXuC4.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\XXuC4.png.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\YoxEuGeanDGY4QAa8cq.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\b8-Mos8\Za X3aTKSwL\YoxEuGeanDGY4QAa8cq.png.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\Camera Roll\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Pictures\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Pictures\eeXTSpg.gif - Access
C:\Users\CIiHmnxMn6Ps\Pictures\eeXTSpg.gif.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\EUyjRp.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\EUyjRp.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\F6Wy7oMJstNax.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\F6Wy7oMJstNax.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\f7TvC6rWzjy.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\f7TvC6rWzjy.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\p9oiGifFzTvv7jSgM-.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\p9oiGifFzTvv7jSgM-.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\Saved Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Pictures\Tvd h.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\Tvd h.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\udUzCBL5B7Z-7FIsJh.bmp - Access
C:\Users\CIiHmnxMn6Ps\Pictures\udUzCBL5B7Z-7FIsJh.bmp.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\XKwue.jpg - Access
C:\Users\CIiHmnxMn6Ps\Pictures\XKwue.jpg.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Pictures\ZqxaCOipsKT5.png - Access
C:\Users\CIiHmnxMn6Ps\Pictures\ZqxaCOipsKT5.png.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Saved Games\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Searches\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Searches\Everywhere.search-ms - Access
C:\Users\CIiHmnxMn6Ps\Searches\Everywhere.search-ms.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Searches\Indexed Locations.search-ms - Access
C:\Users\CIiHmnxMn6Ps\Searches\Indexed Locations.search-ms.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Videos\-AplstbDmCQD3oDCy.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\-AplstbDmCQD3oDCy.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\1c2Jmjy6k.mkv - Access
C:\Users\CIiHmnxMn6Ps\Videos\1c2Jmjy6k.mkv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\2n4nZ3gf87.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\2n4nZ3gf87.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\BLcMVmZaSiBP.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\BLcMVmZaSiBP.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\CIiHmnxMn6Ps\Videos\dK28cSW.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\dK28cSW.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\7e4737mPEcA8inKdm.avi - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\7e4737mPEcA8inKdm.avi.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\a7Mtp cJr1y_8MHeKrA1.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\a7Mtp cJr1y_8MHeKrA1.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\AbgPMxDOx4TnwfCcq.avi - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\AbgPMxDOx4TnwfCcq.avi.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\ar3yjzjm46F-M6l.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\ar3yjzjm46F-M6l.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\\CRAB-DECRYPT.txt - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\crs9qYvbI2xPd.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\crs9qYvbI2xPd.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\e9cuemy3XLYoCAg7ejfR.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\e9cuemy3XLYoCAg7ejfR.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\EXMj.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\EXMj.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\JKWcwZOMczfLub.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\JKWcwZOMczfLub.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\L80bJaNXTDH.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\L80bJaNXTDH.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\LQYr6gGsV Fg-Ag.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\LQYr6gGsV Fg-Ag.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\MFdO1mAOTa3WHOD9S.mkv - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\MFdO1mAOTa3WHOD9S.mkv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\myel9Pdcrz-MKiCYf5.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\myel9Pdcrz-MKiCYf5.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\OcDJ kX.avi - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\OcDJ kX.avi.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\qh7SA2ctQPV1gL2ORkss.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\qh7SA2ctQPV1gL2ORkss.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\y1JePSPm7NEus.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\y1JePSPm7NEus.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\Y6kBDaujw2sVQo.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\Y6kBDaujw2sVQo.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\zuegViOi.avi - Access
C:\Users\CIiHmnxMn6Ps\Videos\GK-87nNA_aQP40sS\zuegViOi.avi.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\H3U0ud1BB7bBE1PeW.avi - Access
C:\Users\CIiHmnxMn6Ps\Videos\H3U0ud1BB7bBE1PeW.avi.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\h75W.flv - Access
C:\Users\CIiHmnxMn6Ps\Videos\h75W.flv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\lR-mknq4km7d.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\lR-mknq4km7d.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\luoWXdkRjlGth2Y7h.mp4 - Access
C:\Users\CIiHmnxMn6Ps\Videos\luoWXdkRjlGth2Y7h.mp4.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\Nactr2Hsh7mc51lhW.mkv - Access
C:\Users\CIiHmnxMn6Ps\Videos\Nactr2Hsh7mc51lhW.mkv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\pBM4bn87eE4.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\pBM4bn87eE4.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\u2Y1vuSR6iZoL.swf - Access
C:\Users\CIiHmnxMn6Ps\Videos\u2Y1vuSR6iZoL.swf.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\ZdL9Izmj8YKI T-FBxF.mkv - Access
C:\Users\CIiHmnxMn6Ps\Videos\ZdL9Izmj8YKI T-FBxF.mkv.CRAB - Access, Read
C:\Users\CIiHmnxMn6Ps\Videos\ZzkApoWzXc.mkv - Access
C:\Users\CIiHmnxMn6Ps\Videos\ZzkApoWzXc.mkv.CRAB - Access, Read
C:\Users\CIIHMN~1\AppData\Local\Temp\\pidor.bmp - Access
C:\Users\\CRAB-DECRYPT.txt MD5: c0f9e48bf74053ad638796ebbcb2bdf1
SHA1: 32174c0dcfe1d01838ecb03c22f6991065d9890a
SHA256: dda64d29b501f41856c7888de2a276bd73ab9fc3bba5155fe373230fc9e18082 		Access
C:\Users\Default User\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\History\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\InputPersonalization\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\InputPersonalization\TrainedDataStore\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Gadgets\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\settings.ini - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\settings.ini.CRAB - Access, Read
C:\Users\Default\AppData\Local\Temp\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Temporary Internet Files\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Cookies\\CRAB-DECRYPT.txt - Access
C:\Users\Default\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Desktop\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Links\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NetHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NTUSER.DAT.LOG1 - Access
C:\Users\Default\NTUSER.DAT.LOG1.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT.LOG2 - Access
C:\Users\Default\NTUSER.DAT.LOG2.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf - Access
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access, Read
C:\Users\Default\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Saved Games\\CRAB-DECRYPT.txt - Access
C:\Users\Default\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\AccountPictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\RecordedTV.library-ms - Access
C:\Users\Public\Libraries\RecordedTV.library-ms.CRAB - Access, Read
C:\Users\Public\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\\CRAB-DECRYPT.txt - Access
Registry (12)
»
Registry Key Name Operations
HKEY_CURRENT_USER\Control Panel\International Access, Read
HKEY_CURRENT_USER\Keyboard Layout\Preload Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access, Read
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters Access, Read
Mutex (1)
»
Mutex Name Operations
Global\pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def Access
URL (5)
»
URL Operations
ipv4bot.whatismyipaddress.com/ GET
46.139.176.151/steazaei?deay=owster POST
86.101.230.109/zaeafau POST
46.238.18.241/ayssay?ore=phow&bai=ph POST
188.254.142.91/ghowb?a=za&bowge=bapl POST
IP (7)
»
IP Protocols
89.203.10.56 DNS, UDP
94.249.60.127 DNS, UDP
189.75.183.21 DNS, UDP
46.139.176.151 HTTP, TCP
86.101.230.109 HTTP, TCP
46.238.18.241 HTTP, TCP
188.254.142.91 HTTP, TCP
Export IOCs
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image